690310 matches found
CVE-2025-60490
A heap use-after-free in the gffilterpidsendeventdownstream function /filtercore/filterpid.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
CVE-2025-60469
A NULL pointer dereference in the gfac4presentationchmode function /mediatools/avparsers.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted AC4 file...
PT-2026-120438
A security vulnerability has been detected in DT42 BerryNet up to 3.10.2. The affected element is the function DLModelManager.get model meta of the file berrynet/dlmodelmgr.py of the component Model Package Metadata Handler. The manipulation of the argument label leads to path traversal. The atta...
PT-2026-120606
A NULL pointer dereference in the dasher insert timeline entry function /filters/dasher.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
PT-2026-120613
A heap use-after-free in the dasher flush segment function /filters/dasher.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
PT-2026-120627
A use-after-free in the gf filter packet destroy function /filter core/filter pck.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MPEG-2 file...
PT-2026-120628
A segmentation violation in the gf isom get esd function /isomedia/isom read.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted XML file...
PT-2026-120638
A heap use-after-free in the gf odf ac4 cfg clean list function /odf/descriptors.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted AC4 file...
PT-2026-120161
Vyper from 0.1.0b4 before 0.3.0 contains a memory corruption vulnerability caused by an incorrect stack tip pointer when internal function calls are performed inside arrays. Contracts placing internal calls in nested array elements, external call arguments, struct literals, or raw log topics can...
PT-2026-120525
Missing authentication for critical function vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 2.0.0 before 2.0.11. Users are recommended to upgrade to version 2.0.11, which fixes the issue...
PT-2026-120824
A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. Impacted is an unknown function of the file /inserttrans.php. Performing a manipulation of the argument prcd results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and...
PT-2026-120807
A weakness has been identified in leomoon-studios wiki-go up to 1.9.1. Affected by this vulnerability is the function SaveHandler/SourceHandler of the file internal/handlers/editor.go of the component API. Executing a manipulation can lead to path traversal. The attack can be launched remotely. T...
Multiple vulnerabilities in the Highcharts library bundled with Vaadin Charts
Vaadin Charts renders charts with the Highcharts library and pins an exact version of it, so an application cannot remove the vulnerabilities Highsoft disclosed on 29 September 2026 by upgrading Highcharts on its own. Where data an attacker controls reaches the chart configuration, those...
EUVD-2025-211162
A segmentation violation in the checkmediaprofile function /mp4box/mp4box.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
PT-2026-120771
A security vulnerability has been detected in ProjectWorlds Advanced Library Management System 1.0. This impacts the function mysqli query of the file profile.php. The manipulation of the argument admin id leads to sql injection. The attack is possible to be carried out remotely. The exploit has...
PT-2026-120605
A NULL pointer dereference in the StatSFVec2f function /scene manager/scene stats.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MPEG-4 file...
PT-2026-120631
A segmentation violation in the check media profile function /mp4box/mp4box.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
PT-2026-120636
In the Linux kernel, the following vulnerability has been resolved: bpf: Infer zext dst based on static register liveness analysis As reported in the thread 1, the verifier's 32-bit operations zero extension logic is broken. This logic is responsible for correct semantics of 32-bit operations on...
