CVE-2022-21361: Undefined Security Weakness

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Sample apps. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic...

Oracle WebLogic Server 输入验证错误漏洞

Oracle WebLogic Server is an application services middleware for cloud and legacy environments from Oracle Corporation Oracle that provides a modern lightweight development platform that supports the full lifecycle management of applications from development to production and simplifies applicati...

WordPress Core 5.8.2 - (WP_Query) SQL Injection Vulnerability

Exploit Title: WordPress Core 5.8.2 - 'WPQuery' SQL Injection Exploit Author: Aryan Chehreghani Vendor Homepage: https://wordpress.org Software Link: https://wordpress.org/download/releases Version: &nonce=a85a0c3bfa&...

Skrull - A Malware DRM, That Prevents Automatic Sample Submission By AV/EDR And Signature Scanning From Kernel

Skrull is a malware DRM, that prevents Automatic Sample Submission by AV/EDR and Signature Scanning from Kernel. It generates launchers that can run malware on the victim using the Process Ghosting technique. Also, launchers are totally anti-copy and naturally broken when got submitted. It's a...

Artifex Software Ghostscript 缓冲区错误漏洞

Artifex Software Ghostscript is an open source parser for Postscript a page description language and programming language used in the electronics industry and desktop publishing from Artifex Software, Inc. The product can display Postscript files and print them on non-Postscript printers. Artifex...

Artifex Software Ghostscript 资源管理错误漏洞

Artifex Software Ghostscript is an open source parser for Postscript a page description language and programming language used in the electronics industry and desktop publishing from Artifex Software, Inc. The product can display Postscript files and print them on non-Postscript printers. A...

[SECURITY] [DLA 2845-1] libsamplerate security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2845-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz December 14, 2021 https://wiki.debian.org/LTS -...

CVE-2021-41569

SAS/Intrnet 9.4 build 1520 and earlier allows Local File Inclusion. The samples library included by default in the appstart.sas file, allows end-users of the application to access the sample.webcsf1.sas program, which contains user-controlled macro variables that are passed to the DS2CSF macro...

Github libjxl 缓冲区错误漏洞

Github libjxl is a reference implementation of PEG XL encoder and decoder. A buffer error vulnerability exists in libjxl that stems from the fact that invalid JPEG XL images using libjxl may result in out-of-bounds accesses to std::vector when rendering samples. oob read accesses may result in...

UBUNTU-CVE-2021-41456

There is a stack buffer overflow in MP4Box v1.0.1 at src/filters/dmxnhml.c:1004 in the nhmldmxsendsample function szXmlTo parameter which leads to a denial of service vulnerability...

PT-2021-23303

Name of the Vulnerable Software and Affected Versions MP4Box version 1.0.1 Description The issue is a stack buffer overflow in the nhmldmx send sample function at src/filters/dmx nhml.c:1008, specifically affecting the szXmlFrom parameter. This leads to a denial of service vulnerability...

Gpac MP4Box 缓冲区错误漏洞

MP4Box is a multimedia packager available in GPAC. A stack buffer overflow vulnerability exists in the nhmldmxsendsample function in src/filters/dmxnhml.c:1004 in MP4Box version 1.0.1. An attacker can exploit this vulnerability to cause a denial of service via the szXmlTo parameter...

PT-2021-23301 · Mp4Box · Mp4Box

Name of the Vulnerable Software and Affected Versions: MP4Box version 1.0.1 Description: The issue is a stack buffer overflow in the nhmldmx send sample function, specifically with the szXmlTo parameter, located at src/filters/dmx nhml.c:1004. This leads to a denial of service vulnerability...

DEBIAN-CVE-2020-23269

An issue was discovered in gpac 0.8.0. The stblGetSampleSize function in isomedia/stblread.c has a heap-based buffer overflow which can lead to a denial of service DOS via a crafted media file...

UBUNTU-CVE-2020-23269

An issue was discovered in gpac 0.8.0. The stblGetSampleSize function in isomedia/stblread.c has a heap-based buffer overflow which can lead to a denial of service DOS via a crafted media file...

CVE-2021-39547

An issue was discovered in sela through 20200412. A NULL pointer dereference exists in the function lpc::SampleGenerator::process located in samplegenerator.cpp. It allows an attacker to cause Denial of Service...

DEBIAN-CVE-2021-39515

An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function SampleInterleavedLSScan::ParseMCU located in sampleinterleavedlsscan.cpp. It allows an attacker to cause Denial of Service...

CVE-2021-39547

An issue was discovered in sela through 20200412. A NULL pointer dereference exists in the function lpc::SampleGenerator::process located in samplegenerator.cpp. It allows an attacker to cause Denial of Service...

Sela 代码问题漏洞

SELA is a lossless audio codec. lpc::SampleGenerator::process function in samplegenerator.cpp in SELA 20200412 and earlier versions is vulnerable to a null pointer dereference. An attacker could exploit this vulnerability to cause a denial of service...

libjpeg 代码问题漏洞

libjpeg is a free library written entirely in C to handle the JPEG image data format. libjpeg 2020021 and earlier versions of sampleinterleavedlsscan.cpp have a null pointer in the SampleInterleavedLSScan::ParseMCU function to solve the reference vulnerability. An attacker could exploit this...