Browse CVEs

HIGH 7.8 CVE-2021-30807 KEVEPSS 29% A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.5.1, iOS 14.7.1 and iPadOS 14.7.1, wat… Ipados 7.6.1 / 11.5.1+ Fix from $1,9502021-10-19 HIGH 7.8 CVE-2021-30830 A memory corruption issue was addressed with improved memory handling. This issue is fixed in Security Update 2021-005 Catalina, macOS Big Sur 11.6. … Mac Os X 11.6+ Fix from $1,9502021-10-19 HIGH 7.8 CVE-2021-3872 vim is vulnerable to Heap-based Buffer Overflow Fedora 8.2.3487+ Fix from $1,9502021-10-19 CRITICAL 9.8 CVE-2021-33023 Advantech WebAccess versions 9.02 and prior are vulnerable to a heap-based buffer overflow, which may allow an attacker to remotely execute code. Webaccess after 9.0.2 Fix from $2,3002021-10-18 CRITICAL 9.8 CVE-2021-38389EPSS 10% Advantech WebAccess versions 9.02 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute code. Webaccess after 9.0.2 Fix from $2,3002021-10-18 HIGH 7.8 CVE-2021-38426 FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in… Winproladder after 3.30 Fix from $1,9502021-10-18 HIGH 7.8 CVE-2021-38436 FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in… Winproladder after 3.30 Fix from $1,9502021-10-18 HIGH 7.8 CVE-2021-38442 FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in… Winproladder after 3.30 Fix from $1,9502021-10-18 HIGH 7.8 CVE-2021-28021 Buffer overflow vulnerability in function stbi__extend_receive in stb_image.h in stb 2.26 via a crafted JPEG file. Fedora No fix yet Fix from $1,9502021-10-15 HIGH 7.8 CVE-2021-40731EPSS 8% Adobe Acrobat Reader DC version 21.007.20095 (and earlier), 21.007.20096 (and earlier), 20.004.30015 (and earlier), and 17.011.30202 (and earlier) is… Acrobat Dc after 21.007.20096 Fix from $1,9502021-10-15 MEDIUM 5.5 CVE-2021-3875 vim is vulnerable to Heap-based Buffer Overflow Fedora 8.2.3489+ Fix from $1,6002021-10-15 HIGH 8.1 CVE-2021-3057 A stack-based buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect app that enables a man-in-the-middle attacker to disrupt s… Globalprotect 5.1.9 / 5.2.8+ Fix from $1,9502021-10-13 HIGH 8.8 CVE-2021-3330 RCE/DOS: Linked-list corruption leading to large out-of-bounds write while sorting for forged fragment list in Zephyr. Zephyr versions >= >=2.4.0 con… Zephyr 2.5.0+ Fix from $1,9502021-10-12 MEDIUM 5.5 CVE-2020-22675 An issue was discovered in gpac 0.8.0. The GetGhostNum function in stbl_read.c has a heap-based buffer overflow which can lead to a denial of service… Gpac Patch available Fix from $1,6002021-10-12 MEDIUM 5.5 CVE-2020-22677 An issue was discovered in gpac 0.8.0. The dump_data_hex function in box_dump.c has a heap-based buffer overflow which can lead to a denial of servic… Gpac Patch available Fix from $1,6002021-10-12 MEDIUM 5.5 CVE-2020-22678 An issue was discovered in gpac 0.8.0. The gf_media_nalu_remove_emulation_bytes function in av_parsers.c has a heap-based buffer overflow which can l… Gpac Patch available Fix from $1,6002021-10-12 CRITICAL 10.0 CVE-2021-21940 A heap-based buffer overflow vulnerability exists in the pushMuxer processRtspInfo functionality of Anker Eufy Homebase 2 2.1.6.9h. A specially-craft… Eufy Homebase 2 Firmware Mitigation only Fix from $2,3002021-10-12 HIGH 7.5 CVE-2021-37199 A vulnerability has been identified in SINUMERIK 808D (All versions), SINUMERIK 828D (All versions < V4.95). Affected devices don't process correctly… Sinumerik 808d Firmware 4.95+ Fix from $1,9502021-10-12 HIGH 8.8 CVE-2021-30626 Out of bounds memory access in ANGLE in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a cr… Chrome 93.0.4577.82+ Fix from $1,9502021-10-08 HIGH 8.8 CVE-2021-30628 Stack buffer overflow in ANGLE in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit stack corruption via a crafted… Chrome 93.0.4577.82+ Fix from $1,9502021-10-08 HIGH 8.8 CVE-2021-30632 KEVEPSS 65% Out of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … Chrome 93.0.4577.82+ Fix from $1,9502021-10-08 HIGH 7.2 CVE-2021-25478 A possible stack-based buffer overflow vulnerability in Exynos CP Chipset prior to SMR Oct-2021 Release 1 allows arbitrary memory write and code exec… Android Mitigation only Fix from $1,9502021-10-06 HIGH 7.2 CVE-2021-25479 A possible heap-based buffer overflow vulnerability in Exynos CP Chipset prior to SMR Oct-2021 Release 1 allows arbitrary memory write and code execu… Android Mitigation only Fix from $1,9502021-10-06 HIGH 7.1 CVE-2021-25492 Lack of boundary checking of a buffer in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3.02.61 allows OOB read. Notes after 4.3.02.61 Fix from $1,9502021-10-06 HIGH 7.8 CVE-2021-25495 A possible heap buffer overflow vulnerability in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3.02.61 allows arbitrary code e… Notes 4.3.02.61+ Fix from $1,9502021-10-06 MEDIUM 6.7 CVE-2021-25469 A possible stack-based buffer overflow vulnerability in Widevine trustlet prior to SMR Oct-2021 Release 1 allows arbitrary code execution. Android Mitigation only Fix from $1,6002021-10-06 MEDIUM 6.7 CVE-2021-25475 A possible heap-based buffer overflow vulnerability in DSP kernel driver prior to SMR Oct-2021 Release 1 allows arbitrary memory write and code execu… Android Mitigation only Fix from $1,6002021-10-06 MEDIUM 6.5 CVE-2021-0690 In ih264d_mark_err_slice_skip of ih264d_parse_pslice.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to rem… Android Patch available Fix from $1,6002021-10-06 MEDIUM 6.8 CVE-2021-31986 User controlled parameters related to SMTP notifications are not correctly validated. This can lead to a buffer overflow resulting in crashes and dat… Axis Os 6.50.5.5 / 8.40.4.3+ Fix from $1,6002021-10-05 CRITICAL 9.8 CVE-2021-3625 Buffer overflow in Zephyr USB DFU DNLOAD. Zephyr versions >= v2.5.0 contain Heap-based Buffer Overflow (CWE-122). For more information, see https://g… Zephyr 2.7.0+ Fix from $2,3002021-10-05