Browse CVEs

HIGH 7.8 CVE-2021-42008 The decode_data function in drivers/net/hamradio/6pack.c in the Linux kernel before 5.13.13 has a slab out-of-bounds write. Input from a process that… Linux Kernel 4.4.282 / 4.9.281+ Fix from $1,9502021-10-05 HIGH 8.8 CVE-2021-32626EPSS 16% Redis is an open source, in-memory database that persists on disk. In affected versions specially crafted Lua scripts executing in Redis can cause th… Redis 5.0.14 / 6.0.16+ Fix from $1,9502021-10-04 MEDIUM 5.9 CVE-2021-21704 In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using Firebird PDO driver extension, a malicious database server c… PHP 7.3.29 / 7.4.21+ Fix from $1,6002021-10-04 HIGH 7.8 CVE-2021-38098 Corel PDF Fusion 2.6.2.0 is affected by a Heap Corruption vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this … Pdf Fusion Mitigation only Fix from $1,9502021-10-01 HIGH 7.8 CVE-2021-38100 Corel PhotoPaint Standard 2020 22.0.0.474 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacke… Photopaint 2020 Mitigation only Fix from $1,9502021-10-01 HIGH 7.8 CVE-2021-38101 CDRRip.dll in Corel PhotoPaint Standard 2020 22.0.0.474 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthent… Photopaint 2020 Mitigation only Fix from $1,9502021-10-01 HIGH 7.8 CVE-2021-38110 Word97Import200.dll in Corel WordPerfect 2020 20.0.0.200 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthen… Wordperfect 2020 Mitigation only Fix from $1,9502021-10-01 HIGH 7.8 CVE-2021-38099 CDRRip.dll in Corel PhotoPaint Standard 2020 22.0.0.474 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthent… Photopaint 2020 Mitigation only Fix from $1,9502021-10-01 HIGH 7.8 CVE-2021-38103 IBJPG2.FLT in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated… Presentations 2020 Mitigation only Fix from $1,9502021-10-01 HIGH 7.8 CVE-2021-38096 Coreip.dll in Corel PDF Fusion 2.6.2.0 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker c… Pdf Fusion Mitigation only Fix from $1,9502021-10-01 HIGH 7.8 CVE-2021-38097 Corel PDF Fusion 2.6.2.0 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage … Pdf Fusion Mitigation only Fix from $1,9502021-10-01 HIGH 7.5 CVE-2021-41456 There is a stack buffer overflow in MP4Box v1.0.1 at src/filters/dmx_nhml.c:1004 in the nhmldmx_send_sample() function szXmlTo parameter which leads … Mp4box No fix yet Fix from $1,9502021-10-01 HIGH 7.5 CVE-2021-41457 There is a stack buffer overflow in MP4Box 1.1.0 at src/filters/dmx_nhml.c in nhmldmx_init_parsing which leads to a denial of service vulnerability. Mp4box No fix yet Fix from $1,9502021-10-01 HIGH 7.5 CVE-2021-41459 There is a stack buffer overflow in MP4Box v1.0.1 at src/filters/dmx_nhml.c:1008 in the nhmldmx_send_sample() function szXmlFrom parameter which lead… Mp4box No fix yet Fix from $1,9502021-10-01 HIGH 7.2 CVE-2020-20746 A stack-based buffer overflow in the httpd server on Tenda AC9 V15.03.06.60_EN allows remote attackers to execute arbitrary code or cause a denial of… Ac9 Firmware No fix yet Fix from $1,9502021-09-30 MEDIUM 6.5 CVE-2020-20662 libiec_iccp_mod v1.5 contains a heap-buffer-overflow in the component mms_client_example1.c. Libiec Iccp Mod No fix yet Fix from $1,6002021-09-30 MEDIUM 6.5 CVE-2020-20663 libiec_iccp_mod v1.5 contains a heap-buffer-overflow in the component mms_client_connection.c. Libiec Iccp Mod No fix yet Fix from $1,6002021-09-30 HIGH 7.8 CVE-2021-39843EPSS 77% Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by an out-of-boun… Acrobat after 21.005.20060 Fix from $1,9502021-09-29 MEDIUM 6.1 CVE-2021-39845 Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a stack overfl… Acrobat after 21.005.20060 Fix from $1,6002021-09-29 MEDIUM 6.1 CVE-2021-39846 Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a stack overfl… Acrobat after 21.005.20060 Fix from $1,6002021-09-29 HIGH 7.8 CVE-2021-39829 Adobe Framemaker versions 2019 Update 8 (and earlier) and 2020 Release Update 2 (and earlier) are affected by an out-of-bounds write vulnerability th… Framemaker after 2020.0.2 Fix from $1,9502021-09-29 HIGH 7.8 CVE-2021-39831 Adobe Framemaker versions 2019 Update 8 (and earlier) and 2020 Release Update 2 (and earlier) are affected by an out-of-bounds write vulnerability th… Framemaker after 2020.0.2 Fix from $1,9502021-09-29 HIGH 7.8 CVE-2021-29360 A buffer overflow vulnerability in FORMATS!Read_Utah_RLE+0x37a of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file. Irfanview Mitigation only Fix from $1,9502021-09-28 HIGH 7.8 CVE-2021-29361 A buffer overflow vulnerability in FORMATS!Read_Utah_RLE+0x340 of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file. Irfanview Mitigation only Fix from $1,9502021-09-28 HIGH 7.8 CVE-2021-29362 A buffer overflow vulnerability in FORMATS!ReadRAS_W+0xa30 of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file. Irfanview Mitigation only Fix from $1,9502021-09-28 HIGH 7.8 CVE-2021-29363 A buffer overflow vulnerability in FORMATS!ReadRAS_W+0xa74 of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file.0xa74 Irfanview Mitigation only Fix from $1,9502021-09-28 HIGH 7.8 CVE-2021-29364 A buffer overflow vulnerability in Formats!ReadRAS_W+0x1001 of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file. Irfanview Mitigation only Fix from $1,9502021-09-28 HIGH 7.8 CVE-2021-29366 A buffer overflow vulnerability in FORMATS!GetPlugInInfo+0x2de9 of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file. Irfanview Mitigation only Fix from $1,9502021-09-28 HIGH 7.8 CVE-2021-29367 A buffer overflow vulnerability in WPG+0x1dda of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted WPG file. Irfanview Mitigation only Fix from $1,9502021-09-28 MEDIUM 6.5 CVE-2021-36134 Out of bounds write vulnerability in the JPEG parsing code of Netop Vision Pro up to and including 9.7.2 allows an adjacent unauthenticated attacker … Vision Pro after 9.7.2 Fix from $1,6002021-09-27