Browse CVEs

HIGH 7.5 CVE-2021-4091 A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker could send a series of search r… Enterprise Linux Desktop 1.3.10.2+ Fix from $1,9502022-02-18 HIGH 7.0 CVE-2021-22600 KEVEPSS 6% A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or … Linux Kernel 4.14.259 / 4.19.222+ Fix from $1,9502022-01-26 HIGH 7.5 CVE-2022-23012 On BIG-IP versions 15.1.x before 15.1.4.1 and 14.1.x before 14.1.4.5, when the HTTP/2 profile is configured on a virtual server, undisclosed requests… Big Ip Access Policy Manager 14.1.4.5 / 15.1.4.1+ Fix from $1,9502022-01-25 MEDIUM 5.5 CVE-2021-40572 The binary MP4Box in Gpac 1.0.1 has a double-free bug in the av1dmx_finalize function in reframe_av1.c, which allows attackers to cause a denial of s… Gpac Patch available Fix from $1,6002022-01-13 MEDIUM 5.5 CVE-2021-40573 The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the gf_list_del function in list.c, which allows attackers to cause a denial of se… Gpac Patch available Fix from $1,6002022-01-13 HIGH 7.8 CVE-2021-40574 The binary MP4Box in Gpac from 0.9.0-preview to 1.0.1 has a double-free vulnerability in the gf_text_get_utf8_line function in load_text.c, which all… Gpac after 1.0.1 Fix from $1,9502022-01-13 MEDIUM 5.5 CVE-2021-40569 The binary MP4Box in Gpac through 1.0.1 has a double-free vulnerability in the iloc_entry_del funciton in box_code_meta.c, which allows attackers to … Gpac after 1.0.1 Fix from $1,6002022-01-13 HIGH 7.8 CVE-2021-40570 The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the avc_compute_poc function in av_parsers.c, which allows attackers to cause a de… Gpac Patch available Fix from $1,9502022-01-13 HIGH 7.8 CVE-2021-40571 The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the ilst_box_read function in box_code_apple.c, which allows attackers to cause a … Gpac Patch available Fix from $1,9502022-01-13 MEDIUM 5.5 CVE-2021-37529 A double-free vulnerability exists in fig2dev through 3.28a is affected by: via the free_stream function in readpics.c, which could cause a denial of… Debian Linux after 3.2.8a Fix from $1,6002022-01-12 HIGH 7.5 CVE-2021-40038 There is a Double free vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service integrity. Harmonyos 2.0+ Fix from $1,9502022-01-10 CRITICAL 9.8 CVE-2021-37120 There is a Double free vulnerability in Smartphone.Successful exploitation of this vulnerability may cause a kernel crash or privilege escalation. Emui No fix yet Fix from $2,3002022-01-03 MEDIUM 5.5 CVE-2021-45288 A Double Free vulnerability exists in filedump.c in GPAC 1.0.1, which could cause a Denail of Service via a crafted file in the MP4Box command. Gpac Patch available Fix from $1,6002021-12-21 CRITICAL 9.8 CVE-2021-44732 Mbed TLS before 3.0.1 has a double free in certain out-of-memory conditions, as demonstrated by an mbedtls_ssl_set_session() failure. Debian Linux 2.16.12 / 2.28.0+ Fix from $2,3002021-12-20 HIGH 7.5 CVE-2021-37072 There is a Incorrect Calculation of Buffer Size vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to memory c… Harmonyos 2.0+ Fix from $1,9502021-12-07 MEDIUM 6.5 CVE-2021-43268 An issue was discovered in VxWorks 6.9 through 7. In the IKE component, a specifically crafted packet may lead to reading beyond the end of a buffer,… Vxworks after 7.0 Fix from $1,6002021-11-24 HIGH 7.5 CVE-2021-40873 An issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66, and uaToolkit Embedded before 1.40. Remote attackers to cause a … Datafeed Opc Suite 1.40 / 1.73+ Fix from $1,9502021-11-10 HIGH 7.1 CVE-2021-1119 NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it can double-free a pointer, which may lead to denial … Virtual Gpu 8.9 / 11.6+ Fix from $1,9502021-10-29 HIGH 7.8 CVE-2021-21797EPSS 15% An exploitable double-free vulnerability exists in the JavaScript implementation of Nitro Pro PDF. A specially crafted document can cause a reference… Nitro Pro No fix yet Fix from $1,9502021-10-18 CRITICAL 9.1 CVE-2021-22945EPSS 7% When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory a… Fedora after 8.0.26 Fix from $2,3002021-09-23 HIGH 7.5 CVE-2021-34768 Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Ca… Ios Xe Mitigation only Fix from $1,9502021-09-23 HIGH 7.5 CVE-2021-34769 Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Ca… Ios Xe Mitigation only Fix from $1,9502021-09-23 HIGH 8.6 CVE-2021-1565 Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Ca… Ios Xe Mitigation only Fix from $1,9502021-09-23 HIGH 8.8 CVE-2021-39528 An issue was discovered in libredwg through v0.10.1.3751. dwg_free_MATERIAL_private() in dwg.spec has a double free. Libredwg after 0.10.1.3751 Fix from $1,9502021-09-20 HIGH 7.8 CVE-2021-1934 Possible memory corruption due to improper check when application loader object is explicitly destructed while application is unloading in Snapdragon… Apq8017 Firmware Mitigation only Fix from $1,9502021-09-09 HIGH 7.8 CVE-2021-30703 A double free issue was addressed with improved memory management. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Security Update 2021-0… Ipados 7.5 / 11.4+ Fix from $1,9502021-09-08 HIGH 7.8 CVE-2021-1875 A double free issue was addressed with improved memory management. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003… Ipados 7.4 / 11.3+ Fix from $1,9502021-09-08 HIGH 7.5 CVE-2021-40145 gdImageGd2Ptr in gd_gd2.c in the GD Graphics Library (aka LibGD) through 2.3.2 has a double free. NOTE: the vendor's position is "The GD2 image forma… Libgd after 2.3.2 Fix from $1,9502021-08-26 MEDIUM 6.5 CVE-2021-34734 A vulnerability in the Link Layer Discovery Protocol (LLDP) implementation for the Cisco Video Surveillance 7000 Series IP Cameras firmware could all… Video Surveillance 7000 Ip Camera Firmware Patch available Fix from $1,6002021-08-18 HIGH 7.8 CVE-2021-37652 TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation for `tf.raw_ops.BoostedTreesCreateEnse… Tensorflow 2.3.4 / 2.4.3+ Fix from $1,9502021-08-12