Lucene search
+L

2546 matches found

OSV
OSV
added 2021/05/14 1:15 p.m.4 views

UBUNTU-CVE-2021-32613

In radare2 through 5.3.0 there is a double free vulnerability in the pyc parse via a crafted file which can lead to DoS...

5.5CVSS6.8AI score0.01161EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2021/05/14 12:00 a.m.6 views

Firely/Incendi Spark 安全漏洞

Spark is a public domain FHIR server developed using C. A security vulnerability exists in versions prior to Firely/Incendi Spark 1.5.5-r4, which stems from the lack of a Content-Disposition header in some cases, which could result in carefully crafted files being delivered to the client to be...

6.1CVSS5.5AI score0.01002EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2021/05/11 11:00 p.m.5 views

CVE-2021-28569

Adobe Media Encoder version 15.1 and earlier is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information in the context of the current user. Exploitation of this...

4.3CVSS5.4AI score0.02366EPSS
SaveExploits0References2
OSV
OSV
added 2021/05/11 12:00 a.m.5 views

UBUNTU-CVE-2021-32490

A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds write in function DJVU::filterbv via crafted djvu file may lead to application crash and other consequences...

7.8CVSS7AI score0.00913EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2021/05/11 12:00 a.m.10 views

PT-2021-3122

Name of the Vulnerable Software and Affected Versions djvulibre versions 3.5.28 and earlier Description A flaw was found in the djvulibre library, specifically in the DJVU::DataPool::has data function, which can lead to an out of bounds read when processing a crafted djvu file. This may cause an...

7.8CVSS6.4AI score0.03667EPSS
SaveExploits7References112
CNVD
CNVD
added 2021/04/20 12:00 a.m.38 views

GPAC memory leak vulnerability (CNVD-2021-30180)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A memory leak vulnerability exists in the gfhintertracknew function in GPAC version 1.0.1. An attacker can exploit this vulnerability to read memory via specially crafted files...

5.5CVSS6.4AI score0.01061EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/04/20 12:00 a.m.48 views

GPAC Heap Overflow Vulnerability

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A heap overflow vulnerability exists in the gfhevcreadppsbsinternal function in mediatools/avparsers.c in GPAC version 1.0.1. An attacker can exploit this vulnerability via specially crafted files to cause a...

5.5CVSS6.8AI score0.00911EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/04/20 12:00 a.m.34 views

GPAC heap overflow vulnerability (CNVD-2021-30184)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A heap overflow vulnerability exists in the adtsdmxprocess function in filters/reframeadts.c in GPAC version 1.0.1. An attacker could exploit this vulnerability via specially crafted files to cause a program cra...

5.5CVSS6.8AI score0.00911EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/04/20 12:00 a.m.11 views

GPAC Null Pointer Dereference Vulnerability (CNVD-2021-30178)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A null pointer dereference vulnerability exists in the gfisomcencgetdefaultinfointernal function in GPAC version 1.0.1. An attacker could exploit this vulnerability via specially crafted files to cause a denial ...

5.5CVSS6.6AI score0.00904EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/04/20 12:00 a.m.15 views

GPAC Null Pointer Dereference Vulnerability (CNVD-2021-30177)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A null pointer dereference vulnerability exists in the gfisomsetextractionslc function in GPAC version 1.0.1. An attacker could exploit this vulnerability via specially crafted files to cause a denial of service...

5.5CVSS6.6AI score0.00872EPSS
SaveExploits1References1
OSV
OSV
added 2021/04/19 7:15 p.m.8 views

UBUNTU-CVE-2021-31259

The gfisomcencgetdefaultinfointernal function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

5.5CVSS7.3AI score0.00904EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2021/04/19 12:00 a.m.10 views

GPAC 代码问题漏洞

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A null pointer dereference vulnerability exists in the gfisomcencgetdefaultinfointernal function in GPAC version 1.0.1. An attacker could exploit this vulnerability via specially crafted files to cause a denial ...

5.5CVSS5.7AI score0.00904EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2021/04/19 12:00 a.m.8 views

GPAC 代码问题漏洞

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A null pointer dereference vulnerability exists in the AV1DuplicateConfig function in GPAC version 1.0.1. An attacker could exploit this vulnerability via specially crafted files to cause a denial of service...

5.5CVSS5.7AI score0.00872EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2021/04/19 12:00 a.m.12 views

GPAC 缓冲区错误漏洞

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A heap overflow vulnerability exists in the gfhevcreadppsbsinternal function in mediatools/avparsers.c in GPAC version 1.0.1. An attacker can exploit this vulnerability via specially crafted files to cause a...

5.5CVSS5.7AI score0.00911EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2021/04/19 12:00 a.m.9 views

GPAC 缓冲区错误漏洞

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A memory leak vulnerability exists in the gfhintertracknew function in GPAC version 1.0.1. An attacker can exploit this vulnerability to read memory via specially crafted files...

5.5CVSS5.7AI score0.01061EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2021/04/19 12:00 a.m.8 views

GPAC 缓冲区错误漏洞

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A heap overflow vulnerability exists in the adtsdmxprocess function in filters/reframeadts.c in GPAC version 1.0.1. An attacker could exploit this vulnerability via specially crafted files to cause a program cra...

5.5CVSS5.7AI score0.00911EPSS
SaveExploits1References3
Prion
Prion
added 2021/04/16 6:15 p.m.17 views

Out-of-bounds

An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxmlparsestr performs incorrect memory handling while parsing crafted XML files out-of-bounds read after a certain strcspn failure...

4.3CVSS6.5AI score0.01095EPSS
SaveExploits1References2Affected Software2
OSV
OSV
added 2021/04/15 2:15 p.m.7 views

CVE-2021-21093

Adobe Bridge versions 10.1.1 and earlier and 11.0.1 and earlier are affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitati...

7.8CVSS6.3AI score0.0393EPSS
SaveExploits0References2
Prion
Prion
added 2021/04/15 2:15 p.m.25 views

Memory corruption

Adobe Bridge versions 10.1.1 and earlier and 11.0.1 and earlier are affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitati...

6.8CVSS7.8AI score0.0393EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/04/13 12:00 a.m.8 views

The vulnerability of the Scanline API interface in the OpenEXR library allows a hacker to trigger a service failure.

The vulnerability of the Scanline API interface of the OpenEXR library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a perpetrator to cause a service failure by creating specially crafted EXR files...

5.5CVSS6.7AI score0.01EPSS
SaveExploits0References16Affected Software8
Rows per page
Query Builder