2021 CVEs (page 117)
Page 117 of 226 — CVEs published in 2021, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-39594 | Medium | 5.5 | 2021-09-20 | Other An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function updateusage() located in swftext.c. It allows an… |
CVE-2021-39593 | Medium | 5.5 | 2021-09-20 | An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function swf_FontExtract_DefineFontInfo() located in swftext.c… |
CVE-2021-39592 | Medium | 5.5 | 2021-09-20 | An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function pool_lookup_uint() located in pool.c. It allows an atta… |
CVE-2021-39591 | Medium | 5.5 | 2021-09-20 | An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function swf_GetShapeBoundingBox() located in swfshape.c. It all… |
CVE-2021-39590 | Medium | 5.5 | 2021-09-20 | An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function params_dump() located in abc.c. It allows an attacker t… |
CVE-2021-39589 | Medium | 5.5 | 2021-09-20 | An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function parse_metadata() located in abc.c. It allows an attacke… |
CVE-2021-39588 | Medium | 5.5 | 2021-09-20 | An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function swf_ReadABC() located in abc.c. It allows an attacker t… |
CVE-2021-39587 | Medium | 5.5 | 2021-09-20 | An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function swf_DumpABC() located in abc.c. It allows an attacker t… |
CVE-2021-39585 | Medium | 5.5 | 2021-09-20 | An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function traits_dump() located in abc.c. It allows an attacker t… |
CVE-2021-39584 | Medium | 5.5 | 2021-09-20 | An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function namespace_set_hash() located in pool.c. It allows an at… |
CVE-2021-39583 | Medium | 5.5 | 2021-09-20 | An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function pool_lookup_string2() located in pool.c. It allows an a… |
CVE-2021-39582 | High | 7.8 | 2021-09-20 | An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function swf_GetPlaceObject() located in swfobject.c. It allows an a… |
CVE-2021-39579 | High | 7.8 | 2021-09-20 | An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function string_hash() located in q.c. It allows an attacker to caus… |
CVE-2021-39577 | High | 7.8 | 2021-09-20 | An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function main() located in swfdump.c. It allows an attacker to cause… |
CVE-2021-39575 | Medium | 5.5 | 2021-09-20 | An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function dump_method() located in abc.c. It allows an attacker t… |
CVE-2021-39574 | High | 7.8 | 2021-09-20 | An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function pool_read() located in pool.c. It allows an attacker to cau… |
CVE-2021-39569 | High | 7.8 | 2021-09-20 | An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function OpAdvance() located in swfaction.c. It allows an attacker t… |
CVE-2021-39564 | High | 7.8 | 2021-09-20 | An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function swf_DumpActions() located in swfaction.c. It allows an atta… |
CVE-2021-39563 | Medium | 5.5 | 2021-09-20 | An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function swf_DumpActions() located in swfaction.c. It allows an… |
CVE-2021-39562 | Medium | 5.5 | 2021-09-20 | An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function FileStream::makeSubStream() located in Stream.cc. It al… |
CVE-2021-39561 | High | 7.8 | 2021-09-20 | An issue was discovered in swftools through 20200710. A stack-buffer-overflow exists in the function Gfx::opSetFillColorN() located in Gfx.cc. It allows an att… |
