Browse CVEs

CRITICAL 9.8 CVE-2021-31758EPSS 7% An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /goform/setportList all… Ac11 Firmware after 02.03.01.104_cn Fix from $2,3002021-05-07 HIGH 7.8 CVE-2021-31465 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.3.37598. User interaction is requ… 3d after 10.1.3.37598 Fix from $1,9502021-05-07 HIGH 7.8 CVE-2021-31472 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is requ… 3d after 10.0.1.37598 Fix from $1,9502021-05-07 HIGH 7.8 CVE-2021-31442 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is requ… Foxit Reader after 10.1.3.37598 Fix from $1,9502021-05-07 HIGH 7.8 CVE-2021-31452 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is requ… Foxit Reader after 10.1.3.37598 Fix from $1,9502021-05-07 HIGH 8.0 CVE-2021-22673 The affected product is vulnerable to stack-based buffer overflow while processing over-the-air firmware updates from the CDN server, which may allow… Cc3100 Software Development Kit 4.10.03 / 4.40.00+ Fix from $1,9502021-05-07 HIGH 7.0 CVE-2020-28198 The 'id' parameter of IBM Tivoli Storage Manager Version 5 Release 2 (Command Line Administrative Interface, dsmadmc.exe) is vulnerable to an exploit… Tivoli Storage Manager No fix yet Fix from $1,9502021-05-06 MEDIUM 6.7 CVE-2021-31916 An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kernel bef… Linux Kernel 5.12+ Fix from $1,6002021-05-06 MEDIUM 6.1 CVE-2021-3507 A heap buffer overflow was found in the floppy disk emulator of QEMU up to 6.0.0 (including). It could occur in fdctrl_transfer_handler() in hw/block… Debian Linux after 6.0.0 Fix from $1,6002021-05-06 HIGH 8.8 CVE-2021-31616 Insufficient length checks in the ShapeShift KeepKey hardware wallet firmware before 7.1.0 allow a stack buffer overflow via crafted messages. The ov… Keepkey Firmware 7.1.0+ Fix from $1,9502021-05-06 HIGH 7.1 CVE-2021-3501 A flaw was found in the Linux kernel in versions before 5.12. The value of internal.ndata, in the KVM API, is mapped to an array index, which can be … Linux Kernel 5.12+ Fix from $1,9502021-05-06 HIGH 7.8 CVE-2020-28010 Exim 4 before 4.94.2 allows Out-of-bounds Write because the main function, while setuid root, copies the current working directory pathname into a bu… Exim 4.94.2+ Fix from $1,9502021-05-06 HIGH 7.8 CVE-2020-28011 Exim 4 before 4.94.2 allows Heap-based Buffer Overflow in queue_run via two sender options: -R and -S. This may cause privilege escalation from exim … Exim 4.94.2+ Fix from $1,9502021-05-06 HIGH 7.8 CVE-2020-28013 Exim 4 before 4.94.2 allows Heap-based Buffer Overflow because it mishandles "-F '.('" on the command line, and thus may allow privilege escalation f… Exim 4.94.2+ Fix from $1,9502021-05-06 HIGH 7.8 CVE-2020-28016 Exim 4 before 4.94.2 allows an off-by-two Out-of-bounds Write because "-F ''" is mishandled by parse_fix_phrase. Exim 4.94.2+ Fix from $1,9502021-05-06 CRITICAL 9.8 CVE-2020-28022 Exim 4 before 4.94.2 has Improper Restriction of Write Operations within the Bounds of a Memory Buffer. This occurs when processing name=value pairs … Exim 4.94.2+ Fix from $2,3002021-05-06 CRITICAL 9.8 CVE-2020-28024 Exim 4 before 4.94.2 allows Buffer Underwrite that may result in unauthenticated remote attackers executing arbitrary commands, because smtp_ungetc w… Exim 4.94.2+ Fix from $2,3002021-05-06 MEDIUM 6.5 CVE-2020-20218 Mikrotik RouterOs 6.44.6 (long-term tree) suffers from a memory corruption vulnerability in the /nova/bin/traceroute process. An authenticated remote… Routeros No fix yet Fix from $1,6002021-05-03 MEDIUM 6.5 CVE-2020-20247 Mikrotik RouterOs before 6.46.5 (stable tree) suffers from a memory corruption vulnerability in the /nova/bin/traceroute process. An authenticated re… Routeros 6.46.5+ Fix from $1,6002021-05-03 HIGH 8.8 CVE-2021-21227 Insufficient data validation in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a craf… Chrome 90.0.4430.93+ Fix from $1,9502021-04-30 HIGH 8.8 CVE-2021-21231 Insufficient data validation in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a craf… Chrome 90.0.4430.93+ Fix from $1,9502021-04-30 HIGH 8.8 CVE-2021-21233 Heap buffer overflow in ANGLE in Google Chrome on Windows prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via … Chrome 90.0.4430.93+ Fix from $1,9502021-04-30 HIGH 8.1 CVE-2021-21540 Dell EMC iDRAC9 versions prior to 4.40.00.00 contain a stack-based overflow vulnerability. A remote authenticated attacker could potentially exploit … Idrac9 Firmware 4.40.00.00+ Fix from $1,9502021-04-30 HIGH 7.8 CVE-2021-29464 Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A heap buffer overflow was… Fedora 0.27.4+ Fix from $1,9502021-04-30 MEDIUM 6.7 CVE-2021-20515 IBM Informix Dynamic Server 14.10 is vulnerable to a stack based buffer overflow, caused by improper bounds checking. A local privileged user could o… Informix Dynamic Server Patch available Fix from $1,6002021-04-30 HIGH 7.5 CVE-2021-1504 Multiple vulnerabilities in Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticat… Secure Firewall Threat Defense 6.6.4 / 6.7.0.1+ Fix from $1,9502021-04-29 HIGH 7.5 CVE-2021-1445 Multiple vulnerabilities in Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticat… Secure Firewall Threat Defense 6.6.4 / 6.7.0.1+ Fix from $1,9502021-04-29 HIGH 7.8 CVE-2021-31433 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.931. User interaction is r… Foxit Studio Photo after 3.6.6.933 Fix from $1,9502021-04-29 HIGH 7.8 CVE-2021-31434 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.931. User interaction is r… Foxit Studio Photo after 3.6.6.933 Fix from $1,9502021-04-29 HIGH 7.8 CVE-2021-31436 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.931. User interaction is r… Foxit Studio Photo after 3.6.6.933 Fix from $1,9502021-04-29