2021

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.4, Sec

A malicious application may be able to execute arbitrary code with kernel privileges. This issue is fixed in macOS Big S

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Secur

This issue was addressed with improved checks. This issue is fixed in tvOS 14.6, Security Update 2021-004 Mojave, iOS 14

Another race in XENMAPSPACE_grant_table handling Guests are permitted access to certain Xen-owned pages of memory. The m

Adobe Creative Cloud Desktop 3.5 (and earlier) is affected by an uncontrolled search path vulnerability that could resul

Medium by Adobe version 2.4.5.331 (and earlier) is affected by a buffer overflow vulnerability when parsing a crafted fi

Incorrect pointer argument passed to trusted application TA could result in un-intended memory operations in Snapdragon

Loop with unreachable exit condition may occur due to improper handling of unsupported input in Snapdragon Auto, Snapdra

A Improper neutralization of special elements used in a command ('Command Injection') in Fortinet FortiWeb version 6.3.1

A stack-based buffer overflow in Fortinet FortiWeb version 6.3.14 and below, 6.2.4 and below allows attacker to execute

This affects all versions of package sqlite-web. The SQL dashboard area allows sensitive actions to be performed without

A command-injection vulnerability in an authenticated Telnet connection in Poly (formerly Polycom) CX5500 and CX5100 1.3

Nextcloud server is an open source, self hosted personal cloud. In affected versions an attacker is able to bypass Two F

A lack of target address verification in the BurnMe() function of Rob The Bank 1.0 allows attackers to steal tokens from

A lack of target address verification in the selfdestructs() function of ICOVO 1.0 allows attackers to steal tokens from

A lack of target address verification in the destroycontract() function of 0xRACER 1.0 allows attackers to steal tokens

The time check operation of PepeAuctionSale 1.0 can be rendered ineffective by assigning a large number to the _duration

An issue in the noReentrance() modifier of the Ethereum-based contract Accounting 1.0 allows attackers to carry out a re

Eyoucms 1.5.4 is vulnerable to Directory Traversal. Due to a lack of input data sanitizaton in param tpldir, filename, t

Nextcloud Richdocuments is an open source collaborative office suite. In affected versions the File Drop features ("Uplo

Sonatype Nexus Repository 3.x through 3.33.1-01 is vulnerable to an HTTP header injection. By sending a crafted HTTP req

PHPMyWind 5.6 is vulnerable to Remote Code Execution. Becase input is filtered without "<, >, ?, =, `,...." In WriteConf

messages_load.php in ClinicCases 7.3.3 suffers from a blind SQL injection vulnerability, which allows low-privileged att

ClinicCases 7.3.3 is affected by Cross-Site Request Forgery (CSRF). A successful attack would consist of an authenticate

The find_color_or_error function in gifsicle 1.92 contains a NULL pointer dereference.

An issue was discovered in gpac 0.8.0. The strdup function in box_code_base.c has a heap-based buffer over-read.

pcapture is an open source dumpcap web service interface . In affected versions this vulnerability allows an authenticat

Misskey is an open source, decentralized microblogging platform. In affected versions a Server-Side Request Forgery vuln

Barco MirrorOp Windows Sender before 2.5.3.65 uses cleartext HTTP and thus allows rogue software upgrades. An attacker o

A crafted NTFS image can trigger a heap-based buffer overflow, caused by an unsanitized attribute in ntfs_get_attribute_

A crafted NTFS image can cause an out-of-bounds access in ntfs_decompress in NTFS-3G < 2021.8.22.

A crafted NTFS image can cause a heap-based buffer overflow in ntfs_compressed_pwrite in NTFS-3G < 2021.8.22.

A crafted NTFS image can cause an out-of-bounds access in ntfs_inode_sync_standard_information in NTFS-3G < 2021.8.22.

A crafted NTFS image can trigger an out-of-bounds access, caused by an unsanitized attribute length in ntfs_inode_lookup

A crafted NTFS image can cause out-of-bounds reads in ntfs_attr_find and ntfs_external_attr_find in NTFS-3G < 2021.8.22.

A crafted NTFS image can cause a heap-based buffer overflow in ntfs_inode_lookup_by_name in NTFS-3G < 2021.8.22.

A crafted NTFS image can trigger an out-of-bounds read, caused by an invalid attribute in ntfs_attr_find_in_attrdef, in

A crafted NTFS image can cause an integer overflow in memmove, leading to a heap-based buffer overflow in the function n

A crafted NTFS image can cause an out-of-bounds read in ntfs_runlists_merge_i in NTFS-3G < 2021.8.22.

A crafted NTFS image can cause an out-of-bounds read in ntfs_ie_lookup in NTFS-3G < 2021.8.22.

A crafted NTFS image can cause a NULL pointer dereference in ntfs_extent_inode_open in NTFS-3G < 2021.8.22.

NTFS-3G versions < 2021.8.22, a stack buffer overflow can occur when correcting differences in the MFT and MFTMirror all

In NTFS-3G versions < 2021.8.22, when a specially crafted NTFS inode pathname is supplied in an NTFS image a heap buffer

In NTFS-3G versions < 2021.8.22, when specially crafted NTFS attributes are read in the function ntfs_attr_pread_i, a he

In NTFS-3G versions < 2021.8.22, when a specially crafted unicode string is supplied in an NTFS image a heap buffer over

A vulnerability(improper input validation) in the ExECM CoreB2B solution allows an unauthenticated attacker to download

A vulnerability (improper input validation) in the DEXT5 Upload solution allows an unauthenticated attacker to download

Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the "invertImage()" function in the

NTFS-3G versions < 2021.8.22, when a specially crafted NTFS attribute from the MFT is setup in the function ntfs_attr_se