Lucene search
+L

7 matches found

Snyk
Snyk
•added 2026/05/04 8:20 p.m.•13 views

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write in the setimage functions in encode.c and decode.c, which are exploitable via Image.open. An attacker can execute arbitrary code by supplying a malicious PSD image file with tile dimensions that trigger integer...

8.6CVSS7.2AI score0.00448EPSS
SaveExploits1References3
OSV
OSV
•added 2022/01/28 10:15 p.m.•13 views

CVE-2021-44377

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. SetImage param is not object. An attacker can send an HTTP request to trigger this vulnerability...

7.7CVSS7.3AI score0.01145EPSS
SaveExploits1References1
NVD
NVD
•added 2022/01/28 10:15 p.m.•40 views

CVE-2021-44377

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. SetImage param is not object. An attacker can send an HTTP request to trigger this vulnerability...

8.6CVSS0.01145EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2022/01/28 9:42 p.m.•41 views

CVE-2021-44377

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. SetImage param is not object. An attacker can send an HTTP request to trigger this vulnerability...

8.6CVSS7.7AI score0.01145EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2022/01/28 12:00 a.m.•15 views

PT-2022-12074 · Reolink · Reolink Rlc-410W

Name of the Vulnerable Software and Affected Versions: reolink RLC-410W version 3.0.0.136 20121102 Description: A denial of service issue exists in the cgiserver.cgi JSON command parser functionality. This can be triggered by a specially-crafted HTTP request, leading to a reboot. The SetImage par...

8.6CVSS7.8AI score0.01145EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/28 12:00 a.m.•5 views

CVE-2021-44377: Improper Input Validation

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. SetImage param is not object. An attacker can send an HTTP request to trigger this vulnerability...

8.6CVSS7.5AI score0.01145EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2018/11/15 12:00 a.m.•5 views

PT-2018-2806

Name of the Vulnerable Software and Affected Versions MasterSCADA affected versions not specified Description The issue is related to the use of an insecure memory allocation function alloca probe 16 in the dfact.dll COM object, specifically in the SetImage method of the BmpImager, GifImager,...

2.6CVSS6AI score
SaveExploits0References1
Rows per page
Query Builder