492305 matches found
Wireshark 1.12.x < 1.12.4 Multiple Vulnerabilities (macOS)
The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.12.4. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.12.4 advisory. - Integer overflow in the dissectosd2cdbcontinuation function in epan/dissectors/packet-scsi-osd.c in t...
Linux Distros Unpatched Vulnerability : CVE-2026-109247
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.32.0 contains a path traversal vulnerability in convertfiledescriptorstofilelist in winpr/libwinpr/clipboard/syntheticfile.c, which concatenate...
RHEL 10 : lrzsz (RHSA-2026:86056)
The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:86056 advisory. Lrzsz consisting of lrz and lsz is a cosmetically modified zmodem/ymodem/xmodem package built from the public-domain version of the rzsz...
TinyPNG - Moderately critical - Information disclosure - SA-CONTRIB-2026-246
TinyPNG uses smart lossy compression techniques to reduce the file size of your PNG files. The module doesn't sufficiently check access to image style derivatives when those files are served via a file stream other than private://. This vulnerability is mitigated by the fact that Drupal must be...
oretnom23 file-management-system-php input validation error vulnerability
The oretnom23 file-management-system-php versions 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4 and earlier contain a security vulnerability. This vulnerability stems from improper handling of the ID parameter by the readfile function in the download.php file of the File Download component, potentiall...
EUVD-2025-211160
A segmentation violation in the gfisomgetesd function /isomedia/isomread.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted XML file...
ROS-20261021-73-0017
The vulnerability in Tar is related to the unlimited loading of dangerous types of files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
EUVD-2025-211159
A heap use-after-free in the gffilterpidsendeventdownstream function /filtercore/filterpid.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
EUVD-2025-211150
A NULL pointer dereference in the StatSFVec2f function /scenemanager/scenestats.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MPEG-4 file...
CVE-2025-60479
A NULL pointer dereference in the StatSFVec2f function /scenemanager/scenestats.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MPEG-4 file...
CVE-2025-60487
A segmentation violation in the gfisomgetesd function /isomedia/isomread.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted XML file...
CVE-2025-60490
A heap use-after-free in the gffilterpidsendeventdownstream function /filtercore/filterpid.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
CVE-2025-60491
A heap use-after-free in the dasherflushsegment function /filters/dasher.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
CVE-2025-60493
A segmentation violation in the checkmediaprofile function /mp4box/mp4box.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
oretnom23 file-management-system-php input validation error vulnerability
The oretnom23 file-management-system-php versions 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4 and earlier contain a security vulnerability. This vulnerability stems from improper handling of the username/password parameters in the Login function within the adminclass.php file, potentially enabling S...
CVE-2025-60469
A NULL pointer dereference in the gfac4presentationchmode function /mediatools/avparsers.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted AC4 file...
CVE-2025-60490
GPAC Project's MP4Box versions prior to 2.5 are vulnerable to a heap use-after-free (or stack reutilization) issue in the gf_filter_pid_send_event_downstream function located in /filter_core/filter_pid.c. An attacker can exploit this vulnerability by supplying a crafted MP4 file to trigger a Deni...
Nigel Jinivon file-management-system authorization issue vulnerability
The Nigel Jinivon file-management-system has an authorization issue vulnerability. This vulnerability stems from improper handling of the Request parameter in the index/store/update/destroy functions within the app/Http/Controllers/FileController.php file in the Files API component. As a result,...