CVEs published July 13, 2021
139 CVEs were published on July 13, 2021: 2 critical, 19 high.
- Published
- 139
- Critical
- 2
- High
- 19
- Medium
- 18
- Low
- 0
- Unrated
- 100
- Now in CISA KEV
- 0
- Fix available
- 9
Most affected products
- Siemens JT2Go · Siemens Teamcenter Visualization
- 39
- Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- 17
- IBM Cloud Pak for Applications
- 12
- Apache Software Foundation Apache Commons Compress · org.ap…
- 4
- Qualcomm Snapdragon Consumer IOT, Snapdragon Industrial IOT…
- 4
- Siemens JT2Go · Siemens Solid Edge SE2021 +1
- 4
- Siemens JT Utilities
- 3
- Siemens Teamcenter Active Workspace
- 3
- Air Conditioning System/Centralized Controllers G-50A; GB-5…
- 2
- Siemens SIMATIC PCS 7 V8.2 and earlier · Siemens SIMATIC… +3
- 2
Critical 2
- CVE-2021-1965Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in Snapdragon Auto, Snapdragon Compute, SnapdragoQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11307Buffer overflow in modem due to improper array index check before copying into it in Snapdragon Auto, Snapdragon Compute, Snapdragon ConnectQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
High 19
- CVE-2021-20423IBM Cloud Pak for Applications 4.3 could allow an authenticated user gain escalated privilesges due to improper application permissions.IBM Cloud Pak for Applications
- CVE-2021-20422IBM Cloud Pak for Applications 4.3 could disclose sensitive information to a malicious attacker by accessing data stored in memory.IBM Cloud Pak for Applications
- CVE-2021-31895A vulnerability has been identified in RUGGEDCOM i800 (All versions < V4.3.7), RUGGEDCOM i801 (All versions < V4.3.7), RUGGEDCOM i802 (All vSiemens RUGGEDCOM i800 · Siemens RUGGEDCOM i801 +61
- CVE-2020-28400Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial of service condition.Siemens Development/Evaluation Kits for PROFINET IO: D… +179
- CVE-2021-1970Possible out of bound read due to lack of length check of FT sub-elements in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, SQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-1964Possible buffer over read due to improper validation of IE size while parsing beacon from peer device in Snapdragon Auto, Snapdragon ComputeQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-1955Denial of service in SAP case due to improper handling of connections when association is rejected in Snapdragon Auto, Snapdragon Compute, SQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-1954Possible buffer over read due to improper validation of data pointer while parsing FILS indication IE in Snapdragon Auto, Snapdragon ComputeQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-1953Improper handling of received malformed FTMR request frame can lead to reachable assertion while responding with FTM1 frame in Snapdragon AuQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-1945Possible out of bound read due to lack of length check of Bandwidth-NSS IE in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-1943Possible buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beacon response in SnapdraQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-1938Possible assertion due to improper verification while creating and deleting the peer in Snapdragon Auto, Snapdragon Compute, Snapdragon ConnQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-1907Possible buffer overflow due to lack of length check in BA request in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, SnapdragQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-1890Improper length check of public exponent in RSA import key function could cause memory corruption.Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-1889Possible buffer overflow due to lack of length check in Trusted Application in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-1888Memory corruption in key parsing and import function due to double freeing the same heap allocation in Snapdragon Auto, Snapdragon Compute, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-1887An assertion can be reached in the WLAN subsystem while using the Wi-Fi Fine Timing Measurement protocol in Snapdragon Wired Infrastructure Qualcomm Snapdragon Wired Infrastructure and Networking
- CVE-2021-1886Incorrect handling of pointers in trusted application key import mechanism could cause memory corruption in Snapdragon Auto, Snapdragon CompQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-1940Use after free can occur due to improper handling of response from firmware in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
Medium, low and unrated 118
- CVE-2020-19722An unhandled memory allocation failure in Core/Ap4Atom.cpp of Bento 1.5.1-628 causes a direct copy to NULL pointer dereference, leading to a
- CVE-2020-19721A heap buffer overflow vulnerability in Ap4TrunAtom.cpp of Bento 1.5.1-628 may lead to an out-of-bounds write while running mp42aac, leading
- CVE-2020-19720An unhandled memory allocation failure in Core/AP4IkmsAtom.cpp of Bento 1.5.1-628 causes a NULL pointer dereference, leading to a denial of
- CVE-2020-19719A buffer overflow vulnerability in Ap4ElstAtom.cpp of Bento 1.5.1-628 leads to a denial of service (DOS).
