Lucene search
+L

1466 matches found

Huntr
Huntr
added 2022/04/08 12:20 p.m.19 views

libde265 1.0.8, was discovered to contain a heap-buffer-overflow in put_epel_16_fallback (fallback-motion.cc)

Description libde265 1.0.8, was discovered to contain a heap-buffer-overflow in putepel16fallback fallback-motion.cc ENV - Version : 1.0.8 - Commit : 45904e5667c5bf59c67fcdc586dfba110832894c - OS : Ubuntu 18.04 - Configure : cmake -DCMAKEBUILDTYPE=Debug -DCMAKECXXCOMPILER=clang++-10...

7.5AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:0 a.m.10 views

The vulnerability of the put_qpel_0_0_fallback_16 function in the h.265 Libde265 implementation allows a attacker to trigger a service failure.

The vulnerability of the putqpel00fallback16 function in the h.265 Libde265 implementation is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...

7.8CVSS7.1AI score0.01057EPSS
SaveExploits1References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/04/01 12:0 a.m.13 views

The vulnerability of the `put_weighted_bipred_16_fallback` function in the h.265 Libde265 implementation allows a perpetrator to trigger a service failure.

The vulnerability of the putweightedbipred16fallback function in the h.265 Libde265 implementation is related to writing outside the buffer boundaries. Exploiting this vulnerability allows a malicious actor to trigger a service failure using a specially created file...

7.1CVSS7AI score0.01438EPSS
SaveExploits1References8Affected Software4
OSV
OSV
added 2022/02/24 7:15 p.m.6 views

CVE-2022-0653

The Profile Builder – User Profile & User Registration Forms WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the siteurl parameter found in the /assets/misc/fallback-page.php file which allows attackers to inject arbitrary web scripts onto a...

6.1CVSS5.8AI score0.02703EPSS
SaveExploits3References2
wpexploit
wpexploit
added 2022/02/17 12:0 a.m.98 views

Profile Builder < 3.6.2 - Reflected Cross-Site Scripting

The plugin does not properly sanitise and escape the siteurl parameter before outputting it back in an href attribute, leading to a Reflected Cross-Site Scripting issue...

6.1CVSS0.5AI score0.02703EPSS
SaveExploits3References1
Positive Technologies
Positive Technologies
added 2022/02/11 12:0 a.m.6 views

PT-2022-7270 · Libde265 +3 · Libde265 +3

Name of the Vulnerable Software and Affected Versions: Libde265 version 1.0.8 Description: The issue is related to a heap-buffer-overflow vulnerability via the put epel hv fallback function in fallback-motion.cc. This allows attackers to cause a Denial of Service DoS via a crafted video file. The...

9.8CVSS6.5AI score0.0202EPSS
SaveExploits46References199
Positive Technologies
Positive Technologies
added 2022/02/11 12:0 a.m.4 views

PT-2022-7271 · Libde265 +3 · Libde265 +3

Name of the Vulnerable Software and Affected Versions: Libde265 version 1.0.8 Description: The issue is related to a heap-buffer-overflow vulnerability in the put qpel 0 0 fallback 16 function, located in fallback-motion.cc, which is part of the Libde265 video codec implementation. This...

9.8CVSS6.5AI score0.0202EPSS
SaveExploits46References200
Code423n4
Code423n4
added 2022/01/19 12:0 a.m.7 views

L2Migrator calls wrong function on bondingManager

Handle harleythedog Vulnerability details Impact In L2Migrator, the function bondFor calls the function "bondForWithHint" on the bondingManager. This function does not exist anywhere in the protocol: the correct function name is simply "bondWithHint". This is a run-time issue the contracts will...

6.8AI score
SaveExploits0
OSV
OSV
added 2022/01/12 10:44 p.m.63 views

GHSA-7W54-GP8X-F33M Potential exposure of tokens to an Unauthorized Actor

Impact When using this library as a way to programmatically communicate with Replit in a standalone fashion, if there are multiple failed attempts to contact Replit through a WebSocket, the library will attempt to communicate using a fallback poll-based proxy. The URL of the proxy has changed, so...

