Browse CVEs

CRITICAL 9.8 CVE-2021-21832 A memory corruption vulnerability exists in the ISO Parsing functionality of Disc Soft Ltd Deamon Tools Pro 8.3.0.0767. A specially crafted malformed… Daemon Tools No fix yet Fix from $2,3002021-08-17 CRITICAL 9.8 CVE-2021-22156 An integer overflow vulnerability in the calloc() function of the C runtime library of affected versions of BlackBerry® QNX Software Development Plat… Qnx Software Development Platform 6.5.0+ Fix from $2,3002021-08-17 HIGH 8.8 CVE-2021-21859 An exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.… Debian Linux No fix yet Fix from $1,9502021-08-16 HIGH 7.8 CVE-2021-34536 Windows Storage Spaces Controller Elevation of Privilege Vulnerability Windows 10 Patch available Fix from $1,9502021-08-12 HIGH 7.8 CVE-2021-38185 GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file, because of a dstring.c ds_fgetstr integer overflow that … Cpio after 2.13 Fix from $1,9502021-08-08 HIGH 7.8 CVE-2021-38166 In kernel/bpf/hashtab.c in the Linux kernel through 5.13.8, there is an integer overflow and out-of-bounds write when many elements are placed in a s… Linux Kernel 5.10.60 / 5.13.12+ Fix from $1,9502021-08-07 HIGH 7.5 CVE-2021-33403 An integer overflow in the transfer function of a smart contract implementation for Lancer Token, an Ethereum ERC20 token, allows the owner to cause … Blocklancertoken No fix yet Fix from $1,9502021-08-03 HIGH 7.5 CVE-2021-34270 An integer overflow in the mintToken function of a smart contract implementation for Doftcoin Token, an Ethereum ERC20 token, allows the owner to cau… Doftcoin No fix yet Fix from $1,9502021-08-03 HIGH 7.8 CVE-2021-22418 A component of the HarmonyOS has a Integer Overflow or Wraparound vulnerability. Local attackers may exploit this vulnerability to cause memory overw… Harmonyos Mitigation only Fix from $1,9502021-08-03 HIGH 7.8 CVE-2021-22422 A component of the HarmonyOS has a Integer Overflow or Wraparound vulnerability. Local attackers may exploit this vulnerability to cause memory overw… Harmonyos Mitigation only Fix from $1,9502021-08-03 HIGH 7.5 CVE-2021-22412 There is an Integer Overflow Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause random kernel address access. Emui No fix yet Fix from $1,9502021-08-02 HIGH 7.5 CVE-2021-22413 There is an Integer Overflow Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the system to reset. Emui No fix yet Fix from $1,9502021-08-02 CRITICAL 9.8 CVE-2021-22388 There is an Integer Overflow Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause certain codes to be executed. Emui No fix yet Fix from $2,3002021-08-02 MEDIUM 5.5 CVE-2021-37600 An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way th… Util Linux after 2.37.1 Fix from $1,6002021-07-30 HIGH 7.1 CVE-2021-25803 A buffer overflow vulnerability in the vlc_input_attachment_New component of VideoLAN VLC Media Player 3.0.11 allows attackers to cause an out-of-bou… Vlc Media Player Mitigation only Fix from $1,9502021-07-26 HIGH 7.5 CVE-2021-31292 An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap-based buffer overflow and cause a denial of service (D… Debian Linux Patch available Fix from $1,9502021-07-26 CRITICAL 9.8 CVE-2021-24036 Passing an attacker controlled size when creating an IOBuf could cause integer overflow, leading to an out of bounds write on the heap with the possi… Folly 4.80.5 / 2021.07.22.00+ Fix from $2,3002021-07-23 CRITICAL 9.1 CVE-2021-35942 The wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary memory in parse_param (in posix/wordexp.c) when called… Debian Linux 2.31+ Fix from $2,3002021-07-22 HIGH 7.5 CVE-2021-32761EPSS 31% Redis is an in-memory database that persists on disk. A vulnerability involving out-of-bounds read and integer overflow to buffer overflow exists sta… Redis 5.0.13 / 6.0.15+ Fix from $1,9502021-07-21 HIGH 8.8 CVE-2020-19497 Integer overflow vulnerability in Mat_VarReadNextInfo5 in mat5.c in tbeu matio (aka MAT File I/O Library) 1.5.17, allows attackers to cause a Denial … Matio Patch available Fix from $1,9502021-07-21 MEDIUM 5.5 CVE-2020-19490 tinyexr 0.9.5 has a integer overflow over-write in tinyexr::DecodePixelData in tinyexr.h, related to OpenEXR code. Tinyexr Patch available Fix from $1,6002021-07-21 HIGH 7.8 CVE-2021-33909EPSS 10% fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, leading to an integer overflow… Linux Kernel 3.13 / 4.4.276+ Fix from $1,9502021-07-20 CRITICAL 9.8 CVE-2021-20110EPSS 7% Due to Manage Engine Asset Explorer Agent 1.0.34 not validating HTTPS certificates, an attacker on the network can statically configure their IP addr… Manageengine Assetexplorer Mitigation only Fix from $2,3002021-07-19 HIGH 7.8 CVE-2021-34512 Windows Storage Spaces Controller Elevation of Privilege Vulnerability Windows 10 Patch available Fix from $1,9502021-07-14 HIGH 7.8 CVE-2021-34513 Windows Storage Spaces Controller Elevation of Privilege Vulnerability Windows 10 Patch available Fix from $1,9502021-07-14 HIGH 7.8 CVE-2021-34510 Windows Storage Spaces Controller Elevation of Privilege Vulnerability Windows 10 Patch available Fix from $1,9502021-07-14 CRITICAL 9.8 CVE-2020-22874 Integer overflow vulnerability in function Jsi_ObjArraySizer in jsish before 3.0.8, allows remote attackers to execute arbitrary code. Jsish 3.0.8+ Fix from $2,3002021-07-13 CRITICAL 9.8 CVE-2020-22875 Integer overflow vulnerability in function Jsi_ObjSetLength in jsish before 3.0.6, allows remote attackers to execute arbitrary code. Jsish 3.0.6+ Fix from $2,3002021-07-13 HIGH 7.8 CVE-2020-7872 DaviewIndy v8.98.7.0 and earlier versions have a Integer overflow vulnerability, triggered when the user opens a malformed format file that is mishan… Daviewindy after 8.98.7 Fix from $1,9502021-07-12 CRITICAL 9.8 CVE-2021-21807 An integer overflow vulnerability exists in the DICOM parse_dicom_meta_info functionality of Accusoft ImageGear 19.9. A specially crafted malformed f… Imagegear No fix yet Fix from $2,3002021-07-07