- CVE-2020-19718An unhandled memory allocation failure in Core/Ap4Atom.cpp of Bento 1.5.1-628 causes a NULL pointer dereference, leading to a denial of serv
- CVE-2020-19717An unhandled memory allocation failure in Core/Ap48bdlAtom.cpp of Bento 1.5.1-628 causes a NULL pointer dereference, leading to a denial of
- CVE-2021-32755Certificate pinning is not enforced on the web socket connectionwireapp wire-ios-transport
- CVE-2021-21995OpenSLP as used in ESXi has a denial-of-service vulnerability due a heap out-of-bounds read issue.VMware ESXi and VMware Cloud Foundation
- CVE-2021-21994SFCB (Small Footprint CIM Broker) as used in ESXi has an authentication bypass vulnerability.VMware ESXi and VMware Cloud Foundation
- CVE-2021-22000VMware Thinapp version 5.x prior to 5.2.10 contain a DLL hijacking vulnerability due to insecure loading of DLLs.Vmware Thinapp
- CVE-2021-31217In SolarWinds DameWare Mini Remote Control Server 12.0.1.200, insecure file permissions allow file deletion as SYSTEM.
- CVE-2021-36214LINE client for iOS before 10.16.3 allows cross site script with specific header in WebView.LINE client for iOS
- CVE-2020-20252Mikrotik RouterOs before stable version 6.47 suffers from a memory corruption vulnerability in the /nova/bin/lcdstat process.
- CVE-2021-20424IBM Cloud Pak for Applications 4.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is IBM Cloud Pak for Applications
- CVE-2021-20369IBM Cloud Pak for Applications 4.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitiIBM Cloud Pak for Applications
- CVE-2021-20368IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting.IBM Cloud Pak for Applications
- CVE-2021-20366IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting.IBM Cloud Pak for Applications
- CVE-2021-20365IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting.IBM Cloud Pak for Applications
- CVE-2021-20364IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting.IBM Cloud Pak for Applications
- CVE-2021-20363IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting.IBM Cloud Pak for Applications
- CVE-2021-20362IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting.IBM Cloud Pak for Applications
- CVE-2021-20361IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting.IBM Cloud Pak for Applications
- CVE-2021-20360IBM Cloud Pak for Applications 4.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitiIBM Cloud Pak for Applications
- CVE-2020-22907Stack overflow vulnerability in function jsi_evalcode_sub in jsish before 3.0.18, allows remote attackers to cause a Denial of Service via a
- CVE-2020-22886Buffer overflow vulnerability in function jsG_markobject in jsgc.c in mujs before 1.0.8, allows remote attackers to cause a denial of servic
- CVE-2020-22885Buffer overflow vulnerability in mujs before 1.0.8 due to recursion in the GC scanning phase, allows remote attackers to cause a denial of s
- CVE-2020-22884Buffer overflow vulnerability in function jsvGetStringChars in Espruino before RELEASE_2V09, allows remote attackers to execute arbitrary co
- CVE-2020-22882Issue was discovered in the fxParserTree function in moddable, allows attackers to cause denial of service via a crafted payload.
- CVE-2020-22876Buffer Overflow vulnerability in quickjs.c in QuickJS, allows remote attackers to cause denial of service.
- CVE-2020-22875Integer overflow vulnerability in function Jsi_ObjSetLength in jsish before 3.0.6, allows remote attackers to execute arbitrary code.
- CVE-2020-22874Integer overflow vulnerability in function Jsi_ObjArraySizer in jsish before 3.0.8, allows remote attackers to execute arbitrary code.
- CVE-2020-22873Buffer overflow vulnerability in function NumberToPrecisionCmd in jsish before 3.0.7, allows remote attackers to execute arbitrary code.
- CVE-2021-36122An issue was discovered in Echo ShareCare 8.15.5.
- CVE-2021-36121An issue was discovered in Echo ShareCare 8.15.5.
- CVE-2021-36124An issue was discovered in Echo ShareCare 8.15.5.
- CVE-2021-36123An issue was discovered in Echo ShareCare 8.15.5.
