Lucene search
+L

4999 matches found

RedHat Linux
RedHat Linux
•added 2023/09/11 1:04 p.m.•11 views

flac: Remote Code Execution (RCE) via the bitwriter_grow_ function, by supplying crafted input to the encoder

A flaw was found in the libeconf library. This issue occurs due to a buffer overflow vulnerability in the bitwritergrow function in FLAC that allows remote attackers to run arbitrary code via crafted input to the encoder...

7.8CVSS6.3AI score0.00794EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
•added 2023/09/11 1:04 p.m.•13 views

flac: Remote Code Execution (RCE) via the bitwriter_grow_ function, by supplying crafted input to the encoder

A flaw was found in the libeconf library. This issue occurs due to a buffer overflow vulnerability in the bitwritergrow function in FLAC that allows remote attackers to run arbitrary code via crafted input to the encoder...

7.8CVSS6.3AI score0.00794EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
•added 2023/09/11 12:00 a.m.•22 views

RHEL 9 : flac (RHSA-2023:5047)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:5047 advisory. FLAC stands for Free Lossless Audio Codec. FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference...

7.8CVSS7.7AI score0.00794EPSS
SaveExploits1References4
CNVD
CNVD
•added 2023/09/10 12:00 a.m.•67 views

Adobe Media Encoder Buffer Overflow Vulnerability (CNVD-2023-82287)

Adobe Media Encoder is an audio and video encoding application from the American company Audobee Adobe. Adobe Media Encoder suffers from a buffer overflow vulnerability that originates from a boundary error when the application processes untrusted input. An attacker could exploit the vulnerabilit...

5.5CVSS7.2AI score0.00321EPSS
SaveExploits0References1
OSS-Fuzz
OSS-Fuzz
•added 2023/09/09 6:59 a.m.•18 views

imagemagick:encoder_heic_fuzzer: Heap-buffer-overflow in jpegNUMBER_get_SIZ_segment

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4801822327701504 Project: imagemagick Fuzzing Engine: honggfuzz Fuzz Target: encoderheicfuzzer Job Type: honggfuzzasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

5.9AI score
SaveExploits0
NVD
NVD
•added 2023/09/06 2:15 p.m.•46 views

CVE-2021-36060

Adobe Media Encoder version 15.2 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victi...

5.5CVSS5AI score0.00321EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/09/06 2:15 p.m.•19 views

CVE-2021-36060

Adobe Media Encoder version 15.2 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victi...

5.5CVSS5.8AI score0.00321EPSS
SaveExploits0References1
Prion
Prion
•added 2023/09/06 2:15 p.m.•37 views

Design/Logic Flaw

Adobe Media Encoder version 15.2 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victi...

1.9CVSS5.5AI score0.00321EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/09/06 1:08 p.m.•45 views

CVE-2021-36060 Adobe Media Encoder MPEG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Media Encoder version 15.2 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victi...

5.5CVSS5.2AI score0.00321EPSS
SaveExploits0References1
CVE
CVE
•added 2023/09/06 1:08 p.m.•106 views

CVE-2021-36060

Adobe Media Encoder 15.2 and earlier is affected by an out-of-bounds read in MPEG file parsing, enabling memory disclosure and potential bypass of ASLR. Exploitation requires user interaction (victim opens a crafted file). Affected version: 15.2 and earlier; remediation per APSB21-43 is to update...

5.5CVSS5.2AI score0.00321EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/09/06 1:08 p.m.•14 views

CVE-2021-36060 Adobe Media Encoder MPEG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Media Encoder version 15.2 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victi...

5.5CVSS5AI score0.00321EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/09/06 12:00 a.m.•20 views

Adobe Media Encoder 缓冲区错误漏洞

Adobe Media Encoder is an audio and video encoding application from the American company Audobee Adobe. Adobe Media Encoder suffers from a buffer overflow vulnerability that originates from a boundary error when the application processes untrusted input. An attacker could exploit the vulnerabilit...

5.5CVSS7.1AI score0.00321EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/06 12:00 a.m.•2 views

CVE-2021-36060: Out-of-bounds Read

Adobe Media Encoder version 15.2 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victi...

5.5CVSS5.9AI score0.00321EPSS
SaveExploits0References2
OSS-Fuzz
OSS-Fuzz
•added 2023/09/02 8:06 p.m.•10 views

javaparser:parseFuzzer: Security exception in com.github.javaparser.ast.expr.FieldAccessExpr.accept

Detailed Report: https://oss-fuzz.com/testcase?key=5856568347066368 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

5.8AI score
SaveExploits0
Veracode
Veracode
•added 2023/08/30 11:34 a.m.•25 views

Buffer Overflow

flac is vulnerable to Buffer Overflow. The vulnerability exists in the bitwritergrow function in the library, which allows an attacker to run arbitrary code via crafted input to the encoder...

7.8CVSS7.5AI score0.00794EPSS
SaveExploits1References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/30 12:00 a.m.•9 views

CVE-2023-4599: Improper Neutralization of Input During Web Page Generation

The Email Encoder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'eebmailto' shortcode in versions up to, and including, 2.1.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with...

6.4CVSS6.9AI score0.00519EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2023/08/29 12:00 a.m.•22 views

WordPress Email Encoder Bundle Plugin <= 2.1.7 is vulnerable to Cross Site Scripting (XSS)

Software Email Encoder Bundle Type Plugin Vulnerable versions = 2.1.7 Fixed in 2.1.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-4599 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 48a0517c2804 Credits István Márton...

6.4CVSS5.7AI score0.00519EPSS
SaveExploits0References3Affected Software1
OSS-Fuzz
OSS-Fuzz
•added 2023/08/28 2:04 a.m.•19 views

libxaac:xaac_enc_fuzzer: Heap-buffer-overflow in ixheaace_process

Project: https://github.com/ittiam-systems/libxaac.git Detailed Report: https://oss-fuzz.com/testcase?key=5412896396673024 Project: libxaac Fuzzing Engine: libFuzzer Fuzz Target: xaacencfuzzer Job Type: libfuzzerasani386libxaac Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

5.9AI score
SaveExploits0
SUSE CVE
SUSE CVE
•added 2023/08/26 8:13 a.m.•8 views

SUSE CVE-2020-22219

Buffer Overflow vulnerability in function bitwritergrow in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder...

6.5CVSS7.7AI score0.00794EPSS
SaveExploits1References4
Microsoft CVE
Microsoft CVE
•added 2023/08/26 7:00 a.m.•11 views

Buffer Overflow vulnerability in function bitwriter_grow_ in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder.

...

7.8CVSS7.8AI score0.00794EPSS
SaveExploits1
Rows per page
Query Builder