CVE-2021-39559 | Medium | 5.5 | 2021-09-20 | An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function GString::~GString() located in GString.cc. It allows an… |
CVE-2021-39558 | High | 7.8 | 2021-09-20 | An issue was discovered in swftools through 20200710. A stack-buffer-overflow exists in the function VectorGraphicOutputDev::drawGeneralImage() located in Vect… |
CVE-2021-39557 | Medium | 5.5 | 2021-09-20 | An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function copyString() located in gmem.cc. It allows an attacker… |
CVE-2021-39556 | Medium | 5.5 | 2021-09-20 | An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function InfoOutputDev::type3D1() located in InfoOutputDev.cc. I… |
CVE-2021-39555 | Medium | 5.5 | 2021-09-20 | An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function InfoOutputDev::type3D0() located in InfoOutputDev.cc. I… |
CVE-2021-39554 | Medium | 5.5 | 2021-09-20 | An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function Lexer::Lexer() located in Lexer.cc. It allows an attack… |
CVE-2021-39553 | Medium | 5.5 | 2021-09-20 | An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function grealloc() located in gmem.cc. It allows an attacker to… |
CVE-2021-39552 | High | 7.8 | 2021-09-20 | An issue was discovered in sela through 20200412. file::WavFile::readFromFile() in wav_file.c has a heap-based buffer overflow. |
CVE-2021-39551 | High | 7.8 | 2021-09-20 | An issue was discovered in sela through 20200412. file::SelaFile::readFromFile() in sela_file.c has a heap-based buffer overflow. |
CVE-2021-39550 | High | 7.8 | 2021-09-20 | An issue was discovered in sela through 20200412. file::SelaFile::readFromFile() in sela_file.cpp has a heap-based buffer overflow. |
CVE-2021-39549 | Medium | 5.5 | 2021-09-20 | An issue was discovered in sela through 20200412. A NULL pointer dereference exists in the function file::WavFile::WavFile() located in wav_file.c. It allows a… |
CVE-2021-39548 | Medium | 5.5 | 2021-09-20 | An issue was discovered in sela through 20200412. A NULL pointer dereference exists in the function frame::FrameDecoder::process() located in frame_decoder.c… |
CVE-2021-39547 | Medium | 5.5 | 2021-09-20 | An issue was discovered in sela through 20200412. A NULL pointer dereference exists in the function lpc::SampleGenerator::process() located in sample_generator… |
CVE-2021-39546 | High | 7.8 | 2021-09-20 | An issue was discovered in sela through 20200412. rice::RiceDecoder::process() in rice_decoder.cpp has a heap-based buffer overflow. |
CVE-2021-39545 | Medium | 5.5 | 2021-09-20 | An issue was discovered in sela through 20200412. A NULL pointer dereference exists in the function rice::RiceDecoder::process() located in rice_decoder.c. It… |
CVE-2021-39544 | High | 7.8 | 2021-09-20 | An issue was discovered in sela through 20200412. file::WavFile::writeToFile() in wav_file.c has a heap-based buffer overflow. |
CVE-2021-39543 | Medium | 5.5 | 2021-09-20 | An issue was discovered in pdftools through 20200714. A NULL pointer dereference exists in the function Analyze::AnalyzeRoot() located in analyze.cpp. It allow… |
CVE-2021-39542 | Medium | 5.5 | 2021-09-20 | An issue was discovered in pdftools through 20200714. A NULL pointer dereference exists in the function Font::Size() located in font.cpp. It allows an attacker… |
CVE-2021-39541 | Medium | 5.5 | 2021-09-20 | An issue was discovered in pdftools through 20200714. A NULL pointer dereference exists in the function Analyze::AnalyzeXref() located in analyze.cpp. It allow… |
CVE-2021-39540 | High | 7.8 | 2021-09-20 | An issue was discovered in pdftools through 20200714. A stack-buffer-overflow exists in the function Analyze::AnalyzePages() located in analyze.cpp. It allows… |