- CVE-2021-33578Echo ShareCare 8.15.5 is susceptible to SQL injection vulnerabilities when processing remote input from both authenticated and unauthenticat
- CVE-2021-31221SES Evolution before 2.1.0 allows deleting some parts of a security policy by leveraging access to a computer having the administration cons
- CVE-2021-20593Incorrect Implementation of Authentication Algorithm in Mitsubishi Electric Air Conditioning System/Centralized Controllers (G-50A Ver.2.50 Air Conditioning System/Centralized Controllers G-50A; GB-5…
- CVE-2021-31222SES Evolution before 2.1.0 allows updating some parts of a security policy by leveraging access to a computer having the administration cons
- CVE-2021-31223SES Evolution before 2.1.0 allows reading some parts of a security policy by leveraging access to a computer having the administration conso
- CVE-2021-31220SES Evolution before 2.1.0 allows modifying security policies by leveraging access of a user having read-only access to security policies.
- CVE-2021-31224SES Evolution before 2.1.0 allows duplicating an existing security policy by leveraging access of a user having read-only access to security
- CVE-2021-35957Stormshield Endpoint Security Evolution 2.0.0 through 2.0.2 does not accomplish the intended defense against local administrators who can re
- CVE-2021-31225SES Evolution before 2.1.0 allows deleting some resources not currently in use by any security policy by leveraging access to a computer hav
- CVE-2021-36376dandavison delta before 0.8.3 on Windows resolves an executable's pathname as a relative path from the current directory.git-delta
- CVE-2020-20250Mikrotik RouterOs before stable version 6.47 suffers from a memory corruption vulnerability in the /nova/bin/lcdstat process.
- CVE-2021-22440There is a path traversal vulnerability in some Huawei products.HUAWEI Mate 20;HUAWEI Mate 20 Pro;Hima-L29C;Laya-AL00EP;Oxf…
- CVE-2021-22399The Bluetooth function of some Huawei smartphones has a DoS vulnerability.HUAWEI P30
- CVE-2021-34332A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2).Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2021-34333A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2).Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2021-34331A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2).Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2021-34330A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2).Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2021-34329A vulnerability has been identified in JT2Go (All versions < V13.2), Solid Edge SE2021 (All Versions < SE2021MP5), Teamcenter Visualization Siemens JT2Go · Siemens Solid Edge SE2021 +1
- CVE-2021-34328A vulnerability has been identified in JT2Go (All versions < V13.2), Solid Edge SE2021 (All Versions < SE2021MP5), Teamcenter Visualization Siemens JT2Go · Siemens Solid Edge SE2021 +1
- CVE-2021-34327A vulnerability has been identified in JT2Go (All versions < V13.2), Solid Edge SE2021 (All Versions < SE2021MP5), Teamcenter Visualization Siemens JT2Go · Siemens Solid Edge SE2021 +1
- CVE-2021-34326A vulnerability has been identified in JT2Go (All versions < V13.2), Solid Edge SE2021 (All Versions < SE2021MP5), Teamcenter Visualization Siemens JT2Go · Siemens Solid Edge SE2021 +1
- CVE-2021-34325A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2).Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2021-34324A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2).Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2021-34323A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2).Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2021-34322A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2).Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2021-34321A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2).Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2021-34319A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2).Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2021-34320A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2).Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2021-34318A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2).Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2021-34317A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2).Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2021-34316A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2).Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2021-34315A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2).Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2021-34314A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2).Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2021-34313A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2).Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2021-34312A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2).Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2021-34311A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2).Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2021-34310A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2).Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2021-34309A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2).Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2021-34308A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2).Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2021-34307A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2).Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2021-34306A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2).Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2021-34305A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2).Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2021-34304A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2).Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2021-34303A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2).Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2021-34302A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2).Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2021-34301A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2).Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2021-34300A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2).Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2021-34299A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2).Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2021-34298A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2).Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2021-34297A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2).Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2021-34296A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2).Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2021-34295A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2).Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2021-34294A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2).Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2021-34293A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2).Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2021-34292A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2).Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2021-34291A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2).Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2021-33718A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.22), Mendix Applications using Mendix 8 (AllSiemens Mendix Applications using Mendix
- CVE-2021-33715A vulnerability has been identified in JT Utilities (All versions < V13.0.2.0).Siemens JT Utilities
- CVE-2021-33714A vulnerability has been identified in JT Utilities (All versions < V13.0.2.0).Siemens JT Utilities
- CVE-2021-33713A vulnerability has been identified in JT Utilities (All versions < V13.0.2.0).Siemens JT Utilities
- CVE-2021-33711A vulnerability has been identified in Teamcenter Active Workspace V4 (All versions < V4.3.9), Teamcenter Active Workspace V5.0 (All versionSiemens Teamcenter Active Workspace
- CVE-2021-33710A vulnerability has been identified in Teamcenter Active Workspace V4 (All versions < V4.3.9), Teamcenter Active Workspace V5.0 (All versionSiemens Teamcenter Active Workspace
- CVE-2021-33709A vulnerability has been identified in Teamcenter Active Workspace V4 (All versions < V4.3.9), Teamcenter Active Workspace V5.0 (All versionSiemens Teamcenter Active Workspace
- CVE-2021-31894A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.X (All versions < V9.1 SP2), SIMATIC Siemens SIMATIC PCS 7 V8.2 and earlier · Siemens SIMATIC… +3
- CVE-2021-31893A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3), SIMATIC Siemens SIMATIC PCS 7 V8.2 and earlier · Siemens SIMATIC… +3
- CVE-2021-31892A vulnerability has been identified in SINUMERIK Analyse MyCondition (All versions), SINUMERIK Analyze MyPerformance (All versions), SINUMERSiemens SINUMERIK Analyse MyCondition · Siemens SINUMERI… +9
- CVE-2021-25671A vulnerability has been identified in RWG1.M12 (All versions < V1.16.16), RWG1.M12D (All versions < V1.16.16), RWG1.M8 (All versions < V1.1Siemens RWG1.M12 · Siemens RWG1.M12D +1
- CVE-2021-20595Improper Restriction of XML External Entity Reference vulnerability in Mitsubishi Electric Air Conditioning System/Centralized Controllers (Air Conditioning System/Centralized Controllers G-50A; GB-5…
- CVE-2020-26153A cross-site scripting (XSS) vulnerability in wp-content/plugins/event-espresso-core-reg/admin_pages/messages/templates/ee_msg_admin_overvie
- CVE-2021-36090Apache Commons Compress 1.0 to 1.20 denial of service vulnerabilityApache Software Foundation Apache Commons Compress · org.ap…
- CVE-2021-35517Apache Commons Compress 1.1 to 1.20 denial of service vulnerabilityApache Software Foundation Apache Commons Compress · org.ap…
- CVE-2021-35516Apache Commons Compress 1.6 to 1.20 denial of service vulnerabilityApache Software Foundation Apache Commons Compress · org.ap…
- CVE-2021-35515Apache Commons Compress 1.6 to 1.20 denial of service vulnerabilityApache Software Foundation Apache Commons Compress · org.ap…
- CVE-2021-1931Possible buffer overflow due to improper validation of buffer length while processing fast boot commands in Snapdragon Auto, Snapdragon CompQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-1901Possible buffer over-read due to lack of length check while flashing meta images in Snapdragon Consumer IOT, Snapdragon Industrial IOT, SnapQualcomm Snapdragon Consumer IOT, Snapdragon Industrial IOT…
- CVE-2021-1899Possible buffer over read due to lack of length check while flashing meta images in Snapdragon Consumer IOT, Snapdragon Industrial IOT, SnapQualcomm Snapdragon Consumer IOT, Snapdragon Industrial IOT…
- CVE-2021-1898Possible buffer over-read due to incorrect overflow check when loading splash image in Snapdragon Consumer IOT, Snapdragon Industrial IOT, SQualcomm Snapdragon Consumer IOT, Snapdragon Industrial IOT…
- CVE-2021-1897Possible Buffer Over-read due to lack of validation of boundary checks when loading splash image in Snapdragon Consumer IOT, Snapdragon InduQualcomm Snapdragon Consumer IOT, Snapdragon Industrial IOT…
- CVE-2021-1896Weak configuration in WLAN could cause forwarding of unencrypted packets from one client to another in Snapdragon Compute, Snapdragon ConnecQualcomm Snapdragon Compute, Snapdragon Connectivity
- CVE-2020-19716A buffer overflow vulnerability in the Databuf function in types.cpp of Exiv2 v0.27.1 leads to a denial of service (DOS).
- CVE-2021-31810An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1.
- CVE-2021-34552Pillow through 8.2.0 and PIL (aka Python Imaging Library) through 1.1.7 allow an attacker to pass controlled parameters directly into a convpillow