2021

The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage. Beside thi

The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPad

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8,

This issue was addressed with improved checks. This issue is fixed in watchOS 8, macOS Big Sur 11.6, Security Update 202

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8,

A logic issue was addressed with improved state management. This issue is fixed in Security Update 2021-005 Catalina, ma

This issue was addressed with improved checks. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, Secu

This issue was addressed with improved checks. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, Secu

This issue was addressed with improved checks. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, Secu

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15 and iPadOS 15. A ma

A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 15 and iPadOS 15, wat

This issue was addressed with improved checks. This issue is fixed in Security Update 2021-005 Catalina, iTunes 12.12 fo

A memory corruption issue was addressed with improved state management. This issue is fixed in Security Update 2021-005

A memory corruption issue was addressed with improved memory handling. This issue is fixed in Security Update 2021-005 C

A URI parsing issue was addressed with improved parsing. This issue is fixed in Security Update 2021-005 Catalina, macOS

A permissions issue existed. This issue was addressed with improved permission validation. This issue is fixed in Securi

A logic issue was addressed with improved state management. This issue is fixed in iOS 15 and iPadOS 15. In certain situ

This issue was addressed with improved checks. This issue is fixed in iOS 15 and iPadOS 15. A local attacker may be able

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.5.1, iOS

Mobile Access Portal Native Applications who's path is defined by the administrator with environment variables may run a

A race condition was addressed with additional validation. This issue is fixed in Security Update 2021-005 Catalina. Mou

libmobi is vulnerable to Use of Out-of-range Pointer Offset

libmobi is vulnerable to Use of Out-of-range Pointer Offset

vim is vulnerable to Heap-based Buffer Overflow

corenlp is vulnerable to Improper Restriction of XML External Entity Reference

snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)

firefly-iii is vulnerable to Unrestricted Upload of File with Dangerous Type

InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 cloud portal allows for self-registration of the aff

InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 website used to control the router is vulnerable to

InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to stored cross-scripting, which may

InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 do not perform sufficient input validation on client

Revisor Video Management System (VMS) before 2.0.0 has a directory traversal vulnerability. Successful exploitation coul

An issue was discovered in function scanallsubs in src/sbbs3/scansubs.cpp in Synchronet BBS, which may allow attackers t

Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. In affected versi

Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. In affected versi

The evm crate is a pure Rust implementation of Ethereum Virtual Machine. In `evm` crate `< 0.31.0`, `JUMPI` opcode's con

OpenOlat is a web-based e-learning platform for teaching, learning, assessment and communication, an LMS, a learning man

An issue was discovered in function sofia_handle_sip_i_notify in sofia.c in SignalWire freeswitch before 1.10.6, may all

Apache Superset up to and including 1.3.0 when configured with ENABLE_TEMPLATE_PROCESSING on (disabled by default) allow

An incomplete permission check on entries in Devolutions Remote Desktop Manager before 2021.2.16 allows attackers to byp

The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests wi

The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS sig

The MainWP Child Reports WordPress plugin before 2.0.8 does not validate or sanitise the order parameter before using it

The WordPress PDF Light Viewer Plugin WordPress plugin before 1.4.12 allows users with Author roles to execute arbitrary

FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project

A use after free vulnerability in FATEK Automation WinProladder versions 3.30 and prior may be exploited when a valid us

FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project

FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project

FATEK Automation WinProladder versions 3.30 and prior proper validation of user-supplied data when parsing project files