Archive
13 July 2021
Vulnerabilities first published on this day (UTC), newest first.
24 results · Clear filters · Feed
-
High 8.8
IBM Cloud Pak for Applications 4.3 could allow an authenticated user gain escalated privilesges due to improper applica…
-
High 7.5
IBM Cloud Pak for Applications 4.3 could disclose sensitive information to a malicious attacker by accessing data store…
-
High 7.8
Relative Path Traversal in git-delta
dandavison delta before 0.8.3 on Windows resolves an executable's pathname as a relative path from the current directory.
-
High 8.1
A vulnerability has been identified in RUGGEDCOM i800 (All versions < V4.3.7), RUGGEDCOM i801 (All versions < V4.3.7), …
-
High 7.5
Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial of service conditi…
-
High 7.5CVE-2021-36090 EPSS 13%
Apache Commons Compress 1.0 to 1.20 denial of service vulnerability
When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Co…
-
High 7.5CVE-2021-35517 EPSS 11%
Apache Commons Compress 1.1 to 1.20 denial of service vulnerability
When reading a specially crafted TAR archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Co…
-
High 7.5CVE-2021-35516 EPSS 12%
Apache Commons Compress 1.6 to 1.20 denial of service vulnerability
When reading a specially crafted 7Z archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Com…
-
High 7.5CVE-2021-35515 EPSS 12%
Apache Commons Compress 1.6 to 1.20 denial of service vulnerability
When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop. This could be used to mount a denial of service attack against services that use Compress' sevenz package.
-
High 7.5
Possible out of bound read due to lack of length check of FT sub-elements in Snapdragon Auto, Snapdragon Compute, Snapd…
-
High 7.5
Possible buffer over read due to improper validation of IE size while parsing beacon from peer device in Snapdragon Aut…
-
High 7.5
Denial of service in SAP case due to improper handling of connections when association is rejected in Snapdragon Auto, …
-
High 7.5
Possible buffer over read due to improper validation of data pointer while parsing FILS indication IE in Snapdragon Aut…
-
High 7.5
Improper handling of received malformed FTMR request frame can lead to reachable assertion while responding with FTM1 f…
-
High 7.5
Possible out of bound read due to lack of length check of Bandwidth-NSS IE in Snapdragon Auto, Snapdragon Compute, Snap…
-
High 7.5
Possible buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beaco…
-
High 7.5
Possible assertion due to improper verification while creating and deleting the peer in Snapdragon Auto, Snapdragon Com…
-
High 7.5
Possible buffer overflow due to lack of length check in BA request in Snapdragon Auto, Snapdragon Compute, Snapdragon C…
-
High 8.4
Improper length check of public exponent in RSA import key function could cause memory corruption. in Snapdragon Auto, …
-
High 8.4
Possible buffer overflow due to lack of length check in Trusted Application in Snapdragon Auto, Snapdragon Compute, Sna…
-
High 8.4
Memory corruption in key parsing and import function due to double freeing the same heap allocation in Snapdragon Auto,…
-
High 7.5
An assertion can be reached in the WLAN subsystem while using the Wi-Fi Fine Timing Measurement protocol in Snapdragon …
-
High 8.4
Incorrect handling of pointers in trusted application key import mechanism could cause memory corruption in Snapdragon …
-
High 8.4
Use after free can occur due to improper handling of response from firmware in Snapdragon Auto, Snapdragon Compute, Sna…