Browse CVEs

HIGH 7.1 CVE-2021-3561 An Out of Bounds flaw was found fig2dev version 3.2.8a. A flawed bounds check in read_objects() could allow an attacker to provide a crafted maliciou… Fedora Patch available Fix from $1,9502021-05-26 HIGH 7.1 CVE-2021-3549 An out of bounds flaw was found in GNU binutils objdump utility version 2.36. An attacker could use this flaw and pass a large section to avr_elf32_l… Binutils Patch available Fix from $1,9502021-05-26 HIGH 7.8 CVE-2021-32457 Trend Micro Home Network Security version 6.6.604 and earlier is vulnerable to an iotcl stack-based buffer overflow vulnerability which could allow a… Home Network Security after 6.6.604 Fix from $1,9502021-05-26 HIGH 7.8 CVE-2020-27815 A flaw was found in the JFS filesystem code in the Linux Kernel which allows a local attacker with the ability to set extended attributes to panic th… Linux Kernel 4.9.249 / 4.14.213+ Fix from $1,9502021-05-26 MEDIUM 5.5 CVE-2021-27562 KEV In Arm Trusted Firmware M through 1.2, the NS world may trigger a system halt, an overwrite of secure data, or the printing out of secure data when c… Trusted Firmware M after 1.2.0 Fix from $1,6002021-05-25 CRITICAL 9.8 CVE-2020-10064 Improper Input Frame Validation in ieee802154 Processing. Zephyr versions >= v1.14.2, >= v2.2.0 contain Stack-based Buffer Overflow (CWE-121), Heap-b… Zephyr after 2.2.0 Fix from $2,3002021-05-25 HIGH 8.8 CVE-2020-10065 Missing Size Checks in Bluetooth HCI over SPI. Zephyr versions >= v1.14.2, >= v2.2.0 contain Improper Handling of Length Parameter Inconsistency (CWE… Zephyr after 2.2.0 Fix from $1,9502021-05-25 HIGH 7.8 CVE-2020-13598 FS: Buffer Overflow when enabling Long File Names in FAT_FS and calling fs_stat. Zephyr versions >= v1.14.2, >= v2.3.0 contain Stack-based Buffer Ove… Zephyr after 2.3.0 Fix from $1,9502021-05-25 HIGH 7.6 CVE-2020-13600 Malformed SPI in response for eswifi can corrupt kernel memory. Zephyr versions >= 1.14.2, >= 2.3.0 contain Heap-based Buffer Overflow (CWE-122). For… Zephyr after 2.3.0 Fix from $1,9502021-05-25 HIGH 7.5 CVE-2021-30186EPSS 7% CODESYS V2 runtime system SP before 2.4.7.55 has a Heap-based Buffer Overflow. 750 893 Firmware Mitigation only Fix from $1,9502021-05-25 CRITICAL 9.8 CVE-2021-30188 CODESYS V2 runtime system SP before 2.4.7.55 has a Stack-based Buffer Overflow. 750 893 Firmware Mitigation only Fix from $2,3002021-05-25 CRITICAL 9.8 CVE-2021-30189 CODESYS V2 Web-Server before 1.1.9.20 has a Stack-based Buffer Overflow. 750 893 Firmware Mitigation only Fix from $2,3002021-05-25 CRITICAL 9.8 CVE-2021-30193 CODESYS V2 Web-Server before 1.1.9.20 has an Out-of-bounds Write. 750 893 Firmware Mitigation only Fix from $2,3002021-05-25 CRITICAL 9.8 CVE-2018-25011 A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16(). Enterprise Linux 1.0.1+ Fix from $2,3002021-05-21 CRITICAL 9.8 CVE-2020-36328 A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is possible due to an invalid check … Enterprise Linux 1.0.1+ Fix from $2,3002021-05-21 HIGH 8.8 CVE-2021-31439 This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Synology DiskStation Manager. Authenticat… Debian Linux 3.1.13 / 6.2.3-25426-3+ Fix from $1,9502021-05-21 HIGH 7.8 CVE-2021-31473EPSS 6% This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.3.37598. User interaction is requ… Phantompdf after 10.1.3.37598 Fix from $1,9502021-05-21 HIGH 8.6 CVE-2021-3517EPSS 8% There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be… Jboss Core Services 2.9.11+ Fix from $1,9502021-05-19 MEDIUM 6.5 CVE-2020-20266 Mikrotik RouterOs before 6.47 (stable tree) suffers from a memory corruption vulnerability in the /nova/bin/dot1x process. An authenticated remote at… Routeros 6.47+ Fix from $1,6002021-05-19 MEDIUM 6.5 CVE-2020-20227 Mikrotik RouterOs stable 6.47 suffers from a memory corruption vulnerability in the /nova/bin/diskd process. An authenticated remote attacker can cau… Routeros No fix yet Fix from $1,6002021-05-18 MEDIUM 6.5 CVE-2020-20245 Mikrotik RouterOs stable 6.46.3 suffers from a memory corruption vulnerability in the log process. An authenticated remote attacker can cause a Denia… Routeros No fix yet Fix from $1,6002021-05-18 MEDIUM 6.5 CVE-2020-20246 Mikrotik RouterOs stable 6.46.3 suffers from a memory corruption vulnerability in the mactel process. An authenticated remote attacker can cause a De… Routeros No fix yet Fix from $1,6002021-05-18 MEDIUM 5.5 CVE-2021-31315 Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Stack Based Overflow in the blit function of their custo… Telegram 7.1.0+ Fix from $1,6002021-05-18 HIGH 7.1 CVE-2021-31320 Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Heap Buffer Overflow in the VGradientCache::generateGrad… Telegram 7.1.0+ Fix from $1,9502021-05-18 HIGH 7.1 CVE-2021-31321 Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Stack Based Overflow in the gray_split_cubic function of… Telegram 7.1.0+ Fix from $1,9502021-05-18 MEDIUM 5.5 CVE-2021-31322 Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Heap Buffer Overflow in the LOTGradient::populate functi… Telegram 7.1.0+ Fix from $1,6002021-05-18 MEDIUM 5.5 CVE-2021-31323 Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Heap Buffer Overflow in the LottieParserImpl::parseDashP… Telegram 7.1.0+ Fix from $1,6002021-05-18 MEDIUM 6.5 CVE-2020-20236 Mikrotik RouterOs 6.46.3 (stable tree) suffers from a memory corruption vulnerability in the /nova/bin/sniffer process. An authenticated remote attac… Routeros No fix yet Fix from $1,6002021-05-18 MEDIUM 6.5 CVE-2020-20237 Mikrotik RouterOs 6.46.3 (stable tree) suffers from a memory corruption vulnerability in the /nova/bin/sniffer process. An authenticated remote attac… Routeros No fix yet Fix from $1,6002021-05-18 MEDIUM 5.5 CVE-2020-23861 A heap-based buffer overflow vulnerability exists in LibreDWG 0.10.1 via the read_system_page function at libredwg-0.10.1/src/decode_r2007.c:666:5, w… Libredwg Patch available Fix from $1,6002021-05-18