CVE-2023-1451

CVE-2023-1451 affects MP4v2 2.1.2. The vulnerability is in mp4v2::impl::MP4Track::GetSampleFileOffset (mp4track.cpp) and can lead to a denial of service. The attack is local, and public exploit details have been disclosed. No patch/version remediation is specified in the provided documents. INFO:...

PT-2023-16992 · Mp4V2 · Mp4V2

Name of the Vulnerable Software and Affected Versions: MP4v2 version 2.1.2 Description: A problematic issue affects the DumpTrack function of the file mp4trackdump.cpp, leading to denial of service. The attack must be approached locally. Recommendations: For MP4v2 version 2.1.2, consider disablin...

WordPress Advanced Text Widget Plugin <= 2.1.2 is vulnerable to Cross Site Scripting (XSS)

Software Advanced Text Widget Type Plugin Vulnerable versions = 2.1.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-26539 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 594fab9af0b0 Credits Rio Darmawan Require...

SUSE CVE-2016-9117

NULL Pointer Access in function imagetopnm of convert.cjp2:1289 in OpenJPEG 2.1.2. Impact is Denial of Service. Someone must open a crafted j2k file...

SUSE CVE-2016-9581

An infinite loop vulnerability in tiftoimage that results in heap buffer overflow in convert32sC1P1 was found in openjpeg 2.1.2...

SUSE CVE-2020-4030

In FreeRDP before version 2.1.2, there is an out of bounds read in TrioParse. Logging might bypass string length checks due to an integer overflow. This is fixed in version 2.1.2...

SUSE CVE-2020-11098

In FreeRDP before version 2.1.2, there is an out-of-bound read in glyphcacheput. This affects all FreeRDP clients with +glyph-cache option enabled This is fixed in version 2.1.2...

SUSE CVE-2020-15210

In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, if a TFLite saved model uses the same tensor as both input and output of an operator, then, depending on the operator, we can observe a segmentation fault or just memory corruption. We have patched the issue in d58c96946b a...

SUSE CVE-2020-36401

mruby 2.1.2 has a double free in mrbdefaultallocf called from mrbfree and objfree...

CVE-2022-4649 WP Extended Search < 2.1.2 - Contributor+ Stored XSS via Shortcode

The WP Extended Search WordPress plugin before 2.1.2 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack...

192.168.0.172 (=4.6.1), 2ch (>=0.1.0 <=0.1.3) +4060 more potentially affected by CVE-2022-25901 via cookiejar (>=1.0.5 <=2.1.2)

cookiejar NPM version =1.0.5, =0.1.0, =0.13.0, =0.0.2, =0.0.1, =1.3.1, =0.0.1, =1.0.0, =0.0.1, =0.1.0, =1.0.0, =1.16.0, =0.1.1, =0.3.1 and more Source cves: CVE-2022-25901 Source advisory: OSV:GHSA-H452-7996-H45H...

CVE-2023-22316

Hidden functionality vulnerability in PIX-RT100 versions RT100TEQ2.1.1EQ101 and RT100TEQ2.1.2EQ101 allows a network-adjacent attacker to access the product via undocumented Telnet or SSH services...

PT-2023-18412 · Pix-Rt100 · Pix-Rt100

Name of the Vulnerable Software and Affected Versions: PIX-RT100 versions RT100 TEQ 2.1.1 EQ101 and RT100 TEQ 2.1.2 EQ101 Description: The issue allows a network-adjacent attacker who can access product settings to execute an arbitrary OS command. This is an OS command injection vulnerability...

PT-2023-18424 · Pix-Rt100 · Pix-Rt100

Name of the Vulnerable Software and Affected Versions: PIX-RT100 versions RT100 TEQ 2.1.1 EQ101 through RT100 TEQ 2.1.2 EQ101 Description: The issue concerns a hidden functionality vulnerability that enables a network-adjacent attacker to access the product. This access is achieved through...

PT-2023-14939 · Datax-Web · Datax-Web

Name of the Vulnerable Software and Affected Versions: datax-web versions 1.0.0 through 2.1.2 Description: The issue concerns the RPC interface in datax-web, which lacks permission checks by default. This allows attackers to execute arbitrary commands by sending crafted Hessian serialized data...

PT-2022-10522 · Feehicms · Feehicms

Name of the Vulnerable Software and Affected Versions: Feehi CMS versions prior to 2.1.2 Description: The issue allows attackers to run arbitrary code via a crafted image upload, exploiting a File Upload vulnerability. Recommendations: For Feehi CMS versions prior to 2.1.2, update to version 2.1....

abi-ds-utils (>=0.1.2 <=0.1.9), abi-pyspark-utils (>=0.1.1 <=0.1.4) +150 more potentially affected by CVE-2022-31777 via pyspark (>=2.1.2 <=3.2.1)

pyspark PYPI version =2.1.2, =0.1.2, =0.1.1, =0.1.5, =0.5.1, =0.2.0, =0.0.2, =1.0.0, =0.9.1, =0.1.57, =0.11.0, =2.5.0b20240324 - bigdl-chronos =2.0.0 - bigdl-chronos-spark2 =2.0.0 - bigdl-chronos-spark3 =2.0.0 and more Source cves: CVE-2022-31777 Source advisory: OSV:GHSA-43XG-8WMJ-CW8H...

CVE-2022-43748

Improper limitation of a pathname to a restricted directory 'Path Traversal' vulnerability in file operation management in Synology Presto File Server before 2.1.2-1601 allows remote attackers to write arbitrary files via unspecified vectors...

Synology Presto File Server 路径遍历漏洞

Synology Presto File Server is a high-speed file transfer suite from China-based Synology Inc. A path traversal vulnerability exists in Synology Presto File Server versions prior to 2.1.2-1601, which stems from improperly restricting pathnames of restricted directories in the File Operations...

PT-2022-16315 · Autonami · Abandoned Cart Recovery For Woocommerce

Name of the Vulnerable Software and Affected Versions: The Abandoned Cart Recovery for WooCommerce, Follow Up Emails, Newsletter Builder & Marketing Automation By Autonami WordPress plugin versions prior to 2.1.2 Description: The issue concerns a lack of authorization and CSRF checks in one of th...