CVE-2021-38291: Reachable Assertion

FFmpeg version git commit de8e6e67e7523e48bb27ac224a0b446df05e1640 suffers from a an assertion failure at src/libavutil/mathematics.c...

CVE-2021-37232

A stack overflow vulnerability occurs in Atomicparsley 20210124.204813.840499f through AParread64 in src/util.cpp due to the lack of buffer size of uint32buffer while reading more bytes in AParread64...

CVE-2021-37232

A stack overflow vulnerability occurs in Atomicparsley 20210124.204813.840499f through AParread64 in src/util.cpp due to the lack of buffer size of uint32buffer while reading more bytes in AParread64...

CVE-2021-37232: Out-of-bounds Write

A stack overflow vulnerability occurs in Atomicparsley 20210124.204813.840499f through AParread64 in src/util.cpp due to the lack of buffer size of uint32buffer while reading more bytes in AParread64...

CVE-2021-37231: Out-of-bounds Write

A stack-buffer-overflow occurs in Atomicparsley 20210124.204813.840499f through AParreadX in src/util.cpp while parsing a crafted mp4 file because of the missing boundary check...

CVE-2021-37232

CVE-2021-37232 describes a stack overflow in AtomicParsley (version 20210124.204813.840499f) triggered by APar_read64() in src/util.cpp due to the lack of buffer size for uint32_buffer when reading more bytes. Public sources (NVD) assign a high to critical impact (CVSS v3.1: 9.8, HIGH/CRITICAL ac...

CVE-2021-37231

A stack-buffer-overflow occurs in Atomicparsley 20210124.204813.840499f through AParreadX in src/util.cpp while parsing a crafted mp4 file because of the missing boundary check...

CVE-2021-23414

This affects the package video.js before 7.14.3. The src attribute of track tag allows to bypass HTML escaping and execute arbitrary code...

CVE-2021-23414: Improper Neutralization of Input During Web Page Generation

This affects the package video.js before 7.14.3. The src attribute of track tag allows to bypass HTML escaping and execute arbitrary code...

PT-2021-15503 · Video.Js +1 · Video.Js +1

Name of the Vulnerable Software and Affected Versions: video.js versions prior to 7.14.3 Description: The issue allows bypassing HTML escaping and executing arbitrary code through the src attribute of the track tag. Recommendations: For versions prior to 7.14.3, update to version 7.14.3 or later ...

Design/Logic Flaw

A Divide-by-zero vulnerability exists in JasPer Image Coding Toolkit 2.0 in jasper/src/libjasper/jpc/jpcenc.c...

CVE-2021-27845

A Divide-by-zero vulnerability exists in JasPer Image Coding Toolkit 2.0 in jasper/src/libjasper/jpc/jpcenc.c...

WS-2021-0342

OpenSC in versions 0.12.2-rc1 to 0.22.0-rc2 is vulnerable to Stack-buffer-overflow WRITE and related to src/libopensc/card-piv.c...

CVE-2021-27845: Divide By Zero

A Divide-by-zero vulnerability exists in JasPer Image Coding Toolkit 2.0 in jasper/src/libjasper/jpc/jpcenc.c...

CVE-2012-2666

golang/go in 1.0.2 fixes all.bash on shared machines. dotest in src/pkg/debug/gosym/pclntabtest.go creates a temporary file with predicable name and executes it as shell script...

CVE-2012-2666: Insecure Temporary File

golang/go in 1.0.2 fixes all.bash on shared machines. dotest in src/pkg/debug/gosym/pclntabtest.go creates a temporary file with predicable name and executes it as shell script...

PT-2021-25394

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.128 Description: A memory leak issue exists in the ip mc add1 src function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v5.4.128,...

PT-2021-29534

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v4.9 through v5.12.12 Description A memory leak issue exists in the ip mc add1 src function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v4.9 through...

PT-2021-29388

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.128 Description A memory leak issue exists in the ip mc add1 src function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.4.128,...

PT-2021-25459

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.9 through 5.10.45 Description: A memory leak issue exists in the ip mc add1 src function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions 4.9 through...