4885 matches found
CVE-2021-32135
The trakboxsize function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...
PT-2021-6545 · Gpac · Gpac
Name of the Vulnerable Software and Affected Versions: GPAC versions 1.0.1 Description: The issue is related to a memory leak in the def parent box new function of the MP4Box component in the GPAC multimedia platform. This leak occurs due to incorrect memory deallocation before the last reference...
PT-2021-27359
Name of the Vulnerable Software and Affected Versions: gifsicle versions prior to 1.93 Description: The issue is related to a security bug that occurs on certain resize operations with the --resize-method=box option. Additionally, there are problems with colormapless GIFs. Recommendations: Update...
PT-2021-6574
Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue is related to the abst box size function in the MP4Box command, which allows attackers to cause a denial of service NULL pointer dereference via a crafted file. This can be exploited by a remote attacke...
PT-2021-6535 · Gpac · Gpac
Name of the Vulnerable Software and Affected Versions: GPAC version 1.0.1 Description: The issue is related to a memory leak in the afra box read function in MP4Box, a component of the GPAC multimedia platform. This allows attackers to read memory via a crafted file, potentially giving them acces...
GPAC code-related vulnerabilities
GPAC is a multimedia framework for rich media and is distributed under the LGPL license. abstboxsize function in GPAC version 1.0.1 is vulnerable to null pointer dereference. An attacker could exploit this vulnerability to cause a denial of service via a specially crafted file in the MP4Box comma...
GPAC code-related vulnerabilities
GPAC is a multimedia framework for rich media and is distributed under the LGPL license. a null pointer dereference vulnerability exists in the trakboxsize function in GPAC version 1.0.1. An attacker could exploit this vulnerability to cause a denial of service via a specially crafted file in the...
GPAC buffer error vulnerability
GPAC is a multimedia framework for rich media and is distributed under the LGPL license. a memory leak vulnerability exists in the afraboxread function in MP4Box in GPAC version 1.0.1. An attacker could exploit the vulnerability to read memory via specially crafted files...
PT-2021-6519 · Gpac · Gpac
Name of the Vulnerable Software and Affected Versions: GPAC version 1.0.1 Description: The issue is related to a memory leak in the infe box read function of the MP4Box component in the GPAC multimedia platform. This allows attackers to read memory via a crafted file, potentially giving them acce...
PT-2021-27755
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by a global buffer overflow read. The crash involves the functions fr is base16 nstd, fr base16 decode nstd, and f...
DEBIAN-CVE-2020-19750
An issue was discovered in gpac 0.8.0. The strdup function in boxcodebase.c has a heap-based buffer over-read...
Solarwinds Orion Platform Cross-Site Scripting Vulnerability (CNVD-2021-69606)
Solarwinds Orion Platform is a network fault and network performance management platform from Solarwinds, Inc. Solarwinds Orion Platform is a cross-site scripting vulnerability that can be exploited by attackers to store XSS via text box hyperlinks...
Cross site scripting
WTCMS 1.0 contains a reflective cross-site scripting XSS vulnerability in the page management background which allows attackers to obtain cookies via a crafted payload entered into the search box...
CVE-2020-20345
WTCMS 1.0 contains a reflective cross-site scripting XSS vulnerability in the page management background which allows attackers to obtain cookies via a crafted payload entered into the search box...
CVE-2020-20345
WTCMS 1.0 contains a reflective cross-site scripting XSS vulnerability in the page management background which allows attackers to obtain cookies via a crafted payload entered into the search box...
CVE-2020-20345: Improper Neutralization of Input During Web Page Generation
WTCMS 1.0 contains a reflective cross-site scripting XSS vulnerability in the page management background which allows attackers to obtain cookies via a crafted payload entered into the search box...
CVE-2021-35239
A security researcher found a user with Orion map manage rights could store XSS through via text box hyperlink...
CVE-2021-35239
A security researcher found a user with Orion map manage rights could store XSS through via text box hyperlink...