Browse CVEs

MEDIUM 5.5 CVE-2022-27359 Foxit PDF Reader before 12.0.1 and PDF Editor before 12.0.1 allow a this.maildoc NULL pointer dereference. Pdf Editor 12.0.1+ Fix from $1,6002022-05-05 HIGH 7.5 CVE-2022-29491 On F5 BIG-IP LTM, Advanced WAF, ASM, or APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5, 14.1.x versions prior to 14.1.4.6, an… Big Ip Access Policy Manager Mitigation only Fix from $1,9502022-05-05 MEDIUM 5.5 CVE-2022-1516 A NULL pointer dereference flaw was found in the Linux kernel’s X.25 set of standardized network protocols functionality in the way a user terminates… Linux Kernel Patch available Fix from $1,6002022-05-05 HIGH 7.5 CVE-2022-29340 GPAC 2.1-DEV-rev87-g053aae8-master. has a Null Pointer Dereference vulnerability in gf_isom_parse_movie_boxes_internal due to improper return value h… Gpac 2022-04-12+ Fix from $1,9502022-05-05 MEDIUM 5.5 CVE-2022-20796 On May 4, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vuln… Secure Endpoint 1.16.3 / 1.17.2+ Fix from $1,6002022-05-04 HIGH 7.5 CVE-2022-20746 A vulnerability in the TCP proxy functionality of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to tr… Secure Firewall Threat Defense 6.4.0.15 / 6.6.5.2+ Fix from $1,9502022-05-03 MEDIUM 5.5 CVE-2021-42528 XMP Toolkit 2021.07 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated a… Debian Linux after 2021.07 Fix from $1,6002022-05-02 MEDIUM 5.5 CVE-2022-24736 Redis is an in-memory database that persists on disk. Prior to versions 6.2.7 and 7.0.0, an attacker attempting to load a specially crafted Lua scrip… Redis 6.2.7+ Fix from $1,6002022-04-27 MEDIUM 5.5 CVE-2022-1507 chafa: NULL Pointer Dereference in function gif_internal_decode_frame at libnsgif.c:599 allows attackers to cause a denial of service (crash) via a c… Fedora 1.10.2+ Fix from $1,6002022-04-27 HIGH 7.5 CVE-2022-1341 An issue was discovered in in bwm-ng v0.6.2. An arbitrary null write exists in get_cmdln_options() function in src/options.c. Bwm Ng Patch available Fix from $1,9502022-04-18 MEDIUM 5.5 CVE-2022-1382 NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is capable of making the radare2 crash, thus affec… Radare2 5.6.8+ Fix from $1,6002022-04-18 HIGH 7.5 CVE-2021-44498 An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, attackers can cause a type to be incorr… Gt.m after 7.0-000 Fix from $1,9502022-04-15 HIGH 7.5 CVE-2021-44501 An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause calls to ZRead to… Gt.m after 7.0-000 Fix from $1,9502022-04-15 HIGH 7.5 CVE-2021-44505 An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause a NULL pointer de… Gt.m after 7.0-000 Fix from $1,9502022-04-15 HIGH 7.5 CVE-2021-44506 An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). A lack of input validation in calls to do_verify in sr_unix/… Gt.m after 7.0-000 Fix from $1,9502022-04-15 HIGH 7.5 CVE-2021-44507 An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). A lack of parameter validation in calls to memcpy in str_tok… Gt.m after 7.0-000 Fix from $1,9502022-04-15 HIGH 7.5 CVE-2021-44508 An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). A lack of NULL checks in calls to ious_open in sr_unix/ious_… Gt.m after 7.0-000 Fix from $1,9502022-04-15 HIGH 7.5 CVE-2021-44484 An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of NULL checks in calls to emit_trip in sr_port/emit_code.c allows attackers to… Gt.m after 7.0-000 Fix from $1,9502022-04-15 HIGH 7.5 CVE-2021-44485 An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of NULL checks in trip_gen in sr_port/emit_code.c allows attackers to crash the… Gt.m after 7.0-000 Fix from $1,9502022-04-15 HIGH 7.5 CVE-2021-44487 An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of NULL checks in calls to ious_open in sr_unix/ious_open.c allows attackers to… Gt.m after 7.0-000 Fix from $1,9502022-04-15 HIGH 7.5 CVE-2021-44492 An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, attackers can cause a type to be in… Gt.m after 7.0-000 Fix from $1,9502022-04-15 HIGH 7.5 CVE-2021-44494 An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause calls to ZRea… Gt.m after 7.0-000 Fix from $1,9502022-04-15 HIGH 7.5 CVE-2021-44495 An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause a NULL pointe… Gt.m after 7.0-000 Fix from $1,9502022-04-15 HIGH 8.6 CVE-2022-20682 A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Wireless Controller Software f… Ios Xe Mitigation only Fix from $1,9502022-04-15 MEDIUM 5.5 CVE-2022-28049 NGINX NJS 0.7.2 was discovered to contain a NULL pointer dereference via the component njs_vmcode_array at /src/njs_vmcode.c. Njs Patch available Fix from $1,6002022-04-15 MEDIUM 6.5 CVE-2021-39804 In reinit of HeifDecoderImpl.cpp, there is a possible crash due to a missing null check. This could lead to remote persistent denial of service in th… Android Patch available Fix from $1,6002022-04-12 CRITICAL 9.8 CVE-2022-26093 Null pointer dereference vulnerability in parser_irot function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remo… Android Mitigation only Fix from $2,3002022-04-11 CRITICAL 9.8 CVE-2022-26094 Null pointer dereference vulnerability in parser_auxC function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remo… Android Mitigation only Fix from $2,3002022-04-11 CRITICAL 9.8 CVE-2022-26095 Null pointer dereference vulnerability in parser_colr function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remo… Android Mitigation only Fix from $2,3002022-04-11 CRITICAL 9.8 CVE-2022-26096 Null pointer dereference vulnerability in parser_ispe function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remo… Android Mitigation only Fix from $2,3002022-04-11