Lucene search
+L

1057 matches found

OSV
OSV
•added 2022/01/18 12:15 p.m.•28 views

CVE-2021-45394

An issue was discovered in Spipu HTML2PDF before 5.2.4. Attackers can trigger deserialization of arbitrary data via the injection of a malicious tag in the converted HTML document...

8.8CVSS7.1AI score
SaveExploits0References3
NVD
NVD
•added 2022/01/18 12:15 p.m.•28 views

CVE-2021-45394

An issue was discovered in Spipu HTML2PDF before 5.2.4. Attackers can trigger deserialization of arbitrary data via the injection of a malicious tag in the converted HTML document...

8.8CVSS0.01581EPSS
SaveExploits1References3
Prion
Prion
•added 2022/01/18 12:15 p.m.•35 views

Deserialization of untrusted data

An issue was discovered in Spipu HTML2PDF before 5.2.4. Attackers can trigger deserialization of arbitrary data via the injection of a malicious tag in the converted HTML document...

6.8CVSS8.8AI score0.01581EPSS
SaveExploits1References3Affected Software1
Mend
Mend
•added 2022/01/18 11:15 a.m.•4 views

CVE-2021-45394

An issue was discovered in Spipu HTML2PDF before 5.2.4. Attackers can trigger deserialization of arbitrary data via the injection of a malicious tag in the converted HTML document...

8.8CVSS0.01581EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/18 12:00 a.m.•6 views

CVE-2021-45394: Deserialization of Untrusted Data

An issue was discovered in Spipu HTML2PDF before 5.2.4. Attackers can trigger deserialization of arbitrary data via the injection of a malicious tag in the converted HTML document...

8.8CVSS5.9AI score0.01581EPSS
SaveExploits1References3
Wallarm Lab
Wallarm Lab
•added 2022/01/17 11:02 a.m.•26 views

What is fuzz testing? What is it used to test for?

Fuzz testing, regularly known as fuzzing, is a product testing procedure that incorporates embedding flawed or arbitrary information FUZZ into a product framework to recognize coding issues and security issues. Fuzz testing involves infusing information into a framework utilizing robotized or...

7.8AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/01/11 12:00 a.m.•19 views

PT-2022-6467 · Zte · Zte Zxvstb

Name of the Vulnerable Software and Affected Versions: ZTE ZXvSTB affected versions not specified Description: The issue is related to broken access control in the ZTE ZXvSTB product, caused by improper permission control. This allows attackers to delete the default application type, affecting th...

9.1CVSS8.9AI score0.00791EPSS
SaveExploits0References5
CNVD
CNVD
•added 2022/01/05 12:00 a.m.•33 views

giftrans has an unspecified vulnerability

giftrans is used to convert any Gif file to Gif89a. giftrans has a security vulnerability that stems from the fact that the giftrans function in giftrans 1.12.2 contains a stack-based buffer overflow, since the value in the input file determines the amount of data to be written. An attacker could...

7.1CVSS3.9AI score0.0096EPSS
SaveExploits1References1
OSV
OSV
•added 2022/01/01 9:15 p.m.•23 views

CVE-2021-45972

The giftrans function in giftrans 1.12.2 contains a stack-based buffer overflow because a value inside the input file determines the amount of data to write. This allows an attacker to overwrite up to 250 bytes outside of the allocated buffer with arbitrary data...

7.1CVSS7.2AI score
SaveExploits0References3
NVD
NVD
•added 2022/01/01 9:15 p.m.•21 views

CVE-2021-45972

The giftrans function in giftrans 1.12.2 contains a stack-based buffer overflow because a value inside the input file determines the amount of data to write. This allows an attacker to overwrite up to 250 bytes outside of the allocated buffer with arbitrary data...

7.1CVSS0.0096EPSS
SaveExploits1References3
Prion
Prion
•added 2022/01/01 9:15 p.m.•22 views

Stack overflow

The giftrans function in giftrans 1.12.2 contains a stack-based buffer overflow because a value inside the input file determines the amount of data to write. This allows an attacker to overwrite up to 250 bytes outside of the allocated buffer with arbitrary data...

5.8CVSS7AI score0.0096EPSS
SaveExploits1References3Affected Software2
UbuntuCve
UbuntuCve
•added 2022/01/01 9:15 p.m.•25 views

CVE-2021-45972

The giftrans function in giftrans 1.12.2 contains a stack-based buffer overflow because a value inside the input file determines the amount of data to write. This allows an attacker to overwrite up to 250 bytes outside of the allocated buffer with arbitrary data...

7.1CVSS7.3AI score0.0096EPSS
SaveExploits1References4
Mend
Mend
•added 2022/01/01 8:36 p.m.•1 views

CVE-2021-45972

The giftrans function in giftrans 1.12.2 contains a stack-based buffer overflow because a value inside the input file determines the amount of data to write. This allows an attacker to overwrite up to 250 bytes outside of the allocated buffer with arbitrary data...

7.1CVSS0.0096EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2022/01/01 8:36 p.m.•40 views

CVE-2021-45972

The giftrans function in giftrans 1.12.2 contains a stack-based buffer overflow because a value inside the input file determines the amount of data to write. This allows an attacker to overwrite up to 250 bytes outside of the allocated buffer with arbitrary data...

7.3AI score0.0096EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/01 12:00 a.m.•4 views

CVE-2021-45972: Improper Validation of Specified Quantity in Input

The giftrans function in giftrans 1.12.2 contains a stack-based buffer overflow because a value inside the input file determines the amount of data to write. This allows an attacker to overwrite up to 250 bytes outside of the allocated buffer with arbitrary data...

7.1CVSS6.2AI score0.0096EPSS
SaveExploits1References2
NVD
NVD
•added 2021/12/28 8:15 p.m.•36 views

CVE-2020-22061

SUPERAntispyware v8.0.0.1050 was discovered to contain an issue in the component saskutil64.sys. This issue allows attackers to arbitrarily write data to the device via IOCTL 0x9C402140...

7.8CVSS0.00318EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2021/12/28 1:15 a.m.•16 views

CVE-2021-45909

An issue was discovered in gif2apng 1.9. There is a heap-based buffer overflow vulnerability in the DecodeLZW function. It allows an attacker to write a large amount of arbitrary data outside the boundaries of a buffer...

7.8CVSS5.9AI score0.00867EPSS
SaveExploits1References3
Prion
Prion
•added 2021/12/28 1:15 a.m.•21 views

Heap overflow

An issue was discovered in gif2apng 1.9. There is a heap-based buffer overflow vulnerability in the DecodeLZW function. It allows an attacker to write a large amount of arbitrary data outside the boundaries of a buffer...

6.8CVSS7.7AI score0.00867EPSS
SaveExploits1References2Affected Software2
Mend
Mend
•added 2021/12/28 12:02 a.m.•3 views

CVE-2021-45909

An issue was discovered in gif2apng 1.9. There is a heap-based buffer overflow vulnerability in the DecodeLZW function. It allows an attacker to write a large amount of arbitrary data outside the boundaries of a buffer...

8.5CVSS0.00867EPSS
SaveExploits1References4
CVE
CVE
•added 2021/12/28 12:02 a.m.•117 views

CVE-2021-45909

gif2apng 1.9 contains a heap-based buffer overflow in DecodeLZW (CVE-2021-45909). An attacker could write arbitrary data beyond buffer boundaries, enabling a potential denial-of-service. Related issues CVE-2021-45910 and CVE-2021-45911 exist in the same tool. Remediation is available: Debian/Ubun...

7.8CVSS7.6AI score0.00867EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder