Lucene search
+L

673 matches found

OSV
OSV
•added 2022/08/26 11:05 a.m.•13 views

OESA-2022-1868 OpenEXR security update

OpenEXR is a high dynamic-range HDR image file format originally developed by Industrial Light & Magic for use in computer imaging applications. Security Fixes: A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be processed by...

5.3CVSS6.6AI score0.01938EPSS
SaveExploits1References2
NVD
NVD
•added 2022/08/23 4:15 p.m.•33 views

CVE-2021-20304

A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be processed by OpenEXR, to trigger an undefined right shift error. The highest threat from this vulnerability is to system availability...

7.5CVSS0.01938EPSS
SaveExploits1References6
OSV
OSV
•added 2022/08/23 4:15 p.m.•4 views

DEBIAN-CVE-2021-20304

A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be processed by OpenEXR, to trigger an undefined right shift error. The highest threat from this vulnerability is to system availability...

7.5CVSS7.3AI score0.01938EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/08/23 4:15 p.m.•12 views

CVE-2021-20304

A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be processed by OpenEXR, to trigger an undefined right shift error. The highest threat from this vulnerability is to system availability...

7.5CVSS7.1AI score0.01938EPSS
SaveExploits1References7
UbuntuCve
UbuntuCve
•added 2022/08/23 4:15 p.m.•58 views

CVE-2021-20304

A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be processed by OpenEXR, to trigger an undefined right shift error. The highest threat from this vulnerability is to system availability...

7.5CVSS7AI score0.01938EPSS
SaveExploits1References2
OSV
OSV
•added 2022/08/23 4:15 p.m.•12 views

UBUNTU-CVE-2021-20304

A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be processed by OpenEXR, to trigger an undefined right shift error. The highest threat from this vulnerability is to system availability...

7.5CVSS7.2AI score0.01938EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2022/08/23 12:00 a.m.•35 views

CVE-2021-20304

A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be processed by OpenEXR, to trigger an undefined right shift error. The highest threat from this vulnerability is to system availability...

7.4AI score0.01938EPSS
SaveExploits1References6
CVE
CVE
•added 2022/08/23 12:00 a.m.•143 views

CVE-2021-20304

OpenEXR contains a vulnerable hufDecode path (CVE-2021-20304). A crafted EXR file can trigger an undefined right-shift error, with the highest impact on availability. Public advisories document affected OpenEXR components and remediation via vendor patches/upgrades. Notably, Amazon Linux 2 ALAS a...

7.5CVSS7.1AI score0.01938EPSS
SaveExploits1References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/23 12:00 a.m.•6 views

CVE-2021-20304: Integer Overflow or Wraparound

A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be processed by OpenEXR, to trigger an undefined right shift error. The highest threat from this vulnerability is to system availability...

7.5CVSS7.2AI score0.01938EPSS
SaveExploits1References3
Debian CVE
Debian CVE
•added 2022/08/23 12:00 a.m.•42 views

CVE-2021-20304

A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be processed by OpenEXR, to trigger an undefined right shift error. The highest threat from this vulnerability is to system availability...

7.5CVSS7.3AI score0.01938EPSS
SaveExploits1
Mend
Mend
•added 2022/08/23 12:00 a.m.•4 views

CVE-2021-20304

A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be processed by OpenEXR, to trigger an undefined right shift error. The highest threat from this vulnerability is to system availability...

8.7CVSS0.01938EPSS
SaveExploits1References8
attackerkb
attackerkb
•added 2022/07/27 6:15 p.m.•5 views

CVE-2022-34121

Cuppa CMS v1.0 was discovered to contain a local file inclusion LFI vulnerability via the component /templates/default/html/windows/right.php...

7.5CVSS7AI score0.03702EPSS
SaveExploits1References4
OSV
OSV
•added 2022/07/27 6:15 p.m.•13 views

CVE-2022-34121

Cuppa CMS v1.0 was discovered to contain a local file inclusion LFI vulnerability via the component /templates/default/html/windows/right.php...

7.5CVSS5.8AI score0.03702EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/07/27 12:00 a.m.•15 views

CuppaCMS 安全漏洞

CuppaCMS is a content management system CMS. A security vulnerability exists in CuppaCMS v1.0, which originates from a local file inclusion issue in the /templates/default/html/windows/right.php page...

7.5CVSS7.3AI score0.03702EPSS
SaveExploits1References3
Schneier on Security
Schneier on Security
•added 2022/07/20 3:32 p.m.•15 views

Russia Creates Malware False-Flag App

The Russian hacking group Turla released an Android app that seems to aid Ukrainian hackers in their attacks against Russian networks. Its actually malware, and provides information back to the Russians: The hackers pretended to be a "community of free people around the world who are fighting...

1.5AI score
SaveExploits0
Malwarebytes
Malwarebytes
•added 2022/07/04 10:36 a.m.•36 views

My Body, My Data Act would lock down reproductive and sexual health data

A new bill entered into both the House of Representatives and the Senate proposes the strongest Federal data privacy protections yet for an increasingly scrutinized form of data in the United States—reproductive and sexual health data. The “My Body, My Data Act of 2022” was announced in early Jun...

6.5AI score
SaveExploits0
Microsoft KB
Microsoft KB
•added 2022/06/28 12:00 a.m.•15 views

June 28, 2022—KB5014666 (OS Builds 19042.1806, 19043.1806, and 19044.1806) Preview

None None...

6.1AI score
SaveExploits0
NVD
NVD
•added 2022/05/20 9:15 p.m.•17 views

CVE-2022-29427

Cross-Site Request Forgery CSRF vulnerability in Aftab Muni's Disable Right Click For WP plugin = 1.1.6 at WordPress...

8.8CVSS0.00421EPSS
SaveExploits0References2
OSV
OSV
•added 2022/05/20 9:15 p.m.•15 views

CVE-2022-29427

Cross-Site Request Forgery CSRF vulnerability in Aftab Muni's Disable Right Click For WP plugin = 1.1.6 at WordPress...

8.8CVSS7.3AI score0.00421EPSS
SaveExploits0References2
CVE
CVE
•added 2022/05/20 8:09 p.m.•118 views

CVE-2022-29427

CVE-2022-29427 affects the WordPress plugin Disable Right Click For WP (

8.8CVSS6.5AI score0.00421EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder