CVE-2021-38517

CVE-2021-38517 affects certain NETGEAR routers with out-of-bounds reads/writes: R6400 (<1.0.1.70), RAX75 (<1.0.4.120), RAX80 (<1.0.4.120), XR300 (

Foxit PDF Reader和Foxit PDF Editor 安全漏洞

Foxit PDF Reader and Foxit PDF Editor are both products of Foxit China. Foxit PDF Reader is a PDF reader and Foxit PDF Editor is a PDF editor. A security vulnerability exists in versions prior to 11.0.1, which can be exploited to allow an attacker to write arbitrary files via submitForm...

EulerOS 2.0 SP9 : kernel (EulerOS-SA-2021-2246)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in the Linux kernel through 5.2.13. nbdgenlstatus in drivers/block/nbd.c does not check the nlaneststartnoflag return...

Directory Traversal

Overview bikeshed is a pre-processor for spec documents. Affected versions of this package are vulnerable to Directory Traversal. This can occur when an untrusted source file containing include, include-code or include-raw block is processed. The contents of arbitrary files could be disclosed in...

CVE-2020-36468

An issue was discovered in the cgc crate through 2020-12-10 for Rust. Ptr::write performs non-atomic write operations on an underlying pointer...

go-unarr 路径遍历漏洞

go-unarr is an open source go language library for decompressing RAR, TAR, ZIP and 7z archives. go-unarr version 0.1.1 is vulnerable to a directory traversal vulnerability that could be exploited to write arbitrary files on the system via specially crafted TAR archives...

PT-2021-7393 · Usbredir +5 · Usbredir +5

Name of the Vulnerable Software and Affected Versions: usbredir versions prior to 0.11.0 Description: A use-after-free issue was found in the usbredirparser serialize function in usbredirparser/usbredirparser.c. This occurs when serializing large amounts of buffered write data, particularly in...

CVE-2021-32016

An issue was discovered in JUMP AMS 3.6.0.04.009-2487. A JUMP SOAP endpoint permitted the writing of arbitrary files to a user-controlled location on the remote filesystem with user-controlled content via directory traversal, potentially leading to remote code and command execution...

JUMP 路径遍历漏洞

JUMP is an asset management solution from the French company JUMP. version 3.6.0.04.009-2487 of JUMP AMS contains a security vulnerability that stems from the fact that the application allows arbitrary files to be written to a user-controlled location on a remote file system with user-controlled...

Apple macOS Big Sur Buffer Overflow Vulnerability (CNVD-2021-102841)

Apple macOS Big Sur is a mobile application app from Apple Inc. Apple macOS Big Sur is vulnerable to a buffer error that could be exploited by attackers to run specially crafted programs that trigger out-of-bounds writes and cause the system to unexpectedly terminate or write to kernel memory...

Apple macOS Big Sur 缓冲区错误漏洞

Apple macOS Big Sur is a mobile application app from Apple USA. Apple macOS Big Sur 11.5 suffers from a buffer error vulnerability that stems from a boundary error in the Intel Graphics Driver. A local attacker can run a specially designed program to trigger out-of-bounds writes...

MuPDF 缓冲区错误漏洞

Artifex Software MuPDF is a free, lightweight PDF reader from Artifex Software, USA. A buffer error vulnerability exists in MuPDF, which stems from a color converter in the product's buffer that does not properly take into account the size of the hash table's maximum key, and can be exploited by ...

CVE-2021-0592

In various functions in WideVine, there are possible out of bounds writes due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID:...

CVE-2021-0592

CVE-2021-0592 is a Widevine DRM code-execution vulnerability described across multiple sources as out-of-bounds writes caused by improper input validation in WideVine. The NVD entry lists a network attack vector with high impact and a base CVSS v3 score of 8.8 (I:H, A:H, C:H) and notes that user ...

CVE-2021-0592

In various functions in WideVine, there are possible out of bounds writes due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID:...

EulerOS Virtualization 2.9.1 : unbound (EulerOS-SA-2021-2175)

According to the versions of the unbound packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - DISPUTED Unbound before 1.9.5 allows an out-of-bounds write via a compressed name in rdatacopy. NOTE: The vendor disputes that...

Echo ShareCare 代码问题漏洞

ShareCare is a clinical and financial software system from Echo Group. A security vulnerability exists in Echo ShareCare version 8.15.5, which stems from the file upload functionality in "Access/DownloadFeedMnt/FileUploadUpd.cfm" that is susceptible to an unrestricted upload vulnerability via the...

Debian DLA-2705-1 : scilab - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2705 advisory. Multiple issues have been discovered in scilab, particularly in ezXML embedded library: CVE-2021-30485 Descriptionincorrect memory handling, leading to a NULL...

The vulnerability of the `refill` function in the `ImfFastHuf.cpp` component of the software for storing OpenEXR images with a wide dynamic range of brightness levels. This vulnerability arises from the operation of writing data beyond the buffer boundaries in memory, allowing an attacker to cause a service failure.

The vulnerability of the refill function in the ImfFastHuf.cpp component of the software for storing OpenEXR images with wide dynamic range of brightness values is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to cau...

CVE-2021-21788

A privilege escalation vulnerability exists in the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Privileged I/O write requests. During IOCTL 0x9c40a0dc, the first dword passed in the input buffer is the device port to write to and the word at offset 4 is the value to write via...