Lucene search
+L

153 matches found

Positive Technologies
Positive Technologies
added 2023/01/28 12:00 a.m.10 views

PT-2023-1846 · Libde265 +4 · Libde265 +4

Name of the Vulnerable Software and Affected Versions: libde265 version 1.0.10 Description: The issue is related to a NULL pointer dereference in the mc chroma function at motion.cc in the libde265 video codec implementation. This allows an attacker to cause a Denial of Service DoS via a crafted...

9.8CVSS6.3AI score0.02052EPSS
SaveExploits46References182
OpenVAS
OpenVAS
added 2022/07/31 12:00 a.m.11 views

Fedora: Security Advisory for golang-github-alecthomas-chroma (FEDORA-2022-5ef0bd9a27)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Fedora
Fedora
added 2022/07/30 1:55 a.m.17 views

[SECURITY] Fedora 36 Update: golang-github-alecthomas-chroma-0.10.0-4.fc36

Chroma takes source code and other structured text and converts it into syntax highlighted HTML, ANSI-coloured text, etc. Chroma is based heavily on Pygments, and includes translators for Pygments lexers and styles...

7.6AI score
SaveExploits0
OpenVAS
OpenVAS
added 2022/07/18 12:00 a.m.30 views

Fedora: Security Advisory for golang-github-alecthomas-chroma (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3CVSS8.9AI score0.0995EPSS
SaveExploits4References2
Fedora
Fedora
added 2022/07/17 1:15 a.m.30 views

[SECURITY] Fedora 35 Update: golang-github-alecthomas-chroma-0.10.0-3.fc35

Chroma takes source code and other structured text and converts it into syntax highlighted HTML, ANSI-coloured text, etc. Chroma is based heavily on Pygments, and includes translators for Pygments lexers and styles...

9.3CVSS8.3AI score0.0995EPSS
SaveExploits4
OpenVAS
OpenVAS
added 2022/07/06 12:00 a.m.11 views

Fedora: Security Advisory for golang-github-alecthomas-chroma (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3CVSS8.9AI score0.0995EPSS
SaveExploits4References2
Fedora
Fedora
added 2022/07/04 1:35 a.m.36 views

[SECURITY] Fedora 36 Update: golang-github-alecthomas-chroma-0.10.0-3.fc36

Chroma takes source code and other structured text and converts it into syntax highlighted HTML, ANSI-coloured text, etc. Chroma is based heavily on Pygments, and includes translators for Pygments lexers and styles...

9.3CVSS8.3AI score0.0995EPSS
SaveExploits4
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:00 a.m.13 views

The vulnerability of the mc_chroma function in the h.265 Libde265 video codec implementation, which allows a hacker to cause a service failure.

The vulnerability of the mcchroma function in the h.265 Libde265 video codec is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to cause a service failure using a specially created file...

7.8CVSS7.1AI score0.01547EPSS
SaveExploits1References9Affected Software4
CNNVD
CNNVD
added 2022/02/28 12:00 a.m.11 views

ok-file-formats 缓冲区错误漏洞

ok-file-formats is an open source decoder for PNG, JPEG, WAV and several other file formats. A buffer error vulnerability exists in ok-file-formats version 97f78ca, which stems from a heap buffer overflow in okjpgconvertYCbCrtoRGB when using functions from the ok-file-formats project in "ok...

7.8CVSS7.6AI score0.0073EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2021/09/16 12:00 a.m.13 views

Libde265 缓冲区错误漏洞

libde265 is an open source implementation of the h.265 video codec. libde265 version 1.0.4 contains a heap buffer overflow vulnerability in the mcchroma function. An attacker can exploit the vulnerability to cause a denial of service via specially crafted files...

6.5CVSS7AI score0.01547EPSS
SaveExploits1References6
NVD
NVD
added 2021/04/14 3:15 p.m.29 views

CVE-2021-30494

Multiple system services installed alongside the Razer Synapse 3 software suite perform privileged operations on entries within the Razer Chroma SDK subkey. These privileged operations consist of file name concatenation of a runtime log file that is used to store runtime log information. In other...

5.5CVSS0.00495EPSS
SaveExploits1References3
OSV
OSV
added 2021/04/14 3:15 p.m.10 views

CVE-2021-30494

Multiple system services installed alongside the Razer Synapse 3 software suite perform privileged operations on entries within the Razer Chroma SDK subkey. These privileged operations consist of file name concatenation of a runtime log file that is used to store runtime log information. In other...

5.5CVSS5.8AI score0.00495EPSS
SaveExploits1References3
Prion
Prion
added 2021/04/14 3:15 p.m.25 views

Design/Logic Flaw

Multiple system services installed alongside the Razer Synapse 3 software suite perform privileged operations on entries within the Razer Chroma SDK subkey. These privileged operations consist of file name concatenation of a runtime log file that is used to store runtime log information. In other...

4.9CVSS5.4AI score0.00495EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2021/04/14 2:50 p.m.36 views

CVE-2021-30494

Multiple system services installed alongside the Razer Synapse 3 software suite perform privileged operations on entries within the Razer Chroma SDK subkey. These privileged operations consist of file name concatenation of a runtime log file that is used to store runtime log information. In other...

5.7AI score0.00495EPSS
SaveExploits1References3
CVE
CVE
added 2021/04/14 2:50 p.m.70 views

CVE-2021-30494

The CVE-2021-30494 entry concerns Razer Synapse 3 and the Razer Chroma SDK. The connected documents describe that multiple system services installed with the Razer Synapse 3 suite perform privileged operations on entries within the Chroma SDK subkey, specifically involving file name concatenation...

5.5CVSS5.4AI score0.00495EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2021/03/06 12:01 a.m.20 views

OSV-2021-500 Heap-buffer-overflow in put_epel_8_fallback

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31738 Crash type: Heap-buffer-overflow READ 1 Crash state: putepel8fallback accelerationfunctions::puthevcepel void mcchroma...

7.2AI score
SaveExploits0References1
OSV
OSV
added 2020/12/15 4:15 p.m.11 views

CVE-2020-0488

In ihevcinterpredchromacopyssse3 of ihevcinterpredfiltersssse3intr.c, there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

6.5CVSS6.2AI score0.00732EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2020/12/15 4:15 p.m.9 views

CVE-2020-0488

In ihevcinterpredchromacopyssse3 of ihevcinterpredfiltersssse3intr.c, there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

6.5CVSS5.7AI score0.00732EPSS
SaveExploits0References2
zdt
zdt
added 2020/11/26 12:00 a.m.52 views

Razer Chroma SDK Server 3.16.02 - Race Condition Remote File Execution Exploit

Exploit Title: Razer Chroma SDK Server 3.16.02 - Race Condition Remote File Execution Exploit Author: Loke Hui Yi Vendor Homepage: https://razerid.razer.com Software Link: http://rzr.to/synapse-3-pc-download Version: , and create an exe file with the same application's name in that folder. The Ap...

8.1CVSS8.2AI score0.05989EPSS
SaveExploits4
Exploit DB
Exploit DB
added 2020/11/26 12:00 a.m.824 views

Razer Chroma SDK Server 3.16.02 - Race Condition Remote File Execution

Exploit Title: Razer Chroma SDK Server 3.16.02 - Race Condition Remote File Execution Date: 2020-08-13 Exploit Author: Loke Hui Yi Vendor Homepage: https://razerid.razer.com Software Link: http://rzr.to/synapse-3-pc-download Version: , and create an exe file with the same application's name in th...

8.1CVSS7.7AI score0.05989EPSS
SaveExploits4
Rows per page
Query Builder