Browse CVEs

MEDIUM 6.5 CVE-2020-19720 An unhandled memory allocation failure in Core/AP4IkmsAtom.cpp of Bento 1.5.1-628 causes a NULL pointer dereference, leading to a denial of service (… Bento4 No fix yet Fix from $1,6002021-07-13 MEDIUM 6.5 CVE-2020-19722 An unhandled memory allocation failure in Core/Ap4Atom.cpp of Bento 1.5.1-628 causes a direct copy to NULL pointer dereference, leading to a denial o… Bento4 No fix yet Fix from $1,6002021-07-13 MEDIUM 6.5 CVE-2020-19716 A buffer overflow vulnerability in the Databuf function in types.cpp of Exiv2 v0.27.1 leads to a denial of service (DOS). Debian Linux Mitigation only Fix from $1,6002021-07-13 CRITICAL 9.8 CVE-2021-34552 Pillow through 8.2.0 and PIL (aka Python Imaging Library) through 1.1.7 allow an attacker to pass controlled parameters directly into a convert funct… Pillow after 8.2.0 Fix from $2,3002021-07-13 CRITICAL 9.8 CVE-2020-22873 Buffer overflow vulnerability in function NumberToPrecisionCmd in jsish before 3.0.7, allows remote attackers to execute arbitrary code. Jsish 3.0.7+ Fix from $2,3002021-07-13 HIGH 7.5 CVE-2020-22876 Buffer Overflow vulnerability in quickjs.c in QuickJS, allows remote attackers to cause denial of service. This issue is resolved in the 2020-07-05 r… Quickjs 2020-07-05+ Fix from $1,9502021-07-13 CRITICAL 9.8 CVE-2020-22884 Buffer overflow vulnerability in function jsvGetStringChars in Espruino before RELEASE_2V09, allows remote attackers to execute arbitrary code. Espruino 2.09+ Fix from $2,3002021-07-13 HIGH 7.5 CVE-2020-22885 Buffer overflow vulnerability in mujs before 1.0.8 due to recursion in the GC scanning phase, allows remote attackers to cause a denial of service. Mujs 1.0.8+ Fix from $1,9502021-07-13 HIGH 7.5 CVE-2020-22886 Buffer overflow vulnerability in function jsG_markobject in jsgc.c in mujs before 1.0.8, allows remote attackers to cause a denial of service. Mujs 1.0.8+ Fix from $1,9502021-07-13 HIGH 7.8 CVE-2021-31893 A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3), SIMATIC PDM (All … Simatic Pcs Firmware 5.4 / 9.2+ Fix from $1,9502021-07-13 HIGH 8.1 CVE-2021-31895 A vulnerability has been identified in RUGGEDCOM i800 (All versions < V4.3.7), RUGGEDCOM i801 (All versions < V4.3.7), RUGGEDCOM i802 (All versions <… Ruggedcom Ros I800 4.3.7+ Fix from $1,9502021-07-13 CRITICAL 9.8 CVE-2021-1965 Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in Snapdragon Auto, Snapdragon Compute, Snapdragon Connect… Aqt1000 Firmware Patch available Fix from $2,3002021-07-13 HIGH 7.5 CVE-2021-1907 Possible buffer overflow due to lack of length check in BA request in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consum… Apq8053 Firmware Patch available Fix from $1,9502021-07-13 MEDIUM 6.7 CVE-2021-1931 Possible buffer overflow due to improper validation of buffer length while processing fast boot commands in Snapdragon Auto, Snapdragon Compute, Snap… Aqt1000 Firmware Patch available Fix from $1,6002021-07-13 HIGH 7.8 CVE-2021-1889 Possible buffer overflow due to lack of length check in Trusted Application in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdrag… Apq8017 Firmware Mitigation only Fix from $1,9502021-07-13 HIGH 8.8 CVE-2021-22129 Multiple instances of incorrect calculation