10368 matches found
CVE-2021-21860
Removed by vendor...
CVE-2021-21860
An exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an improper memory allocation resulting in a heap-based buffer overflow that causes memory corruption...
CVE-2021-21859
An exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. The striboxread function is used when processing atoms using the 'stri' FOURCC code. An attacker can convince a user to open a video to trigger...
CVE-2021-21859
GPAC Project on Advanced Content library (GPAC) is affected by CVE-2021-21859. The vulnerability is an exploitable integer truncation in the MPEG-4 decoding path, specifically involving the stri_box_read function used when processing atoms with the 'stri' FOURCC code in GPAC version 1.0.1. An att...
CVE-2021-21859
Removed by vendor...
PT-2021-6554 · Gpac · Gpac Project On Advanced Content Library
Name of the Vulnerable Software and Affected Versions: GPAC Project on Advanced Content library version 1.0.1 Description: An exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality. The stri box read function is used when processing atoms using the 'stri'...
GPAC Project Advanced Content 输入验证错误漏洞
GPAC Project on Advanced Content is an open source cross-platform library that implements the MPEG-4 system standard and provides tools for media playback, vector graphics, and 3D rendering. an integer overflow vulnerability exists in the MPEG-4 decoding functionality in GPAC Project on Advanced...
GPAC Project Advanced Content MPEG-4 Decoding multiple integer truncation vulnerabilities
Summary Multiple exploitable integer truncation vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an improper memory allocation resulting in a heap-based buffer overflow that causes...
GPAC Project on Advanced Content library MPEG-4 Decoding multiple multiplication integer overflow vulnerabilities
Summary Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow...
GPAC Project Advanced Content MPEG-4 Decoding multiple integer addition overflow vulnerabilities
Summary Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked addition arithmetic resulting in a heap-based buffer...
UBUNTU-CVE-2021-37695
ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 Fake Objects package. The vulnerability allowed to inject malformed Fake Objects HTML, which could result in executing JavaScript code. It affects all users using...
CVE-2021-36937
Windows Media MPEG-4 Video Decoder Remote Code Execution Vulnerability...
Remote code execution
Windows Media MPEG-4 Video Decoder Remote Code Execution Vulnerability...
CVE-2021-36937 Windows Media MPEG-4 Video Decoder Remote Code Execution Vulnerability
...
CVE-2021-36937
Technical details for CVE-2021-36937 are not publicly available in the provided documents. The initial description notes a Windows Media MPEG-4 Video Decoder RCE, but no concrete product/version/impact details are supplied here. Monitor for updates.
CVE-2021-32809
ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 Clipboard package. The vulnerability allowed to abuse paste functionality using malformed HTML, which could result in injecting arbitrary HTML into the editor. It...
CVE-2021-32809
ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 Clipboard package. The vulnerability allowed to abuse paste functionality using malformed HTML, which could result in injecting arbitrary HTML into the editor. It...
CVE-2021-32808 Cross-site scripting in ckeditor via abuse of undo functionality
ckeditor is an open source WYSIWYG HTML editor with rich content support. A vulnerability has been discovered in the clipboard Widget plugin if used alongside the undo feature. The vulnerability allows a user to abuse undo functionality using malformed widget HTML, which could result in executing...
Privilege escalation with the form generator
Date : 2021-08-11 CVE ID : CVE-2021-37627 Description It is possible for untrusted users to gain administrator rights with the form generator. Installations are only affected if there are untrusted back end users with access to the form generator. Affected versions Contao 4.0 Contao 4.1 Contao 4....
