Lucene search
+L

1953 matches found

Github Security Blog
Github Security Blog
added 2026/03/10 11:57 p.m.36 views

file-type affected by infinite loop in ASF parser on malformed input with zero-size sub-header

Impact A denial of service vulnerability exists in the ASF WMV/WMA file type detection parser. When parsing a crafted input where an ASF sub-header has a size field of zero, the parser enters an infinite loop. The payload value becomes negative -24, causing tokenizer.ignorepayload to move the rea...

5.3CVSS5.8AI score0.00325EPSS
SaveExploits0References4Affected Software1
NVD
NVD
added 2026/03/10 9:16 p.m.11 views

CVE-2026-31808

file-type detects the file type of a file, stream, or data. Prior to 21.3.1, a denial of service vulnerability exists in the ASF WMV/WMA file type detection parser. When parsing a crafted input where an ASF sub-header has a size field of zero, the parser enters an infinite loop. The payload value...

5.3CVSS0.00325EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/03/10 12:00 a.m.16 views

PT-2026-24463

Name of the Vulnerable Software and Affected Versions file-type versions prior to 21.3.1 Description A denial of service issue exists in the ASF WMV/WMA file type detection parser within file-type. When processing a specially crafted input where an ASF sub-header has a size field of zero, the...

5.3CVSS5.9AI score0.00325EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/02/18 12:00 a.m.15 views

PT-2026-20537

WMV to AVI MPEG DVD WMV Convertor 4.6.1217 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting the license name and license code fields. Attackers can craft a malicious payload of 6000 bytes to trigger a bind shell on port 4444 by exploiting a...

9.8CVSS6.6AI score0.00679EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
added 2026/01/14 6:22 p.m.9 views

CVE-2026-20837

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally...

7.8CVSS7.8AI score0.00695EPSS
SaveExploits0References1
OSV
OSV
added 2026/01/13 6:16 p.m.8 views

CVE-2026-20837

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally...

7.8CVSS6.2AI score0.00695EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/13 6:16 p.m.8 views

CVE-2026-20837

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally...

7.8CVSS0.00695EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/13 5:56 p.m.35 views

CVE-2026-20837 Windows Media Remote Code Execution Vulnerability

...

7.8CVSS0.00695EPSS
SaveExploits0References1
CVE
CVE
added 2026/01/13 5:56 p.m.50 views

CVE-2026-20837

CVE-2026-20837 is a Windows Media heap-based buffer overflow that enables local code execution. The vulnerability is documented across multiple feeds as a Windows Media Remote Code Execution issue, with explicit mention of Windows Media in the CVE entries. Connected sources indicate Microsoft rel...

7.8CVSS7.4AI score0.00695EPSS
SaveExploits0References1Affected Software10
Vulnrichment
Vulnrichment
added 2026/01/13 5:56 p.m.5 views

CVE-2026-20837 Windows Media Remote Code Execution Vulnerability

...

7.8CVSS6.6AI score0.00695EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2026/01/13 4:00 p.m.11 views

Windows Media Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally...

7.8CVSS7.9AI score0.00695EPSS
SaveExploits0
CNNVD
CNNVD
added 2026/01/13 12:00 a.m.15 views

Microsoft Windows Media 安全漏洞

Microsoft Windows Media is a series of media playback and management software from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Media. An attacker could exploit this vulnerability to remotely execute code. The following products and editions are affected:Windows...

7.8CVSS5.9AI score0.00695EPSS
SaveExploits0References1
Kaspersky
Kaspersky
added 2026/01/13 12:00 a.m.72 views

KLA90840 Multiple vulnerabilities were found in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, bypass security restrictions, obtain sensitive information, cause denial of service, spoof user interface. Below is a complete list of...

9.8CVSS8AI score0.20059EPSS
SaveExploits10References111
EUVD
EUVD
added 2025/10/07 12:30 a.m.18 views

EUVD-2021-13850

Malware in sbrugna...

6.3CVSS5.5AI score0.0292EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.21 views

EUVD-2018-20111

Malware in sbrugna...

3.1CVSS6.3AI score0.05003EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2021-15000

Malware in sbrugna...

7.8CVSS7.4AI score0.01596EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2020-12382

Malware in sbrugna...

9.3CVSS7.6AI score0.03256EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2021-18105

Malware in sbrugna...

7.8CVSS7.4AI score0.02253EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.15 views

EUVD-2020-12117

Malware in sbrugna...

8.8CVSS7.5AI score0.06988EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.21 views

EUVD-2002-0369

Malware in sbrugna...

7.5CVSS6.4AI score0.14417EPSS
SaveExploits0References5
Rows per page
Query Builder