CVE-2021-39539 | Medium | 5.5 | 2021-09-20 | An issue was discovered in pdftools through 20200714. A NULL pointer dereference exists in the function node::BDCNode::~BDCNode() located in bdcnode.cpp. It al… |
CVE-2021-39538 | Medium | 5.5 | 2021-09-20 | An issue was discovered in pdftools through 20200714. A NULL pointer dereference exists in the function node::ObjNode::Value() located in objnode.cpp. It allow… |
CVE-2021-39537 | High | 8.8 | 2021-09-20 | An issue was discovered in ncurses through v6.2-1. _nc_captoinfo in captoinfo.c has a heap-based buffer overflow. |
CVE-2021-39536 | High | 8.8 | 2021-09-20 | An issue was discovered in libxsmm through v1.16.1-93. The JIT code has a heap-based buffer overflow. |
CVE-2021-39535 | Medium | 6.5 | 2021-09-20 | An issue was discovered in libxsmm through v1.16.1-93. A NULL pointer dereference exists in JIT code. It allows an attacker to cause Denial of Service. |
CVE-2021-39534 | High | 8.8 | 2021-09-20 | An issue was discovered in libslax through v0.22.1. slaxIsCommentStart() in slaxlexer.c has a heap-based buffer overflow. |
CVE-2021-39533 | High | 8.8 | 2021-09-20 | An issue was discovered in libslax through v0.22.1. slaxLexer() in slaxlexer.c has a heap-based buffer overflow. |
CVE-2021-39532 | Medium | 6.5 | 2021-09-20 | An issue was discovered in libslax through v0.22.1. A NULL pointer dereference exists in the function slaxLexer() located in slaxlexer.c. It allows an attacker… |
CVE-2021-39531 | High | 8.8 | 2021-09-20 | An issue was discovered in libslax through v0.22.1. slaxLexer() in slaxlexer.c has a stack-based buffer overflow. |
CVE-2021-39530 | High | 8.8 | 2021-09-20 | An issue was discovered in libredwg through v0.10.1.3751. bit_wcs2nlen() in bits.c has a heap-based buffer overflow. |
CVE-2021-39528 | High | 8.8 | 2021-09-20 | An issue was discovered in libredwg through v0.10.1.3751. dwg_free_MATERIAL_private() in dwg.spec has a double free. |
CVE-2021-39527 | High | 8.8 | 2021-09-20 | An issue was discovered in libredwg through v0.10.1.3751. appinfo_private() in decode.c has a heap-based buffer overflow. |
CVE-2021-39525 | High | 8.8 | 2021-09-20 | An issue was discovered in libredwg through v0.10.1.3751. bit_read_fixed() in bits.c has a heap-based buffer overflow. |
CVE-2021-39523 | Medium | 6.5 | 2021-09-20 | An issue was discovered in libredwg through v0.10.1.3751. A NULL pointer dereference exists in the function check_POLYLINE_handles() located in decode.c. It al… |
CVE-2021-39522 | High | 8.8 | 2021-09-20 | An issue was discovered in libredwg through v0.10.1.3751. bit_wcs2len() in bits.c has a heap-based buffer overflow. |
CVE-2021-39521 | Medium | 6.5 | 2021-09-20 | An issue was discovered in libredwg through v0.10.1.3751. A NULL pointer dereference exists in the function bit_read_BB() located in bits.c. It allows an attac… |
CVE-2021-39520 | Medium | 6.5 | 2021-09-20 | An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function BlockBitmapRequester::PushReconstructedData() located in… |
CVE-2021-39519 | Medium | 6.5 | 2021-09-20 | An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function BlockBitmapRequester::PullQData() located in blockbitmapr… |
CVE-2021-39518 | Medium | 6.5 | 2021-09-20 | An issue was discovered in libjpeg through 2020021. LineBuffer::FetchRegion() in linebuffer.cpp has a heap-based buffer overflow. |
CVE-2021-39517 | Medium | 6.5 | 2021-09-20 | An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function BlockBitmapRequester::ReconstructUnsampled() located in b… |
CVE-2021-39516 | Medium | 6.5 | 2021-09-20 | An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function HuffmanDecoder::Get() located in huffmandecoder.hpp. It a… |
CVE-2021-39515 | Medium | 6.5 | 2021-09-20 | An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function SampleInterleavedLSScan::ParseMCU() located in sampleinte… |
