GPAC Denial of Service Vulnerability (CNVD-2021-103387)

GPAC is an open source multimedia framework. gfsvgdeleteattributevalue is invalid and can be exploited by attackers to cause segmentation errors and application crashes...

CVE-2021-44542

A memory leak vulnerability was found in Privoxy when handling errors...

CVE-2021-40338

Hitachi Energy LinkOne product, has a vulnerability due to a web server misconfiguration, that enables debug mode and reveals the full path of the filesystem directory when an attacker generates errors during a query operation. This issue affects: Hitachi Energy LinkOne 3.20; 3.22; 3.23; 3.24;...

GPAC null pointer dereference vulnerability (CNVD-2022-03625)

GPAC is an open source multimedia framework. version 1.1.0 of GPAC has a null pointer dereference vulnerability in the BDCheckSFTimeOffset function, which can be exploited by attackers to cause segmentation errors and application crashes...

GPAC null pointer dereference vulnerability (CNVD-2022-03619)

GPAC is an open source multimedia framework. gfnodegettag function in GPAC version 1.1.0 has a null pointer dereference vulnerability that can be exploited by attackers to cause segmentation errors and application crashes...

GPAC null pointer dereference vulnerability (CNVD-2022-03624)

GPAC is an open source multimedia framework. version 1.1.0 of GPAC contains a null pointer dereference vulnerability in the dumpodtosaf.isra function, which can be exploited by attackers to cause segmentation errors and application crashes...

GPAC null pointer dereference vulnerability (CNVD-2022-03618)

GPAC is an open source multimedia framework. gfsgvrmlmfalloc function in GPAC version 1.1.0 has a null pointer dereference vulnerability that can be exploited by attackers to cause segmentation errors and application crashes...

GPAC null pointer dereference vulnerability (CNVD-2022-03616)

GPAC is an open source multimedia framework. gfsvggetattributename function in GPAC version 1.1.0 has a null pointer dereference vulnerability that can be exploited by attackers to cause segmentation errors and application crashes...

GPAC null pointer dereference vulnerability (CNVD-2022-03623)

GPAC is an open source multimedia framework. gfdumpvrmldynfield.isra function in GPAC version 1.1.0 is vulnerable to a null pointer dereference, which can be exploited by attackers to cause segmentation errors and application crashes...

GPAC null pointer dereference vulnerability (CNVD-2022-03622)

GPAC is an open source multimedia framework. gfisomparsemovieboxesinternal function in GPAC version 1.1.0 has a null pointer dereference vulnerability that can be exploited by attackers to cause segmentation errors and application crashes...

The vulnerability of the WISE-4060 Ethernet module’s microprogramming software, related to session management errors, allows a intruder to gain unauthorized access to the device.

The vulnerability of the WISE-4060 Ethernet module’s microprogramming software is related to session management errors. Exploiting this vulnerability could allow an attacker to gain unauthorized access to the device remotely...

GPAC null pointer dereference vulnerability (CNVD-2022-03620)

GPAC is an open source multimedia framework. gfnodegetfield function in GPAC version 1.1.0 is vulnerable to a null pointer dereference, which can be exploited by attackers to cause segmentation errors and application crashes...

Pimcore 跨站脚本漏洞

Pimcore is an open source Web content management platform for creating and managing Web applications from the Austrian company Pimcore. The platform integrates Web content management, e-commerce frameworks and product information management applications. pimcore suffers from a cross-site scriptin...

PT-2022-3658 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The netback driver vulnerability in the Linux kernel is related to resource release errors. Exploitation of this issue may allow an attacker to cause a denial of service...

PT-2022-4510 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a driver vulnerability in the Linux kernel's netback component, which is associated with resource release errors. Exploitation of this issue could allow an...

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to type mixing errors, allows attackers to execute arbitrary code.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit is related to type mixing errors. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability of the loader components in Microsoft Edge and Google Chrome allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the Loader components in Microsoft Edge and Google Chrome is related to type conversion errors. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code or cause a service failure through a specially created malicious web page...

GSD-2021-1002582 serial: liteuart: fix minor-number leak on probe errors

serial: liteuart: fix minor-number leak on probe errors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.7 by commit...

UBUNTU-CVE-2021-34141

An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects. NOTE: the vendor states that this reported code behavior is "completely harmless."...

The vulnerability of the Moodle administration system, related to errors in code generation, allows a hacker to execute arbitrary code.

The vulnerability of the Moodle administration system is related to errors in code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted request...