2021

Grok 7.6.6 through 9.2.0 has a heap-based buffer overflow in grk::FileFormatDecompress::apply_palette_clr (called from g

ntop nDPI 3.4 has a stack-based buffer overflow in processClientServerHello.

Tesseract OCR 5.0.0-alpha-20201231 has a one_ell_conflict use-after-free during a strpbrk call.

GNU LibreDWG 0.12.3.4163 through 0.12.3.4191 has a double-free in bit_chain_free (called from dwg_encode_MTEXT and dwg_e

libavif 0.8.0 and 0.8.1 has an out-of-bounds write in avifDecoderDataFillImageGrid.

uWebSockets 18.11.0 and 18.12.0 has a stack-based buffer overflow in uWS::TopicTree::trimTree (called from uWS::TopicTre

Keystone Engine 0.9.2 has a use-after-free in llvm_ks::X86Operand::getToken.

Keystone Engine 0.9.2 has an invalid free in llvm_ks::SmallVectorImpl<llvm_ks::MCFixup>::~SmallVectorImpl.

HTSlib through 1.10.2 allows out-of-bounds write access in vcf_parse_format (called from vcf_parse and vcf_read).

Solidity 0.7.5 has a stack-use-after-return issue in smtutil::CHCSmtLib2Interface::querySolver. NOTE: c39a5e2b7a3fabbf68

mruby 2.1.2 has a double free in mrb_default_allocf (called from mrb_free and obj_free).

LibreSSL 2.9.1 through 3.2.1 has an out-of-bounds read in asn1_item_print_ctx (called from asn1_template_print_ctx).

LibreSSL 2.9.1 through 3.2.1 has a heap-based buffer over-read in do_print_ex (called from asn1_item_print_ctx and ASN1_

UnRAR 5.6.1.7 through 5.7.4 and 6.0.3 has an out-of-bounds write during a memcpy in QuickOpen::ReadRaw when called from

UnRAR 5.6.1.2 and 5.6.1.3 has a heap-based buffer overflow in Unpack::CopyString (called from Unpack::Unpack5 and CmdExt

There is a Configuration Defect Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may al

There is a Credentials Management Errors Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerabili

There is a Memory Buffer Improper Operation Limit Vulnerability in Huawei Smartphone. Successful exploitation of this vu

There is an Input Verification Vulnerability in Huawei Smartphone. Successful exploitation of insufficient input verific

think-helper defines a set of helper functions for ThinkJS. In versions of think-helper prior to 1.1.3, the software rec

There is a Permission Control Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may affe

There is a Memory Buffer Improper Operation Limit Vulnerability in Huawei Smartphone. Successful exploitation of this vu

Jenkins 2.299 and earlier, LTS 2.289.1 and earlier does not invalidate the previous session on login.

Talk 4 in Coral before 4.12.1 allows remote attackers to discover e-mail addresses and other sensitive information via G

There is an Improper Validation of Array Index Vulnerability in Huawei Smartphone. Successful exploitation of this vulne

There is an Improper Permission Management Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerabi

There is a Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability in Huawei Smartphone. Successful exploitation

A component of the HarmonyOS has a Improper Privilege Management vulnerability. Local attackers may exploit this vulnera

There is a Security Features Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may affec

There is a Credentials Management Errors Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerabili

A component of the HarmonyOS has a Privilege Dropping / Lowering Errors vulnerability. Local attackers may exploit this

Plixer Scrutinizer 19.0.2 is affected by: SQL Injection. The impact is: obtain sensitive information (remote).

XXE vulnerability in 'XML2Dict' version 0.2.2 allows an attacker to cause a denial of service.

Bootloader contains a vulnerability in NVIDIA MB2 where potential heap overflow might cause corruption of the heap metad

Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 10 is missing. The length of an

Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 11 is missing. Improper restrict

Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 9 is missing. Improper restricti

Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 5 is missing. Improper restricti

Trusty contains a vulnerability in all trusted applications (TAs) where the stack cookie was not randomized, which might

Trusty contains a vulnerability in command handlers where the length of input buffers is not verified. This vulnerabilit

Trusty trusted Linux kernel (TLK) contains a vulnerability in the NVIDIA TLK kernel where a lack of heap hardening could

inappropriate x86 IOMMU timeout detection / handling IOMMUs process commands issued to them in parallel with the operati

A UNIX Symbolic Link (Symlink) Following vulnerability in arpwatch of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Man

Improper Input Validation vulnerability in HTTP/2 of Apache Traffic Server allows an attacker to DOS the server. This is

Improper Input Validation vulnerability in HTTP/2 of Apache Traffic Server allows an attacker to DOS the server. This is

Western Digital WD My Book Live (2.x and later) and WD My Book Live Duo (all versions) have an administrator API that ca

There is a deserialization vulnerability in Huawei AnyOffice V200R006C10. An attacker can construct a specific request t

The TIBCO Spotfire Server and TIBCO Enterprise Runtime for R components of TIBCO Software Inc.'s TIBCO Enterprise Runtim

The Windows Installation component of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enter

Spring Security versions 5.5.x prior to 5.5.1, 5.4.x prior to 5.4.7, 5.3.x prior to 5.3.10 and 5.2.x prior to 5.2.11 are