Lucene search
+L

202 matches found

OSV
OSV
added 2023/04/21 11:05 a.m.5 views

OESA-2023-1243 tcpdump security update

Tcpdump is a command-line tool for monitoring network traffic. Tcpdump can capture and display the packet headers on a particular network interface or on all interfaces. Tcpdump can display all of the packet headers, or just the ones that match particular criteria. Security Fixes: The SMB protoco...

5.5CVSS7.3AI score0.00841EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/04/17 12:00 a.m.12 views

CVE-2023-28968 Junos OS: SRX Series: Policies that rely on JDPI-Decoder actions may fail open

An Improperly Controlled Sequential Memory Allocation vulnerability in the Juniper Networks Deep Packet Inspection-Decoder JDPI-Decoder Application Signature component of Junos OS's AppID service on SRX Series devices will stop the JDPI-Decoder from identifying dynamic application traffic, allowi...

5.3CVSS5.5AI score0.00562EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/04/07 12:00 a.m.15 views

tcpdump 缓冲区错误漏洞

tcpdump is a set of sniffing tools from Tcpdump team running under command line. The tool is mainly used for packet analysis and network traffic capturing, among others. A security vulnerability exists in tcpdump version 4.99.3, which stems from an SMB protocol decoder that can perform...

6.5CVSS7AI score0.00841EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
added 2022/11/25 12:00 a.m.9 views

The vulnerability of the zgfx_decompress_segment() function in the ZGFX decoder of the FreeRDP remote desktop protocol allows a hacker to trigger a service failure.

The vulnerability of the zgfxdecompresssegment function in the ZGFX decoder of the FreeRDP remote desktop protocol lies in the fact that the operation for checking the length of input data occurs outside the buffer. Exploiting this vulnerability could allow a malicious actor to cause service...

7.8CVSS6AI score0.00975EPSS
SaveExploits0References13Affected Software6
Snyk
Snyk
added 2022/11/03 12:41 p.m.9 views

Denial of Service (DoS)

Overview vapor/vapor is an a server-side Swift HTTP web framework. Affected versions of this package are vulnerable to Denial of Service DoS via URLEncodedFormDecoder. When using automatic content decoding, an attacker can craft a request body that can make the server crash. Details Denial of...

7.5CVSS7.1AI score0.01637EPSS
SaveExploits1References2
Zero Day Initiative
Zero Day Initiative
added 2022/06/30 12:00 a.m.20 views

Tencent WeChat WXAM Decoder Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tencent WeChat. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM...

4.3CVSS1.7AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/04/13 12:00 a.m.12 views

The vulnerability of the decoder for MPEG-4 multimedia platform GPAC allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the SVHD decoder, a component of the MPEG-4 multimedia platform GPAC, lies in the lack of verification for the result of the addition arithmetic operation. Exploiting this vulnerability allows an attacker operating remotely to gain access to confidential data, compromise its...

9.3CVSS7.6AI score0.01397EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/13 12:00 a.m.15 views

The vulnerability of the decoder in the MPEG-4 multimedia platform GPAC’s functional decoding process allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the CTS decoder used in MPEG-4 multimedia platform GPAC is related to incorrect checking of the result of an arithmetic operation. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.3CVSS7.6AI score0.01695EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/13 12:00 a.m.11 views

The vulnerability of the RTP decoder, a component for decoding MPEG-4 multimedia platforms like GPAC, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the RTP decoder used for decoding MPEG-4 multimedia platform GPAC is related to the lack of verification for the result of the addition arithmetic operation. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity,...

9.3CVSS7.6AI score0.01656EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/13 12:00 a.m.12 views

The vulnerability of the decoder in the MPEG-4 multimedia platform GPAC’s function decoding process allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the MPEG-4 multimedia platform GPAC decoder’s decoding function is related to incorrect checking of the result of an arithmetic operation. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service failures...

9.3CVSS7.6AI score0.0201EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/13 12:00 a.m.16 views

The vulnerability of the decoder in the MPEG-4 multimedia platform GPAC function decoder allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the SAIO decoder in the MPEG-4 multimedia platform GPAC relates to incorrect checking of the result of an arithmetic operation. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.3CVSS7.6AI score0.01695EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/13 12:00 a.m.13 views

The vulnerability of the decoder in the MPEG-4 multimedia platform GPAC’s functional decoding process allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the decoder in the MPEG-4 multimedia platform GPAC function decoder relates to the lack of verification for the result of arithmetic operations. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause...

9.3CVSS7.6AI score0.0201EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/13 12:00 a.m.21 views

The vulnerability of the decoder in the MPEG-4 multimedia platform GPAC’s decoding function allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the decoder in the MPEG-4 multimedia platform GPAC’s decoding function is related to the lack of a mechanism for converting data types. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.3CVSS7.6AI score0.01632EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/06 12:00 a.m.13 views

The vulnerability of the decoder in the MPEG-4 multimedia platform GPAC function decoding process allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the STTS decoder for MPEG-4 multimedia platform GPAC is related to incorrect checking of the result of an arithmetic operation. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

10CVSS7.6AI score0.01972EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:00 a.m.18 views

The vulnerability of the decoder in the SIX functional decoding system for MPEG-4 multimedia platform GPAC allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the SSIX decoder for MPEG-4 multimedia platform GPAC is related to incorrect checking of the result of an arithmetic operation. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.3CVSS7.6AI score0.02019EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:00 a.m.16 views

The vulnerability of the decoder for the MPEG-4 multimedia platform GPAC’s decoding function allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the CSGP decoder for MPEG-4 multimedia platform GPAC is related to the lack of verification for the result of arithmetic operations. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failure...

10CVSS7.6AI score0.01703EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/04 12:00 a.m.12 views

The vulnerability of the decoder in the MPEG-4 multimedia platform GPAC function decoder allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the CO64 decoder for the MPEG-4 multimedia platform GPAC is related to incorrect checking of the result of an arithmetic operation. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.3CVSS7.6AI score0.01695EPSS
SaveExploits1References7Affected Software3
OSV
OSV
added 2021/04/13 8:15 p.m.8 views

CVE-2021-27095

Windows Media Video Decoder Remote Code Execution Vulnerability...

7.8CVSS7.2AI score0.0407EPSS
SaveExploits0References1
Talos
Talos
added 2021/02/05 12:00 a.m.132 views

Accusoft ImageGear GIF LZW decoder heap overflow vulnerability

Summary A heap overflow vulnerability exists in the way the GIF parser decodes LZW compressed streams in Accusoft ImageGear 19.8. A specially crafted malformed file can trigger a heap overflow, which can result in arbitrary code execution. An attacker can provide a malicious file to trigger this...

9.8CVSS9.1AI score0.01917EPSS
SaveExploits1
CNVD
CNVD
added 2019/08/15 12:00 a.m.17 views

Sean Barrett stb_vorbis code issue vulnerability

Sean Barrett stbvorbis is an open source audio codec for decoding ogg vorbis files. Sean Barrett stbvorbis A code issue vulnerability exists in the 'getwindow' function in versions 2019-03-04 and earlier. The vulnerability stems from an improperly designed or implemented code development process...

5.5CVSS6.9AI score0.00961EPSS
SaveExploits0References1
Rows per page
Query Builder