CVE-2021-39514 | Medium | 6.5 | 2021-09-20 | An issue was discovered in libjpeg through 2020021. An uncaught floating point exception in the function ACLosslessScan::ParseMCU() located in aclosslessscan.c… |
CVE-2021-38094 | High | 8.8 | 2021-09-20 | Integer Overflow vulnerability in function filter_sobel in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other… |
CVE-2021-38093 | High | 8.8 | 2021-09-20 | Integer Overflow vulnerability in function filter_robert in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or othe… |
CVE-2021-38092 | High | 8.8 | 2021-09-20 | Integer Overflow vulnerability in function filter_prewitt in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or oth… |
CVE-2021-38091 | High | 8.8 | 2021-09-20 | Integer Overflow vulnerability in function filter16_sobel in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or oth… |
CVE-2021-38090 | High | 8.8 | 2021-09-20 | Integer Overflow vulnerability in function filter16_roberts in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or o… |
CVE-2021-32299 | High | 7.8 | 2021-09-20 | An issue was discovered in pbrt through 20200627. A stack-buffer-overflow exists in the function pbrt::ParamSet::ParamSet() located in paramset.h. It allows an… |
CVE-2021-32298 | High | 8.8 | 2021-09-20 | An issue was discovered in libiff through 20190123. A global-buffer-overflow exists in the function IFF_errorId located in error.c. It allows an attacker to ca… |
CVE-2021-32297 | High | 8.8 | 2021-09-20 | An issue was discovered in LIEF through 0.11.4. A heap-buffer-overflow exists in the function main located in pe_reader.c. It allows an attacker to cause code… |
CVE-2021-32294 | High | 8.8 | 2021-09-20 | An issue was discovered in libgig through 20200507. A heap-buffer-overflow exists in the function RIFF::List::GetSubList located in RIFF.cpp. It allows an atta… |
CVE-2021-32289 | Medium | 5.5 | 2021-09-20 | An issue was discovered in heif through through v3.6.2. A NULL pointer dereference exists in the function convertByteStreamToRBSP() located in nalutil.cpp. It… |
CVE-2021-32288 | High | 7.8 | 2021-09-20 | An issue was discovered in heif through v3.6.2. A global-buffer-overflow exists in the function HevcDecoderConfigurationRecord::getPicHeight() located in hevcd… |
CVE-2021-32287 | High | 7.8 | 2021-09-20 | An issue was discovered in heif through v3.6.2. A global-buffer-overflow exists in the function HevcDecoderConfigurationRecord::getPicWidth() located in hevcde… |
CVE-2021-32286 | High | 7.8 | 2021-09-20 | An issue was discovered in hcxtools through 6.1.6. A global-buffer-overflow exists in the function pcapngoptionwalk located in hcxpcapngtool.c. It allows an at… |
CVE-2021-32285 | Medium | 5.5 | 2021-09-20 | An issue was discovered in gravity through 0.8.1. A NULL pointer dereference exists in the function list_iterator_next() located in gravity_core.c. It allows a… |
CVE-2021-32284 | High | 7.8 | 2021-09-20 | An issue was discovered in gravity through 0.8.1. A NULL pointer dereference exists in the function ircode_register_pop_context_protect() located in gravity_ir… |
CVE-2021-32283 | Medium | 5.5 | 2021-09-20 | An issue was discovered in gravity through 0.8.1. A NULL pointer dereference exists in the function gravity_string_to_value() located in gravity_value.c. It al… |
CVE-2021-32282 | Medium | 5.5 | 2021-09-20 | An issue was discovered in gravity through 0.8.1. A NULL pointer dereference exists in the function ircode_add_check() located in gravity_ircode.c. It allows a… |
CVE-2021-32281 | High | 7.8 | 2021-09-20 | An issue was discovered in gravity through 0.8.1. A heap-buffer-overflow exists in the function gnode_function_add_upvalue located in gravity_ast.c. It allows… |
