Lucene search
+L

5511 matches found

Cvelist
Cvelist
•added 2023/09/06 1:08 p.m.•46 views

CVE-2021-36060 Adobe Media Encoder MPEG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Media Encoder version 15.2 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victi...

5.5CVSS5.2AI score0.00356EPSS
SaveExploits0References1
CVE
CVE
•added 2023/09/06 1:08 p.m.•113 views

CVE-2021-36060

Adobe Media Encoder 15.2 and earlier is affected by an out-of-bounds read in MPEG file parsing, enabling memory disclosure and potential bypass of ASLR. Exploitation requires user interaction (victim opens a crafted file). Affected version: 15.2 and earlier; remediation per APSB21-43 is to update...

5.5CVSS5.8AI score0.00356EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/09/06 1:08 p.m.•15 views

CVE-2021-36060 Adobe Media Encoder MPEG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Media Encoder version 15.2 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victi...

5.5CVSS5.8AI score0.00356EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/09/06 12:00 a.m.•22 views

Adobe Media Encoder buffer error vulnerability

Adobe Media Encoder is an audio and video encoding application from the American company Audobee Adobe. Adobe Media Encoder suffers from a buffer overflow vulnerability that originates from a boundary error when the application processes untrusted input. An attacker could exploit the vulnerabilit...

5.5CVSS6.3AI score0.00356EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/06 12:00 a.m.•3 views

CVE-2021-36060: Out-of-bounds Read

Adobe Media Encoder version 15.2 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victi...

5.5CVSS5.9AI score0.00356EPSS
SaveExploits0References2
OSS-Fuzz
OSS-Fuzz
•added 2023/09/02 8:06 p.m.•15 views

javaparser:parseFuzzer: Security exception in com.github.javaparser.ast.expr.FieldAccessExpr.accept

Detailed Report: https://oss-fuzz.com/testcase?key=5856568347066368 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

5.8AI score
SaveExploits0
Veracode
Veracode
•added 2023/08/30 11:34 a.m.•26 views

Buffer Overflow

flac is vulnerable to Buffer Overflow. The vulnerability exists in the bitwritergrow function in the library, which allows an attacker to run arbitrary code via crafted input to the encoder...

7.8CVSS7.8AI score0.00794EPSS
SaveExploits1References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/30 12:00 a.m.•11 views

CVE-2023-4599: Improper Neutralization of Input During Web Page Generation

The Email Encoder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'eebmailto' shortcode in versions up to, and including, 2.1.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with...

6.4CVSS6.8AI score0.00519EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2023/08/29 12:00 a.m.•23 views

WordPress Email Encoder Bundle Plugin <= 2.1.7 is vulnerable to Cross Site Scripting (XSS)

Software Email Encoder Bundle Type Plugin Vulnerable versions = 2.1.7 Fixed in 2.1.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-4599 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 48a0517c2804 Credits István Márton...

6.4CVSS6.4AI score0.00519EPSS
SaveExploits0References3Affected Software1
OSS-Fuzz
OSS-Fuzz
•added 2023/08/28 2:04 a.m.•24 views

libxaac:xaac_enc_fuzzer: Heap-buffer-overflow in ixheaace_process

Project: https://github.com/ittiam-systems/libxaac.git Detailed Report: https://oss-fuzz.com/testcase?key=5412896396673024 Project: libxaac Fuzzing Engine: libFuzzer Fuzz Target: xaacencfuzzer Job Type: libfuzzerasani386libxaac Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

5.9AI score
SaveExploits0
SUSE CVE
SUSE CVE
•added 2023/08/26 8:13 a.m.•10 views

SUSE CVE-2020-22219

Buffer Overflow vulnerability in function bitwritergrow in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder...

6.5CVSS7.8AI score0.00794EPSS
SaveExploits1References4
Microsoft CVE
Microsoft CVE
•added 2023/08/26 7:00 a.m.•12 views

Buffer Overflow vulnerability in function bitwriter_grow_ in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder.

...

7.8CVSS7.5AI score0.00794EPSS
SaveExploits1
osv_azl
osv_azl
•added 2023/08/22 7:16 p.m.•21 views

AZL-28074 CVE-2020-22219 affecting package flac for versions less than 1.4.3-1

Buffer Overflow vulnerability in function bitwritergrow in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder...

7.8CVSS7.8AI score0.00794EPSS
SaveExploits1References1
AlpineLinux
AlpineLinux
•added 2023/08/22 7:16 p.m.•44 views

CVE-2020-22219

Buffer Overflow vulnerability in function bitwritergrow in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder...

7.8CVSS7.8AI score0.00794EPSS
SaveExploits1
NVD
NVD
•added 2023/08/22 7:16 p.m.•20 views

CVE-2020-22219

Buffer Overflow vulnerability in function bitwritergrow in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder...

7.8CVSS7.8AI score0.00794EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2023/08/22 7:16 p.m.•37 views

CVE-2020-22219

Buffer Overflow vulnerability in function bitwritergrow in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder...

7.8CVSS7.8AI score
SaveExploits0References4
osv_debian
osv_debian
•added 2023/08/22 7:16 p.m.•7 views

DEBIAN-CVE-2020-22219

Buffer Overflow vulnerability in function bitwritergrow in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder...

7.8CVSS7.8AI score0.00794EPSS
SaveExploits1References1
Debian CVE
Debian CVE
•added 2023/08/22 12:00 a.m.•33 views

CVE-2020-22219

Buffer Overflow vulnerability in function bitwritergrow in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder...

7.8CVSS7.8AI score0.00794EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/22 12:00 a.m.•5 views

CVE-2020-22219: Buffer Copy without Checking Size of Input

Buffer Overflow vulnerability in function bitwritergrow in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder...

7.8CVSS7.9AI score0.00794EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2023/08/21 12:00 a.m.•25 views

Libde265 derive_spatial_luma_vector_prediction Heap Buffer Overflow DoS

The vulnerability of the derivespatiallumavectorprediction function in the motion.cc component of the H.265 Libde265 codec implementation is related to buffer overflow attacks. Exploiting this vulnerability could allow attackers to access confidential data, compromise its integrity, and even caus...

7.8CVSS7.7AI score0.00333EPSS
SaveExploits1References7Affected Software3
Rows per page
Query Builder