Browse CVEs

HIGH 8.8 CVE-2021-21808 A memory corruption vulnerability exists in the PNG png_palette_process functionality of Accusoft ImageGear 19.9. A specially crafted malformed file … Imagegear No fix yet Fix from $1,9502021-06-11 HIGH 7.8 CVE-2021-25408 A possible buffer overflow vulnerability in NPU driver prior to SMR JUN-2021 Release 1 allows arbitrary memory write and code execution. Android Mitigation only Fix from $1,9502021-06-11 HIGH 8.0 CVE-2020-24474 Buffer overflow in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.48.ce3e3bd2 may allow an aut… Baseboard Management Controller Firmware 2.48.ce3e3bd2+ Fix from $1,9502021-06-09 HIGH 8.8 CVE-2021-0101 Buffer overflow in the BMC firmware for Intel(R) Server BoardM10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow an unauthenticated user… Efi Bios 7215 Mitigation only Fix from $1,9502021-06-09 HIGH 7.8 CVE-2020-11292 Possible buffer overflow in voice service due to lack of input validation of parameters in QMI Voice API in Snapdragon Auto, Snapdragon Compute, Snap… Apq8009 Firmware Mitigation only Fix from $1,9502021-06-09 CRITICAL 9.8 CVE-2021-20699 Sharp NEC Displays ((UN462A R1.300 and prior to it, UN462VA R1.300 and prior to it, UN492S R1.300 and prior to it, UN492VS R1.300 and prior to it, UN… Un462a Firmware Mitigation only Fix from $2,3002021-06-07 CRITICAL 9.8 CVE-2017-20005 NGINX before 1.13.6 has a buffer overflow for years that exceed four digits, as demonstrated by a file with a modification date in 1969 that causes a… Nginx 1.13.6+ Fix from $2,3002021-06-06 CRITICAL 9.8 CVE-2021-30475 aom_dsp/noise_model.c in libaom in AOMedia before 2021-03-24 has a buffer overflow. Fedora 2021-03-24+ Fix from $2,3002021-06-04 MEDIUM 5.5 CVE-2021-3569 A stack corruption bug was found in libtpms in versions before 0.7.2 and before 0.8.0 while decrypting data using RSA. This flaw could result in a SI… Enterprise Linux 0.7.2 / 0.8.0+ Fix from $1,6002021-06-03 CRITICAL 9.8 CVE-2009-0948 Multiple buffer overflows in the (1) cdf_read_sat, (2) cdf_read_long_sector_chain, and (3) cdf_read_ssat function in file before 5.02. Files 5.02+ Fix from $2,3002021-06-02 CRITICAL 9.8 CVE-2021-20236 A flaw was found in the ZeroMQ server in versions before 4.3.3. This flaw allows a malicious client to cause a stack buffer overflow on the server by… Ceph Storage 4.3.3+ Fix from $2,3002021-05-28 CRITICAL 9.8 CVE-2021-31535EPSS 11% LookupCol.c in X.Org X through X11R7.7 and libX11 before 1.7.1 might allow remote attackers to execute arbitrary code. The libX11 XLookupColor reques… Fedora 1.7.1+ Fix from $2,3002021-05-27 HIGH 8.8 CVE-2021-22908EPSS 69% A buffer overflow vulnerability exists in Windows File Resource Profiles in 9.X allows a remote authenticated user with privileges to browse SMB shar… Connect Secure Mitigation only Fix from $1,9502021-05-27 MEDIUM 6.5 CVE-2020-22026 Buffer Overflow vulnerability exists in FFmpeg 4.2 in the config_input function at libavfilter/af_tremolo.c, which could let a remote malicious user … Debian Linux No fix yet Fix from $1,6002021-05-26 MEDIUM 6.5 CVE-2020-22028 Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_vertically_8 at libavfilter/vf_avgblur.c, which could cause a remote Denial of Service. Debian Linux No fix yet Fix from $1,6002021-05-26 MEDIUM 6.5 CVE-2020-22024 Buffer Overflow vulnerability in FFmpeg 4.2 at the lagfun_frame16 function in libavfilter/vf_lagfun.c, which could let a remote malicious user cause … Ffmpeg No fix yet Fix from $1,6002021-05-26 MEDIUM 6.5 CVE-2020-22019 Buffer Overflow vulnerability in FFmpeg 4.2 at convolution_y_10bit in libavfilter/vf_vmafmotion.c, which could let a remote malicious user cause a De… Debian Linux No fix yet Fix from $1,6002021-05-26 MEDIUM 6.5 CVE-2020-22020 Buffer Overflow vulnerability in FFmpeg 4.2 in the build_diff_map function in libavfilter/vf_fieldmatch.c, which could let a remote malicious user ca… Debian Linux No fix yet Fix from $1,6002021-05-26 MEDIUM 6.5 CVE-2020-22021 Buffer Overflow vulnerability in FFmpeg 4.2 at filter_edges function in libavfilter/vf_yadif.c, which could let a remote malicious user cause a Denia… Debian Linux No fix yet Fix from $1,6002021-05-26 HIGH 8.8 CVE-2020-22015 Buffer Overflow vulnerability in FFmpeg 4.2 in mov_write_video_tag due to the out of bounds in libavformat/movenc.c, which could let a remote malicio… Debian Linux No fix yet Fix from $1,9502021-05-26 HIGH 8.8 CVE-2020-24020 Buffer Overflow vulnerability in FFMpeg 4.2.3 in dnn_execute_layer_pad in libavfilter/dnn/dnn_backend_native_layer_pad.c due to a call to memcpy with… Ffmpeg Mitigation only Fix from $1,9502021-05-26 MEDIUM 6.7 CVE-2021-29202 A local buffer overflow vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iL… Integrated Lights Out 4 2.44 / 2.78+ Fix from $1,6002021-05-25 HIGH 7.5 CVE-2021-30191 CODESYS V2 Web-Server before 1.1.9.20 has a a Buffer Copy without Checking the Size of the Input. 750 893 Firmware Mitigation only Fix from $1,9502021-05-25 HIGH 7.5 CVE-2020-21041 Buffer Overflow vulnerability exists in FFmpeg 4.1 via apng_do_inverse_blend in libavcodec/pngenc.c, which could let a remote malicious user cause a … Debian Linux Patch available Fix from $1,9502021-05-24 HIGH 7.8 CVE-2021-3438 A potential buffer overflow in the software drivers for certain HP LaserJet products and Samsung product printers could lead to an escalation of priv… Color Laser 150 4zb94a Mitigation only Fix from $1,9502021-05-20 HIGH 7.8 CVE-2021-29612 TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a heap buffer overflow in Eigen implementation of `tf.… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,9502021-05-14 HIGH 7.8 CVE-2021-29540 TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a heap buffer overflow to occur in `Conv2DBackpropFilter… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,9502021-05-14 HIGH 7.8 CVE-2021-29520 TensorFlow is an end-to-end open source platform for machine learning. Missing validation between arguments to `tf.raw_ops.Conv3DBackprop*` operation… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,9502021-05-14 HIGH 7.8 CVE-2021-29512 TensorFlow is an end-to-end open source platform for machine learning. If the `splits` argument of `RaggedBincount` does not specify a valid `SparseT… Tensorflow 2.3.3 / 2.4.2+ Fix from $1,9502021-05-14 HIGH 7.8 CVE-2020-27823 A flaw was found in OpenJPEG’s encoder. This flaw allows an attacker to pass specially crafted x,y offset input to OpenJPEG to use during encoding. T… Fedora 2.4.0+ Fix from $1,9502021-05-13