Lucene search
K

7 matches found

Snyk
Snyk
added 2026/03/03 12:26 a.m.1 views

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the getData function of the preview component when processing image metadata with an extra command line argument. An attacker can cause a crash or potentially read out-of-bounds memory by supplying specially crafte...

7.5CVSS5.8AI score0.00061EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/01/30 12:0 a.m.3 views

PT-2025-4079

Name of the Vulnerable Software and Affected Versions Axiomatic Bento4 versions up to 1.6.0-641 Description The issue affects the function AP4 DataBuffer::GetData in the library Ap4DataBuffer.h, leading to a heap-based buffer overflow. This can be exploited remotely, with a rather high complexity...

6.3CVSS5.5AI score0.00102EPSS
Exploits1References11
Vulnrichment
Vulnrichment
added 2024/01/08 6:31 a.m.1 views

CVE-2024-0301 fhs-opensource iparking PayTempOrderAction.java getData sql injection

A vulnerability classified as critical was found in fhs-opensource iparking 1.5.22.RELEASE. This vulnerability affects the function getData of the file src/main/java/com/xhb/pay/action/PayTempOrderAction.java. The manipulation leads to sql injection. The attack can be initiated remotely. The...

6.5CVSS7.6AI score0.00123EPSS
Exploits1References3
NVD
NVD
added 2021/02/05 2:15 p.m.11 views

CVE-2020-18714

SQL Injection in Rockoa v1.8.7 allows remote attackers to gain privileges due to loose filtering of parameters in wordModel.php's getdata function...

9.8CVSS0.00513EPSS
Exploits1References1
Cvelist
Cvelist
added 2021/02/04 11:6 p.m.8 views

CVE-2020-18714

SQL Injection in Rockoa v1.8.7 allows remote attackers to gain privileges due to loose filtering of parameters in wordModel.php's getdata function...

10AI score0.00513EPSS
Exploits1References1
OSV
OSV
added 2018/05/29 7:29 a.m.3 views

PYSEC-2018-130

Exiv2 0.26 has a heap-based buffer overflow in getData in preview.cpp...

9.8CVSS7.6AI score
Exploits0References5
NVD
NVD
added 2011/12/21 4:2 a.m.16 views

CVE-2011-3660

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors that...

10CVSS7.9AI score0.0394EPSS
Exploits0References36
Rows per page
Query Builder