Freeware Advanced Audio Decoder 2 Buffer Overflow Vulnerability (CNVD-2020-22386)

Freeware Advanced Audio Decoder 2 FAAD2 is a free advanced audio encoder. A buffer overflow vulnerability exists in Freeware Advanced Audio Decoder 2. The vulnerability originates when a networked system or product performs an operation in memory without properly validating data boundaries,...

ImageMagick Resource Management Error Vulnerability (CNVD-2019-29205)

ImageMagick is the United States ImageMagick Studio, Inc. of a set of open source image processing software. A resource management error vulnerability exists in the coders/mat.c file in ImageMagick version 7.0.8-43 Q16. The vulnerability arises from mismanagement of system resources e.g., memory,...

Mooltipass Mini Information Disclosure Vulnerability

Mooltipass Mini is a password management device. An information disclosure vulnerability exists in Mooltipass Mini. The vulnerability arises from errors such as configuration during operation of a networked system or product. An unauthorized attacker could exploit the vulnerability to obtain...

Google Android System Information Disclosure Vulnerability

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. System is one of the system components. An information disclosure vulnerability exists in System in Android. The vulnerability arises from errors in configuration and other errors in th...

Schism Tracker Buffer Overflow Vulnerability

Schism Tracker is an open source music composition tool. A buffer overflow vulnerability exists in Schism Tracker 20190722 and prior versions. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resulting in...

Wind River Systems VxWorks Competitive Conditions Issue Vulnerability

Wind River Systems VxWorks is an embedded real-time operating system RTOS from Wind River Systems. A competitive conditions issue vulnerability exists in Wind River Systems VxWorks. The vulnerability arises from improper handling of concurrent access when concurrent code requires mutually exclusi...

Libav Number Error Vulnerability

Libav is Libav team's set of cross-platform audio and video can be recorded, converted solution, which includes a libavcodec encoder. A numeric error vulnerability exists in Libav. The vulnerability stems from a networked system or product that does not properly calculate or convert the resulting...

Wind River Systems VxWorks Code Issue Vulnerability

Wind River Systems VxWorks is an embedded real-time operating system RTOS from Wind River Systems. A code issue vulnerability exists in Wind River Systems VxWorks. The vulnerability arises from an improper design or implementation during code development for a networked system or product. No...

DHS Warning: Small Aircraft are Ripe for Hacking

The Department of Homeland Security issued an alert Tuesday warning that small aircraft are vulnerable to hackers that can gain physical access to a plane. It warned that a hacker can easily manipulate aircraft telemetry data, which can result in loss of control of the airplane. The bulletin was...

Socusoft Photo 2 Video Converter Buffer Overflow Vulnerability

Socusoft Photo 2 Video Converter is a picture to video converter. Socusoft Photo 2 Video Converter version 8.0.0 has a buffer overflow vulnerability in the pdmlog.dll inventory. The vulnerability stems from a networked system or product performing operations in memory without properly validating...

libdwarf Numeric Error Vulnerability

libdwarf is a library and command line tool for reading and writing DWARF2 standardized debug data format. A numeric error vulnerability exists in libdwarf. The vulnerability arises from a networked system or product that does not properly compute or convert resulting numbers. An attacker could...

RANGER Studio Directus Information Disclosure Vulnerability

RANGER Studio Directus is a set of open source headless CMS and API for managing custom databases from RANGER Studio, U.S.A. The Directus API is one of the components that can add a RESTful API layer to new or existing SQL databases. An information disclosure vulnerability exists in RANGER Studio...

Multiple Qualcomm Products Code Issue Vulnerabilities

Qualcomm MDM9607 and others are products of Qualcomm Incorporated.The MDM9607 is a central processing unit CPU product.The MDM9640 is a central processing unit CPU product.The SDX24 is a modem.The MDM9640 is a central processing unit CPU product.The MDM9640 is a central processing unit CPU...

FFmpeg Code Problem Vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A code issue vulnerability exists in FFmpeg version 4.1.3. The vulnerability arises from a design or implementation issue during code development for a networked system or product. No detai...

Linux kernel information disclosure vulnerability (CNVD-2019-23989)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. An information disclosure vulnerability exists in versions of Linux kernel prior to 5.1.7. The vulnerability arises from errors in configuration and other errors in th...

DOSBox Buffer Overflow Vulnerability

DOSBox is a DOS emulator based on the SDL library. A buffer error vulnerability exists in DOSBox version 0.74-2, which originates when a networked system or product performs an operation in memory without properly validating the data boundaries, resulting in incorrect read and write operations...

Nortek Security & Control Linear eMerge E3-Series Trust Management Issue Vulnerability

The Nortek Security & Control Linear eMerge E3-Series is an access control device from Nortek Security & Control USA. A trust management issue vulnerability exists in the Nortek Security & Control Linear eMerge E3-Series. An attacker could exploit the vulnerability to obtain a default password an...

Prima FlexAir Default Credentials Vulnerability

Prima Systems FlexAir is an access control system from Prima Systems in Slovenia. A default credentials vulnerability exists in Prima FlexAir version 2.3.38 and earlier. An attacker can exploit the vulnerability to obtain the default password and identify a networked target system...

GD Graphics Library Double Release Vulnerability

GD Graphics Library libgd or libgd2 is an open source library for dynamically creating images. It supports the creation of charts, graphs, thumbnails and more. A security vulnerability exists in the 'gdImageBmpPt' parameter in GD Graphics Library version 2.2.5 and earlier. The vulnerability...

SHEKAR Technology Endoscope Buffer Overflow Vulnerability (CNVD-2019-18876)

SHEKAR Technology Endoscope is a portable endoscopic device from SHEKAR Technology, China. A buffer overflow vulnerability exists in SHEKAR Technology Endoscope. The vulnerability originates when a networked system or product performs an operation on memory without properly validating data...