Lucene search
+L

1282 matches found

OSV
OSV
added 2021/04/19 7:15 p.m.4 views

DEBIAN-CVE-2021-31261

The gfhintertracknew function in GPAC 1.0.1 allows attackers to read memory via a crafted file in the MP4Box command...

5.5CVSS6.5AI score0.01061EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2021/04/19 7:15 p.m.4 views

CVE-2021-31260

The MergeTrack function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

5.5CVSS6.7AI score0.00872EPSS
SaveExploits1References3
OSV
OSV
added 2021/04/19 7:15 p.m.4 views

UBUNTU-CVE-2021-31260

The MergeTrack function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

5.5CVSS7.3AI score0.00872EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2021/04/19 12:0 a.m.11 views

GPAC 代码问题漏洞

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A null pointer dereference vulnerability exists in the MergeTrack function in GPAC version 1.0.1. An attacker can exploit this vulnerability via specially crafted files to cause a denial of service...

5.5CVSS5.7AI score0.00872EPSS
SaveExploits1References3
OSV
OSV
added 2021/04/14 2:15 p.m.7 views

DEBIAN-CVE-2021-28300

NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial-of-Service DoS by uploading a malicious MP4 file...

9.8CVSS9.1AI score0.02082EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2021/04/14 2:15 p.m.33 views

CVE-2021-28300

NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial-of-Service DoS by uploading a malicious MP4 file...

9.8CVSS7.5AI score0.02082EPSS
SaveExploits1References2
OSV
OSV
added 2021/04/14 2:15 p.m.30 views

UBUNTU-CVE-2021-28300

NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial-of-Service DoS by uploading a malicious MP4 file...

9.8CVSS7.6AI score0.02082EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2021/04/14 12:0 a.m.8 views

GPAC 代码问题漏洞

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A null pointer dereference vulnerability exists in the MergeTrack function of the isomedia/track.c module in GPAC v0.5.2. An attacker can exploit this vulnerability by uploading a malicious MP4 file to execute...

9.8CVSS6.2AI score0.02082EPSS
SaveExploits1References2
CNVD
CNVD
added 2021/03/31 12:0 a.m.62 views

CloudBees Jenkins OWASP Dependency-Track Plugin Cross-Site Request Forgery Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . A cross-site request forgery...

8.8CVSS6.4AI score0.0077EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/03/31 12:0 a.m.33 views

CloudBees Jenkins OWASP Dependency-Track Plugin Improper Authorization Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . An improper authorization...

6.5CVSS6.3AI score0.01051EPSS
SaveExploits0References1
OSV
OSV
added 2021/03/30 12:16 p.m.24 views

CVE-2021-21633

A cross-site request forgery CSRF vulnerability in Jenkins OWASP Dependency-Track Plugin 3.1.0 and earlier allows attackers to connect to an attacker-specified URL, capturing credentials stored in Jenkins...

8.8CVSS6.5AI score
SaveExploits0References2
OSV
OSV
added 2021/03/30 12:16 p.m.19 views

CVE-2021-21632

A missing permission check in Jenkins OWASP Dependency-Track Plugin 3.1.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL, capturing credentials stored in Jenkins...

6.5CVSS6.3AI score
SaveExploits0References2
NVD
NVD
added 2021/03/30 12:16 p.m.39 views

CVE-2021-21633

A cross-site request forgery CSRF vulnerability in Jenkins OWASP Dependency-Track Plugin 3.1.0 and earlier allows attackers to connect to an attacker-specified URL, capturing credentials stored in Jenkins...

8.8CVSS0.0077EPSS
SaveExploits0References2
Prion
Prion
added 2021/03/30 12:16 p.m.25 views

Information disclosure

A missing permission check in Jenkins OWASP Dependency-Track Plugin 3.1.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL, capturing credentials stored in Jenkins...

4CVSS6.3AI score0.01051EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/03/30 12:16 p.m.4 views

CVE-2021-21632

A missing permission check in Jenkins OWASP Dependency-Track Plugin 3.1.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL, capturing credentials stored in Jenkins...

6.5CVSS6.6AI score0.01051EPSS
SaveExploits0References3Affected Software1
Prion
Prion
added 2021/03/30 12:16 p.m.23 views

Cross site request forgery (csrf)

A cross-site request forgery CSRF vulnerability in Jenkins OWASP Dependency-Track Plugin 3.1.0 and earlier allows attackers to connect to an attacker-specified URL, capturing credentials stored in Jenkins...

6.8CVSS8.7AI score0.0077EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/03/30 12:16 p.m.2 views

CVE-2021-21633

A cross-site request forgery CSRF vulnerability in Jenkins OWASP Dependency-Track Plugin 3.1.0 and earlier allows attackers to connect to an attacker-specified URL, capturing credentials stored in Jenkins...

8.8CVSS7.2AI score0.0077EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2021/03/30 11:10 a.m.47 views

CVE-2021-21633

A cross-site request forgery CSRF vulnerability in Jenkins OWASP Dependency-Track Plugin 3.1.0 and earlier allows attackers to connect to an attacker-specified URL, capturing credentials stored in Jenkins...

8.9AI score0.0077EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2021/03/30 11:10 a.m.12 views

CVE-2021-21633

A cross-site request forgery CSRF vulnerability in Jenkins OWASP Dependency-Track Plugin 3.1.0 and earlier allows attackers to connect to an attacker-specified URL, capturing credentials stored in Jenkins...

6.5AI score0.0077EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
added 2021/03/30 11:10 a.m.72 views

CVE-2021-21633

A cross-site request forgery CSRF vulnerability in Jenkins OWASP Dependency-Track Plugin 3.1.0 and earlier allows attackers to connect to an attacker-specified URL, capturing credentials stored in Jenkins...

8.8CVSS4.8AI score0.0077EPSS
SaveExploits0References2
Rows per page
Query Builder