Browse CVEs

CRITICAL 9.8 CVE-2020-11176 While processing server certificate from IPSec server, certificate validation for subject alternative name API can cause heap overflow which can lead… Apq8017 Firmware Mitigation only Fix from $2,3002021-06-09 HIGH 7.8 CVE-2020-11267 Stack out-of-bounds write occurs while setting up a cipher device if the provided IV length exceeds the max limit value in Snapdragon Auto, Snapdrago… Apq8009 Firmware Patch available Fix from $1,9502021-06-09 CRITICAL 9.8 CVE-2020-11134 Possible stack out of bound write might happen due to time bitmap length and bit duration fields of the attributes like NAN ranging setup attribute i… Aqt1000 Firmware Mitigation only Fix from $2,3002021-06-09 HIGH 7.8 CVE-2020-11165 Memory corruption due to buffer overflow while copying the message provided by HLOS into buffer without validating the length of buffer in Snapdragon… Aqt1000 Firmware Mitigation only Fix from $1,9502021-06-09 CRITICAL 9.8 CVE-2020-11182 Possible heap overflow while parsing NAL header due to lack of check of length of data received from user in Snapdragon Auto, Snapdragon Compute, Sna… Aqt1000 Firmware Mitigation only Fix from $2,3002021-06-09 HIGH 7.8 CVE-2020-11261 KEV Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdrago… Apq8009 Firmware Patch available Fix from $1,9502021-06-09 HIGH 7.5 CVE-2021-33742 KEVEPSS 59% Windows MSHTML Platform Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.18967 / 10.0.14393.4467+ Fix from $1,9502021-06-08 HIGH 7.8 CVE-2021-27387 A vulnerability has been identified in Simcenter Femap 2020.2 (All versions < V2020.2.MP3), Simcenter Femap 2021.1 (All versions < V2021.1.MP3). The … Simcenter Femap 2020.2+ Fix from $1,9502021-06-08 HIGH 7.8 CVE-2021-27390 A vulnerability has been identified in JT2Go (All versions < V13.1.0.3), Teamcenter Visualization (All versions < V13.1.0.3). The TIFF_loader.dll lib… Jt2go 13.1.0.3+ Fix from $1,9502021-06-08 HIGH 7.8 CVE-2021-27399 A vulnerability has been identified in Simcenter Femap 2020.2 (All versions < V2020.2.MP3), Simcenter Femap 2021.1 (All versions < V2021.1.MP3). The … Simcenter Femap 2020.2+ Fix from $1,9502021-06-08 HIGH 8.8 CVE-2021-31342 The ugeom2d.dll library in all versions of Solid Edge SE2020 before 2020MP14 and all versions of Solid Edge SE2021 before SE2021MP5 lack proper valid… Solid Edge Se2020 Firmware 2020mp14+ Fix from $1,9502021-06-08 HIGH 8.8 CVE-2021-31343 The jutil.dll library in all versions of Solid Edge SE2020 before 2020MP14 and all versions of Solid Edge SE2021 before SE2021MP5 lack proper validat… Solid Edge Se2020 Firmware 2020mp14+ Fix from $1,9502021-06-08 HIGH 8.8 CVE-2021-23169 A heap-buffer overflow was found in the copyIntoFrameBuffer function of OpenEXR in versions before 3.0.1. An attacker could use this flaw to execute … Fedora 3.0.1+ Fix from $1,9502021-06-08 HIGH 8.8 CVE-2021-30521 Heap buffer overflow in Autofill in Google Chrome on Android prior to 91.0.4472.77 allowed a remote attacker to perform out of bounds memory access v… Chrome 91.0.4472.77+ Fix from $1,9502021-06-07 HIGH 8.8 CVE-2021-30526 Out of bounds write in TabStrip in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious extension to p… Chrome 91.0.4472.77+ Fix from $1,9502021-06-07 HIGH 8.8 CVE-2021-30516 Heap buffer overflow in History in Google Chrome prior to 90.0.4430.212 allowed a remote attacker who had compromised the renderer process to potenti… Chrome 90.0.4430.212+ Fix from $1,9502021-06-04 HIGH 8.8 CVE-2021-30518 Heap buffer overflow in Reader Mode in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to potentially exploit heap corruption via a cr… Chrome 90.0.4430.212+ Fix from $1,9502021-06-04 HIGH 8.8 CVE-2021-30508 Heap buffer overflow in Media Feeds in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to enable certain features in Ch… Chrome 90.0.4430.212+ Fix from $1,9502021-06-04 HIGH 8.8 CVE-2021-30509 Out of bounds write in Tab Strip in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to install a malicious extension to… Chrome 90.0.4430.212+ Fix from $1,9502021-06-04 HIGH 7.8 CVE-2021-1503 A vulnerability in Cisco Webex Network Recording Player for Windows and MacOS and Cisco Webex Player for Windows and MacOS could allow an attacker to… Webex Meetings Server 41.2+ Fix from $1,9502021-06-04 HIGH 7.8 CVE-2021-1526 A vulnerability in Cisco Webex Player for Windows and MacOS could allow an attacker to execute arbitrary code on an affected system. This vulnerabili… Webex Player 41.5+ Fix from $1,9502021-06-04 MEDIUM 6.1 CVE-2021-1527 A vulnerability in Cisco Webex Player for Windows and MacOS could allow an attacker to cause the affected software to terminate or to gain access to … Webex Player 41.5+ Fix from $1,6002021-06-04 HIGH 8.0 CVE-2020-27302 A stack buffer overflow in Realtek RTL8710 (and other Ameba-based devices) can lead to remote code execution via the "memcpy" function, when an attac… Rtl8710c Firmware No fix yet Fix from $1,9502021-06-04 HIGH 8.0 CVE-2020-27301 A stack buffer overflow in Realtek RTL8710 (and other Ameba-based devices) can lead to remote code execution via the "AES_UnWRAP" function, when an a… Rtl8710c Firmware No fix yet Fix from $1,9502021-06-04 HIGH 7.8 CVE-2021-3489 The eBPF RINGBUF bpf_ringbuf_reserve() function in the Linux kernel did not check that the allocated size was smaller than the ringbuf size, allowing… Linux Kernel 5.10.37 / 5.11.21+ Fix from $1,9502021-06-04 HIGH 7.8 CVE-2021-3490EPSS 27% The eBPF ALU32 bounds tracking for bitwise ops (AND, OR and XOR) in the Linux kernel did not properly update 32-bit bounds, which could be turned int… Linux Kernel 5.10.37 / 5.11.21+ Fix from $1,9502021-06-04 HIGH 8.8 CVE-2021-3491 The io_uring subsystem in the Linux kernel allowed the MAX_RW_COUNT limit to be bypassed in the PROVIDE_BUFFERS operation, which led to negative valu… Linux Kernel 5.10.37 / 5.11.21+ Fix from $1,9502021-06-04 HIGH 7.8 CVE-2021-22335 There is a Memory Buffer Improper Operation Limit vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause excepti… Emui Mitigation only Fix from $1,9502021-06-03 MEDIUM 5.5 CVE-2021-3569 A stack corruption bug was found in libtpms in versions before 0.7.2 and before 0.8.0 while decrypting data using RSA. This flaw could result in a SI… Enterprise Linux 0.7.2 / 0.8.0+ Fix from $1,6002021-06-03 HIGH 8.8 CVE-2020-24870 Libraw before 0.20.1 has a stack buffer overflow via LibRaw::identify_process_dng_fields in identify.cpp. Libraw 0.20.1+ Fix from $1,9502021-06-02