6.5CVSS7AI score0.00972EPSS
SaveExploits0References4
NVD
NVD
added 2022/01/11 3:15 p.m.37 views

CVE-2022-21671

@replit/crosis is a JavaScript client that speaks Replit's container protocol. A vulnerability that involves exposure of sensitive information exists in versions prior to 7.3.1. When using this library as a way to programmatically communicate with Replit in a standalone fashion, if there are...

8.1CVSS0.00972EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2022/01/11 3:5 p.m.6 views

CVE-2022-21671 Potential exposure of Replit tokens to an Unauthorized Actor in @replit/crosis

@replit/crosis is a JavaScript client that speaks Replit's container protocol. A vulnerability that involves exposure of sensitive information exists in versions prior to 7.3.1. When using this library as a way to programmatically communicate with Replit in a standalone fashion, if there are...

8.1CVSS6.6AI score0.00972EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/01/11 12:0 a.m.11 views

PT-2022-15025 · Replit · @Replit/Crosis

Name of the Vulnerable Software and Affected Versions: @replit/crosis versions prior to 7.3.1 Description: A vulnerability exists that involves exposure of sensitive information. When using the library to communicate with Replit in a standalone fashion, if there are multiple failed attempts to...

8.1CVSS7AI score0.00972EPSS
SaveExploits0References7
NVD
NVD
added 2022/01/10 11:15 p.m.25 views

CVE-2021-36410

A stack-buffer-overflow exists in libde265 v1.0.8 via fallback-motion.cc in function putepelhvfallback when running program dec265...

5.5CVSS0.00859EPSS
SaveExploits1References3
OSV
OSV
added 2022/01/10 11:15 p.m.3 views

DEBIAN-CVE-2021-36410

A stack-buffer-overflow exists in libde265 v1.0.8 via fallback-motion.cc in function putepelhvfallback when running program dec265...

5.5CVSS6.2AI score0.00859EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/01/10 11:15 p.m.6 views

CVE-2021-36410

A stack-buffer-overflow exists in libde265 v1.0.8 via fallback-motion.cc in function putepelhvfallback when running program dec265...

5.5CVSS6.7AI score0.00859EPSS
SaveExploits1References4
OSV
OSV
added 2022/01/10 11:15 p.m.40 views

CVE-2021-36410

A stack-buffer-overflow exists in libde265 v1.0.8 via fallback-motion.cc in function putepelhvfallback when running program dec265...

5.5CVSS3.9AI score
SaveExploits0References3
OSV
OSV
added 2022/01/10 11:15 p.m.4 views

ALPINE-CVE-2021-36410

A stack-buffer-overflow exists in libde265 v1.0.8 via fallback-motion.cc in function putepelhvfallback when running program dec265...

5.5CVSS7.5AI score0.00859EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2022/01/10 11:15 p.m.48 views

CVE-2021-36410

A stack-buffer-overflow exists in libde265 v1.0.8 via fallback-motion.cc in function putepelhvfallback when running program dec265...

5.5CVSS6.8AI score0.00859EPSS
SaveExploits1References3
Prion
Prion
added 2022/01/10 11:15 p.m.29 views

Stack overflow

A stack-buffer-overflow exists in libde265 v1.0.8 via fallback-motion.cc in function putepelhvfallback when running program dec265...

4.3CVSS5.6AI score0.00859EPSS
SaveExploits1References3Affected Software2
OSV
OSV
added 2022/01/10 11:15 p.m.8 views

UBUNTU-CVE-2021-36410

A stack-buffer-overflow exists in libde265 v1.0.8 via fallback-motion.cc in function putepelhvfallback when running program dec265...

5.5CVSS7.1AI score0.00859EPSS
SaveExploits1References4
Rows per page
Query Builder