Menu

Star on GitHub · 3.2k

2021

20,154 vulnerabilities published in 2021.

Results

20,154· Page 233/404
7.5
CVE-2021-27408

The affected product is vulnerable to an out-of-bounds read, which can cause information leakage leading to arbitrary co

9.8
CVE-2021-21833

An improper array index validation vulnerability exists in the TIF IP_planar_raster_unpack functionality of Accusoft Ima

9.8
CVE-2021-21824

An out-of-bounds write vulnerability exists in the JPG Handle_JPEG420 functionality of Accusoft ImageGear 19.9. A specia

8.8
CVE-2021-21808

A memory corruption vulnerability exists in the PNG png_palette_process functionality of Accusoft ImageGear 19.9. A spec

9.8
CVE-2021-21795

A heap-based buffer overflow vulnerability exists in the PSD read_icc_icCurve_data functionality of Accusoft ImageGear 1

7.8
CVE-2021-0498

In memory management driver, there is a possible memory corruption due to a double free. This could lead to local escala

7.8
CVE-2021-0497

In memory management driver, there is a possible memory corruption due to a use after free. This could lead to local esc

7.8
CVE-2021-0496

In memory management driver, there is a possible memory corruption due to a use after free. This could lead to local esc

7.8
CVE-2021-0495

In memory management driver, there is a possible out of bounds write due to uninitialized data. This could lead to local

7.8
CVE-2021-0494

In memory management driver, there is a possible out of bounds write due to an integer overflow. This could lead to loca

7.8
CVE-2021-0493

In memory management driver, there is a possible out of bounds write due to a missing bounds check. This could lead to l

7.8
CVE-2021-0492

In memory management driver, there is a possible out of bounds write due to a missing bounds check. This could lead to l

7.8
CVE-2021-0491

In memory management driver, there is a possible escalation of privilege due to a missing permission check. This could l

7.8
CVE-2021-0490

In memory management driver, there is a possible out of bounds write due to a missing bounds check. This could lead to l

7.8
CVE-2021-0489

In memory management driver, there is a possible out of bounds write due to a missing bounds check. This could lead to l

7.8
CVE-2021-0487

In onCreate of CalendarDebugActivity.java, there is a possible way to export calendar data to the sdcard without user co

7.8
CVE-2021-0485

In getMinimalSize of PipBoundsAlgorithm.java, there is a possible bypass of restrictions on background processes due to

5.5
CVE-2021-0484

In readVector of IMediaPlayer.cpp, there is a possible read of uninitialized heap data due to a missing bounds check. Th

7.0
CVE-2021-0482

In BinderDiedCallback of MediaCodec.cpp, there is a possible memory corruption due to a use after free. This could lead

7.8
CVE-2021-0481

In onActivityResult of EditUserPhotoController.java, there is a possible access of unauthorized files due to an unexpect

5.5
CVE-2021-0480

In createPendingIntent of SnoozeHelper.java, there is a possible broadcast intent containing a sensitive identifier. Thi

7.8
CVE-2021-0477

In notifyScreenshotError of ScreenshotNotificationsController.java, there is a possible permission bypass due to an unsa

7.0
CVE-2021-0476

In FindOrCreatePeer of btif_av.cc, there is a possible use after free due to a race condition. This could lead to local

8.8
CVE-2021-0475

In on_l2cap_data_ind of btif_sock_l2cap.cc, there is possible memory corruption due to a use after free. This could lead

9.8
CVE-2021-0474

In avrc_msg_cback of avrc_api.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead

8.8
CVE-2021-0473

In rw_t3t_process_error of rw_t3t.cc, there is a possible double free due to uninitialized data. This could lead to remo

7.8
CVE-2021-0472

In shouldLockKeyguard of LockTaskController.java, there is a possible way to exit App Pinning without a PIN due to a per

7.5
CVE-2021-0466

In startIpClient of ClientModeImpl.java, there is a possible identifier which could be used to track a device. This coul

5.5
CVE-2019-9475

In /proc/net of the kernel filesystem, there is a possible information leak due to a permissions bypass. This could lead

7.5
CVE-2021-28213

Example EDK2 encrypted private key in the IpSecDxe.efi present potential security risks.

6.7
CVE-2021-28211

A heap overflow in LzmaUefiDecompressGetInfo function in EDK II.

7.8
CVE-2021-28210

An unlimited recursion in DxeCore in EDK II.

9.9
CVE-2021-23230

A SQL Injection vulnerability in the OPCUA interface of Gallagher Command Centre allows a remote unprivileged Command Ce

6.0
CVE-2021-23211

Cleartext Storage of Sensitive Information in Memory vulnerability in Gallagher Command Centre Server allows Cloud end-t

8.1
CVE-2021-23205

Improper Encoding or Escaping in Gallagher Command Centre Server allows a Command Centre Operator to alter the configura

8.1
CVE-2021-23204

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Gallagher Command Centre Server allows OSDP

6.0
CVE-2021-23182

Cleartext Storage of Sensitive Information in Memory vulnerability in Gallagher Command Centre Server allows OSDP reader

9.9
CVE-2021-23140

Improper Authorization vulnerability in Gallagher Command Centre Server allows command line macros to be modified by an

6.5
CVE-2021-23136

Improper Authorization vulnerability in Gallagher Command Centre Server allows macro overrides to be performed by an unp

9.8
CVE-2021-22915

Nextcloud server before 19.0.11, 20.0.10, 21.0.2 is vulnerable to brute force attacks due to lack of inclusion of IPv6 s

6.5
CVE-2021-22913

Nextcloud Deck before 1.2.7, 1.4.1 suffers from an information disclosure vulnerability when searches for sharees utiliz

6.5
CVE-2021-22912

Nextcloud iOS before 3.4.2 suffers from an information disclosure vulnerability when searches for sharees utilize the lo

6.5
CVE-2021-22906

Nextcloud End-to-End Encryption before 1.5.3, 1.6.3 and 1.7.1 suffers from a denial of service vulnerability due to perm

6.5
CVE-2021-22905

Nextcloud Android App (com.nextcloud.client) before v3.16.0 is vulnerable to information disclosure due to searches for

7.5
CVE-2021-22904

The actionpack ruby gem before 6.1.3.2, 6.0.3.7, 5.2.4.6, 5.2.6 suffers from a possible denial of service vulnerability

6.1
CVE-2021-22903

The actionpack ruby gem before 6.1.3.2 suffers from a possible open redirect vulnerability. Specially crafted Host heade

7.5
CVE-2021-22902

The actionpack ruby gem (a framework for handling and responding to web requests in Rails) before 6.0.3.7, 6.1.3.2 suffe

8.1
CVE-2021-22901

curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used when

3.1
CVE-2021-22898

curl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option, known as `CURLOPT_TELN

5.3
CVE-2021-22897

curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code for CURLO

Test your stack for 2021issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.