CVE-2021-38092

CVE-2021-38092 affects FFmpeg 4.2.1, with an Integer Overflow in libavfilter/vf_convolution.c (filter_prewitt). The vulnerability can cause a Denial of Service or other unspecified impacts. Reports from connected advisories confirm this CVE is part of FFmpeg-related issues across multiple distrib...

CVE-2021-38092

Integer Overflow vulnerability in function filterprewitt in libavfilter/vfconvolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts...

CVE-2021-38091

Integer Overflow vulnerability in function filter16sobel in libavfilter/vfconvolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts...

CVE-2021-38090

Integer Overflow vulnerability in function filter16roberts in libavfilter/vfconvolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts...

CVE-2021-38091

Integer Overflow vulnerability in function filter16sobel in libavfilter/vfconvolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts...

CVE-2020-20902

A CWE-125: Out-of-bounds read vulnerability exists in longtermfilter function in g729postfilter.c in FFmpeg 4.2.1 during computation of the denominator of pseudo-normalized correlation R'0, that could result in disclosure of information...

CVE-2020-20898

Integer Overflow vulnerability in function filter16prewitt in libavfilter/vfconvolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts...

CVE-2020-20891

CVE-2020-20891 is a buffer overflow in FFmpeg 4.2.1 (function config_input in libavfilter/vf_gblur.c) that can cause a Denial of Service or other unspecified impacts. Affected software/version: FFmpeg 4.2.1. Root cause: buffer overflow in the gblur filter input path. Impact: Denial of Service; po...

CVE-2021-37628

Nextcloud Richdocuments is an open source collaborative office suite. In affected versions the File Drop features "Upload Only" public link shares in Nextcloud can be bypassed using the Nextcloud Richdocuments app. An attacker was able to read arbitrary files in such a share. It is recommended th...

CVE-2020-22330

Cross-Site Scripting XSS vulnerability in Subrion 4.2.1 via the title when adding a page...

CVE-2020-22330

Cross-Site Scripting XSS vulnerability in Subrion 4.2.1 via the title when adding a page...

Cross site scripting

Cross-Site Scripting XSS vulnerability in Subrion 4.2.1 via the title when adding a page...

CVE-2020-22330

Cross-Site Scripting XSS vulnerability in Subrion 4.2.1 via the title when adding a page...

CVE-2020-22330

CVE-2020-22330 describes a Cross-Site Scripting (XSS) vulnerability in Subrion CMS 4.2.1 that can be triggered via the page title when adding a page. The connected documents confirm the affected component (Subrion 4.2.1) and the vulnerability class (XSS), but do not provide concrete exploit steps...

CVE-2021-37156

Redmine 4.2.0 and 4.2.1 allow existing user sessions to continue upon enabling two-factor authentication for the user's account, but the intended behavior is for those sessions to be terminated...

PT-2021-7937 · Redmine · Redmine

Name of the Vulnerable Software and Affected Versions: Redmine versions 4.2.0 through 4.2.1 Description: The issue is related to the incorrect session expiration in Redmine, a web application for project and task management. When two-factor authentication is enabled for a user's account, existing...

Subrion CMS SQL注入漏洞

Subrion CMS is a PHP-based content management system CMS from the Subrion team. The system can be integrated into websites and supports multiple extension plugins, etc. A SQL injection vulnerability exists in Subrion CMS v4.2.1, which stems from the website's use of PDO connections. No detailed...

CVE-2021-28127

An issue was discovered in Stormshield SNS through 4.2.1. A brute-force attack can occur...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference. Null pointer dereference was found in upx PackLinuxElf::canUnpack in plxelf.cpp,in version UPX 4.0.0. That allow attackers to execute arbitrary code and cause a denial of service via a crafted file. Remediation...

[ASA-202105-1] redmine: multiple issues

Arch Linux Security Advisory ASA-202105-1 ========================================= Severity: Critical Date : 2021-05-19 CVE-ID : CVE-2021-29274 CVE-2021-30163 CVE-2021-30164 CVE-2021-31863 CVE-2021-31864 CVE-2021-31865 CVE-2021-31866 Package : redmine Type : multiple issues Remote : Yes Link :...