Day: August 18, 2021

Google Android WiFi Driver out-of-bounds read [CVE-2021-0582]

A vulnerability was found in Google Android (Smartphone Operating System) (the affected version unknown). It has been classified as problematic.

Common Vulnerabilities and Exposures

diez generation on npm @diez/generation os command injection

A vulnerability was found in diez generation on npm (NPM Package) (the affected version is unknown). It has been declared

Common Vulnerabilities and Exposures

HAProxy up to 12.0.23/2.2.15/2.3.12/2.4.2 HTTP Method /admin access control

A vulnerability was found in HAProxy up to 12.0.23/2.2.15/2.3.12/2.4.2 (Firewall Software). It has been rated as critical. This issue affects

Common Vulnerabilities and Exposures

Prusa Research PrusaSlicer 2.2.0 3MF File _handle_end_model use after free

A vulnerability classified as critical has been found in Prusa Research PrusaSlicer 2.2.0. Affected is the function _3MF_Importer::_handle_end_model of the

Common Vulnerabilities and Exposures

Mozilla Firefox/Firefox ESR/Thunderbird on Linux getaddrinfo memory corruption

A vulnerability classified as critical was found in Mozilla Firefox, Firefox ESR and Thunderbird on Linux (Web Browser) (affected version

Common Vulnerabilities and Exposures

Mozilla Firefox/Thunderbird up to 90.x on Linux Permissions improper restriction of rendered ui layers

A vulnerability, which was classified as critical, has been found in Mozilla Firefox and Thunderbird up to 90.x on Linux

Common Vulnerabilities and Exposures

ced prior 1.0.0 on Node.js compact_enc_det Library Buffer.isBuffer denial of service

A vulnerability, which was classified as problematic, was found in ced on Node.js (JavaScript Library). This affects the function Buffer.isBuffer

Common Vulnerabilities and Exposures

Google Android 8.1/9.0/10.0/11.0 Parcel.cpp verifyBufferObject out-of-bounds read

A vulnerability has been found in Google Android 8.1/9.0/10.0/11.0 (Smartphone Operating System) and classified as problematic. This vulnerability affects the

Common Vulnerabilities and Exposures

Google Android 8.1/9.0/10.0/11.0 BluetoothPermissionActivity.java sendReplyIntentToReceiver permission

A vulnerability was found in Google Android 8.1/9.0/10.0/11.0 (Smartphone Operating System) and classified as critical. This issue affects the function

Common Vulnerabilities and Exposures

Invision Power Services Community Suite up to 4.6.5.0 IFRAME cross site scripting

A vulnerability was found in Invision Power Services Community Suite up to 4.6.5.0. It has been classified as problematic. Affected

Common Vulnerabilities and Exposures

sqmail up to 4.0.07 STARTTLS missing encryption

A vulnerability was found in sqmail up to 4.0.07 (Mail Server Software). It has been declared as problematic. Affected by

Common Vulnerabilities and Exposures

SmarterTools SmarterMail up to 100.0.7537 POP3 STLS Command injection

A vulnerability was found in SmarterTools SmarterMail up to 100.0.7537. It has been rated as critical. Affected by this issue

Common Vulnerabilities and Exposures

HAProxy up to 2.2.15/2.3.12/2.4.2 URL injection

A vulnerability classified as critical has been found in HAProxy up to 2.2.15/2.3.12/2.4.2 (Firewall Software). This affects an unknown functionality

Common Vulnerabilities and Exposures

HAProxy up to 2.2.15/2.3.12/2.4.2 HTTP Host Header access control

A vulnerability classified as critical was found in HAProxy up to 2.2.15/2.3.12/2.4.2 (Firewall Software). This vulnerability affects some unknown functionality

Common Vulnerabilities and Exposures

Bento4 06c39d9 /Core/Ap4Stz2Atom.cpp GetSampleSize null pointer dereference

A vulnerability, which was classified as problematic, has been found in Bento4 06c39d9 (Multimedia Player Software). This issue affects the

Common Vulnerabilities and Exposures

Bento4 06c39d9 /Core/Ap4Descriptor.h WriteFields null pointer dereference

A vulnerability, which was classified as problematic, was found in Bento4 06c39d9 (Multimedia Player Software). Affected is the function AP4_DecoderConfigDescriptor::WriteFields

Common Vulnerabilities and Exposures

Mozilla Firefox/Firefox ESR/Thunderbird memory corruption [CVE-2021-29989]

A vulnerability classified as critical was found in Mozilla Firefox, Firefox ESR and Thunderbird (Web Browser) (affected version unknown). Affected

Common Vulnerabilities and Exposures

EmpireCMS 7.5 Install File e/install/index.php Privilege Escalation

A vulnerability, which was classified as critical, has been found in EmpireCMS 7.5. Affected by this issue is an unknown

Common Vulnerabilities and Exposures

Mozilla Firefox up to 90.x memory corruption [CVE-2021-29990]

A vulnerability, which was classified as critical, was found in Mozilla Firefox up to 90.x (Web Browser). This affects an

Common Vulnerabilities and Exposures

Invision Power Services Community Suite up to 4.6.5.0 Filename mt_rand cross site scripting

A vulnerability has been found in Invision Power Services Community Suite up to 4.6.5.0 and classified as problematic. This vulnerability

Common Vulnerabilities and Exposures

Pixelimity 1.0 POST Parameter admin/setting.php cross site scripting

A vulnerability was found in Pixelimity 1.0 and classified as problematic. This issue affects an unknown function of the file

Common Vulnerabilities and Exposures

tp-shop 2.x/3.x /index.php/home/api/shop fBill sql injection

A vulnerability was found in tp-shop 2.x/3.x. It has been classified as critical. Affected is an unknown functionality of the

Common Vulnerabilities and Exposures

Juniper Junos OS TCP/IP Stack buffer overflow [CVE-2021-0284]

A vulnerability was found in Juniper Junos OS (Router Operating System) (affected version unknown). It has been declared as critical.

Common Vulnerabilities and Exposures

Cyberoam NetGenie C0101B1-20141120-NG11VO up to 2021-08-14 tweb/ft.php u cross site scripting

A vulnerability was found in Cyberoam NetGenie C0101B1-20141120-NG11VO up to 2021-08-14. It has been rated as problematic. Affected by this