of buffer size in the Webmail and Administrative interface of FortiMail before 6.4.5 may allow an authent… Fortimail 6.0.11 / 6.2.7+ Fix from $1,9502021-07-09 HIGH 7.8 CVE-2021-36148 An issue was discovered in ACRN before 2.5. dmar_free_irte in hypervisor/arch/x86/vtd.c allows an irte_alloc_bitmap buffer overflow. Acrn 2.5+ Fix from $1,9502021-07-02 HIGH 8.8 CVE-2021-33537 In Weidmueller Industrial WLAN devices in multiple versions an exploitable remote code execution vulnerability exists in the iw_webs configuration pa… Ie Wl Bl Ap Cl Eu Firmware after 1.16.18 Fix from $1,9502021-06-25 HIGH 7.8 CVE-2020-4609 IBM Security Sevret Server (IBM Security Verify Privilege Manager 10.8.2) is vulnerable to a buffer overflow, caused by improper bounds checking. A l… Security Verify Privilege Manager 11.0+ Fix from $1,9502021-06-25 HIGH 7.8 CVE-2021-34185 Miniaudio 0.10.35 has an integer-based buffer overflow caused by an out-of-bounds left shift in drwav_bytes_to_u32 in miniaudio.h Miniaudio No fix yet Fix from $1,9502021-06-25 HIGH 8.8 CVE-2020-7862 A vulnerability in agent program of HelpU remote control solution could allow an authenticated remote attacker to execute arbitrary commands This vul… Helpuftclient Mitigation only Fix from $1,9502021-06-24 HIGH 7.5 CVE-2021-31664 RIOT-OS 2021.01 before commit 44741ff99f7a71df45420635b238b9c22093647a contains a buffer overflow which could allow attackers to obtain sensitive inf… Riot Patch available Fix from $1,9502021-06-18 HIGH 7.5 CVE-2021-33185 SerenityOS contains a buffer overflow in the set_range test in TestBitmap which could allow attackers to obtain sensitive information. Serenityos No fix yet Fix from $1,9502021-06-18 HIGH 7.5 CVE-2021-31660 RIOT-OS 2021.01 before commit 85da504d2dc30188b89f44c3276fc5a25b31251f contains a buffer overflow which could allow attackers to obtain sensitive inf… Riot Patch available Fix from $1,9502021-06-18 HIGH 7.5 CVE-2021-31661 RIOT-OS 2021.01 before commit 609c9ada34da5546cffb632a98b7ba157c112658 contains a buffer overflow that could allow attackers to obtain sensitive info… Riot Patch available Fix from $1,9502021-06-18 HIGH 7.5 CVE-2021-31662 RIOT-OS 2021.01 before commit 07f1254d8537497552e7dce80364aaead9266bbe contains a buffer overflow which could allow attackers to obtain sensitive inf… Riot Patch available Fix from $1,9502021-06-18 HIGH 7.5 CVE-2021-31663 RIOT-OS 2021.01 before commit bc59d60be60dfc0a05def57d74985371e4f22d79 contains a buffer overflow which could allow attackers to obtain sensitive inf… Riot Patch available Fix from $1,9502021-06-18 CRITICAL 9.8 CVE-2021-21281 Contiki-NG is an open-source, cross-platform operating system for internet of things devices. A buffer overflow vulnerability exists in Contiki-NG ve… Contiki Ng 4.6+ Fix from $2,3002021-06-18 CRITICAL 9.8 CVE-2021-21282 Contiki-NG is an open-source, cross-platform operating system for internet of things devices. In versions prior to 4.5, buffer overflow can be trigge… Contiki Ng 4.5+ Fix from $2,3002021-06-18 HIGH 7.5 CVE-2021-20027 A buffer overflow vulnerability in SonicOS allows a remote attacker to cause a Denial of Service (DoS) by sending a specially crafted request. This v… Sonicos after 7.0.1-r1262 Fix from $1,9502021-06-14