CVE-2021-32280 | Medium | 5.5 | 2021-09-20 | An issue was discovered in fig2dev before 3.2.8.. A NULL pointer dereference exists in the function compute_closed_spline() located in trans_spline.c. It allow… |
CVE-2021-32278 | High | 7.8 | 2021-09-20 | An issue was discovered in faad2 through 2.10.0. A heap-buffer-overflow exists in the function lt_prediction located in lt_predict.c. It allows an attacker to… |
CVE-2021-32277 | High | 7.8 | 2021-09-20 | An issue was discovered in faad2 through 2.10.0. A heap-buffer-overflow exists in the function sbr_qmf_analysis_32 located in sbr_qmf.c. It allows an attacker… |
CVE-2021-32276 | Medium | 5.5 | 2021-09-20 | An issue was discovered in faad2 through 2.10.0. A NULL pointer dereference exists in the function get_sample() located in output.c. It allows an attacker to c… |
CVE-2021-32275 | Medium | 5.5 | 2021-09-20 | An issue was discovered in faust through v2.30.5. A NULL pointer dereference exists in the function CosPrim::computeSigOutput() located in cosprim.hh. It allow… |
CVE-2021-32274 | High | 7.8 | 2021-09-20 | An issue was discovered in faad2 through 2.10.0. A heap-buffer-overflow exists in the function sbr_qmf_synthesis_64 located in sbr_qmf.c. It allows an attacker… |
CVE-2021-32273 | High | 7.8 | 2021-09-20 | An issue was discovered in faad2 through 2.10.0. A stack-buffer-overflow exists in the function ftypin located in mp4read.c. It allows an attacker to cause Cod… |
CVE-2021-32272 | High | 7.8 | 2021-09-20 | An issue was discovered in faad2 before 2.10.0. A heap-buffer-overflow exists in the function stszin located in mp4read.c. It allows an attacker to cause Code… |
CVE-2021-32271 | High | 7.8 | 2021-09-20 | An issue was discovered in gpac through 20200801. A stack-buffer-overflow exists in the function DumpRawUIConfig located in odf_dump.c. It allows an attacker t… |
CVE-2021-32270 | Medium | 5.5 | 2021-09-20 | An issue was discovered in gpac through 20200801. A NULL pointer dereference exists in the function vwid_box_del located in box_code_base.c. It allows an attac… |
CVE-2021-32269 | Medium | 5.5 | 2021-09-20 | An issue was discovered in gpac through 20200801. A NULL pointer dereference exists in the function ilst_item_box_dump located in box_dump.c. It allows an atta… |
CVE-2021-32268 | High | 7.8 | 2021-09-20 | Buffer overflow vulnerability in function gf_fprintf in os_file.c in gpac before 1.0.1 allows attackers to execute arbitrary code. The fixed version is 1.0.1. |
CVE-2021-32265 | High | 8.8 | 2021-09-20 | An issue was discovered in Bento4 through v1.6.0-637. A global-buffer-overflow exists in the function AP4_MemoryByteStream::WritePartial() located in Ap4ByteSt… |
CVE-2021-40674 | Critical | 9.8 | 2021-09-20 | An SQL injection vulnerability exists in Wuzhi CMS v4.1.0 via the KeyValue parameter in coreframe/app/order/admin/index.php. |
CVE-2021-39402 | High | 7.2 | 2021-09-20 | MaianAffiliate v.1.0 is suffers from code injection by adding a new product via the admin panel. The injected payload is reflected on the affiliate main page f… |
CVE-2021-24741 | Critical | 9.8 | 2021-09-20 | The Support Board WordPress plugin before 3.3.4 does not escape multiple POST parameters (such as status_code, department, user_id, conversation_id, conversati… |
CVE-2021-24663 | High | 7.2 | 2021-09-20 | The Simple Schools Staff Directory WordPress plugin through 1.1 does not validate uploaded logo pictures to ensure that are indeed images, allowing high privil… |
CVE-2021-24657 | Medium | 6.1 | 2021-09-20 | The Limit Login Attempts WordPress plugin before 4.0.50 does not escape the IP addresses (which can be controlled by attacker via headers such as X-Forwarded-F… |