Lucene search
+L

358 matches found

Positive Technologies
Positive Technologies
added 2023/10/20 12:00 a.m.6 views

PT-2023-29636 · Stb Image +3 · Stb Image +3

Name of the Vulnerable Software and Affected Versions: stb image affected versions not specified Description: The issue is related to the stbi getn function in the stb image library, which reads a specified number of bytes from a context into a buffer. If the file stream points to the end, it...

9.8CVSS6.8AI score0.01137EPSS
SaveExploits1References37
BDU FSTEC
BDU FSTEC
added 2023/09/20 12:00 a.m.11 views

The vulnerability of the MPEG12_ParseSeqHdr function (media_tools/mpeg2_ps.c) in the GPAC multimedia platform allows a perpetrator to trigger a service failure.

The vulnerability of the MPEG12ParseSeqHdr function mediatools/mpeg2ps.c in the GPAC multimedia platform is related to reading beyond the memory boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6AI score0.00305EPSS
SaveExploits1References4Affected Software2
SUSE CVE
SUSE CVE
added 2023/02/15 5:38 a.m.8 views

SUSE CVE-2013-2175

HAProxy 1.4 before 1.4.24 and 1.5 before 1.5-dev19, when configured to use hdrip or other "hdr" functions with a negative occurrence count, allows remote attackers to cause a denial of service negative array index usage and crash via an HTTP header with a certain number of values, related to the...

5CVSS6.9AI score0.03519EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 4:58 a.m.8 views

SUSE CVE-2016-7520

Heap-based buffer overflow in coders/hdr.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds read via a crafted HDR file...

6.5CVSS7AI score0.03094EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2022/11/08 12:00 a.m.8 views

PT-2022-36753 · Git +1 · Opensis

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue is reported, with a crash type indicating a heap-buffer-overflow READ 1. The crash state involves functions such as par...

6.9AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/09/23 12:00 a.m.12 views

The vulnerability of the leaf_hdr_load_raw() function in the internal/dcraw_common.cpp component of the LibRaw image processing library allows a hacker to cause a service failure.

The vulnerability of the leafhdrloadraw function in the internal/dcrawcommon.cpp component of the LibRaw image processing library is related to pointer dereferencing errors. Exploiting this vulnerability allows an attacker to cause service failures...

7.1CVSS6.9AI score0.01689EPSS
SaveExploits0References7Affected Software2
Microsoft KB
Microsoft KB
added 2022/09/20 12:00 a.m.10 views

September 20, 2022—KB5017383 (OS Build 22000.1042) Preview

None None...

6.1AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2022/07/07 12:00 a.m.47 views

SAP 3D Visual Enterprise Viewer HDR File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS3.8AI score0.00655EPSS
SaveExploits0References2
CVE
CVE
added 2022/06/14 10:32 p.m.84 views

CVE-2022-32242

SAP 3D Visual Enterprise Viewer is affected by an HDR parsing vulnerability in Radiance Picture files (.hdr, hdr.x3d). The issue can crash the application and, per ZDI, may allow remote code execution via a write past end of an allocated buffer. Exploitation requires user interaction (the user mu...

5.5CVSS5.4AI score0.00655EPSS
SaveExploits0References2Affected Software1
Openbugbounty
Openbugbounty
added 2022/03/04 10:32 a.m.17 views

hdr-miniaturen.de Improper Access Control vulnerability OBB-2404239

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

0.1AI score
SaveExploits0
OSV
OSV
added 2022/02/18 12:14 a.m.9 views

MGASA-2022-0074 Updated zxing-cpp packages fix security vulnerability

Buffer overflow vulnerability in function stbiextendreceive in stbimage.h in stb 2.26 via a crafted JPEG file. CVE-2021-28021 An issue was discovered in stb stbimage.h 1.33 through 2.27. The HDR loader parsed truncated end-of-file RLE scanlines as an infinite sequence of zero-length runs. An...

7.8CVSS6.2AI score0.01463EPSS
SaveExploits2References3
Tenable Nessus
Tenable Nessus
added 2022/01/26 12:00 a.m.39 views

SUSE SLED12 / SLES12 Security Update : zxing-cpp (SUSE-SU-2022:0163-1)

The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0163-1 advisory. - CVE-2021-28021: Fixed buffer overflow vulnerability in function stbiextendreceive in stbimage.h via a crafte...

7.8CVSS7AI score0.01463EPSS
SaveExploits2References10
Microsoft KB
Microsoft KB
added 2022/01/25 12:00 a.m.7 views

January 25, 2022—KB5008353 (OS Build 22000.469) Preview

None None...

6.1AI score
SaveExploits0
OPENSUSE Linux
OPENSUSE Linux
added 2022/01/24 12:00 a.m.52 views

Security update for zxing-cpp (important)

openSUSE Security Update: Security update for zxing-cpp Announcement ID: openSUSE-SU-2022:0157-1 Rating: important References: 1191743 1191942 1191944 Cross-References: CVE-2021-28021 CVE-2021-42715 CVE-2021-42716 CVSS scores: CVE-2021-28021 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H...

7.8CVSS6.8AI score0.01463EPSS
SaveExploits2References3
Microsoft KB
Microsoft KB
added 2022/01/17 12:00 a.m.10 views

January 17, 2022—KB5010795 (OS Build 22000.438) Out-of-band

None None...

6.1AI score
SaveExploits0
Mageia
Mageia
added 2021/12/10 10:19 p.m.37 views

Updated curaengine packages fix security vulnerability

Buffer overflow vulnerability in function stbiextendreceive in stbimage.h in stb 2.26 via a crafted JPEG file. CVE-2021-28021 An issue was discovered in stb stbimage.h 1.33 through 2.27. The HDR loader parsed truncated end-of-file RLE scanlines as an infinite sequence of zero-length runs. An...

7.8CVSS2.3AI score0.01463EPSS
SaveExploits2References2
OSV
OSV
added 2021/12/10 10:19 p.m.13 views

MGASA-2021-0549 Updated curaengine packages fix security vulnerability

Buffer overflow vulnerability in function stbiextendreceive in stbimage.h in stb 2.26 via a crafted JPEG file. CVE-2021-28021 An issue was discovered in stb stbimage.h 1.33 through 2.27. The HDR loader parsed truncated end-of-file RLE scanlines as an infinite sequence of zero-length runs. An...

7.8CVSS6.4AI score0.01463EPSS
SaveExploits2References3
OpenVAS
OpenVAS
added 2021/12/05 12:00 a.m.18 views

Fedora: Security Advisory for pfstools (FEDORA-2021-b58af96f33)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.1CVSS6.5AI score0.00719EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2021/11/16 12:00 a.m.10 views

PT-2021-8153 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The vulnerability is related to the net/mlx5e component of the Linux kernel, specifically with the CT clear action offload. When a flow includes encap action, a neigh update event can...

8.4CVSS6.5AI score0.08555EPSS
SaveExploits2References1347
OpenVAS
OpenVAS
added 2021/11/14 12:00 a.m.7 views

Fedora: Security Advisory for pfstools (FEDORA-2021-df1fa3d3e0)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Rows per page
Query Builder