8975 matches found
DEBIAN-CVE-2021-40564
A Segmentation fault caused by null pointer dereference vulnerability eists in Gpac through 1.0.2 via the avcparseslice function in avparsers.c when using mp4box, which causes a denial of service...
CVE-2021-40564
A Segmentation fault caused by null pointer dereference vulnerability eists in Gpac through 1.0.2 via the avcparseslice function in avparsers.c when using mp4box, which causes a denial of service...
DEBIAN-CVE-2021-40565
A Segmentation fault caused by a null pointer dereference vulnerability exists in Gpac through 1.0.1 via the gfavcparsenalu function in avparsers.c when using mp4box, which causes a denial of service...
CVE-2021-40559
A null pointer deference vulnerability exists in gpac through 1.0.1 via the naludmxparsenalavc function in reframenalu, which allows a denail of service...
GPAC 代码问题漏洞
GPAC is an open source multimedia framework. GPAC has a denial of service vulnerability before 1.0.1, an attacker can use the naludmxparsenalavc function in reframenalu to have a null pointer reference, an attacker can use this vulnerability to trigger a denial of service...
PT-2022-36916
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description A heap-buffer-overflow READ 1 crash has been reported. The crash occurs in the md parse and md html functions, specifically in the fuzz-mdhtml.c file. No...
in ionicabizau/parse-url
Description urldomain validation bypass Proof of Concept parse-url not able verify urldomain properly when basic authentication is given .This allow to bypass hostname validation . Lets username is admin and password is password123@ and hostname is 127.0.0.1 . so the url will be...
Integer overflow
buildmodel in xmlparse.c in Expat aka libexpat before 2.4.3 has an integer overflow...
CVE-2022-22823
buildmodel in xmlparse.c in Expat aka libexpat before 2.4.3 has an integer overflow...
PT-2025-54118
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak existed in the uvc gpio parse function within the uvcvideo module. The unit buffer was allocated before checking the Interrupt Request IRQ for privacy GPIO. If an error...
0x-relayer-cat (>=0.0.3, <=0.0.10), @0x-klaytn/asset-swapper (>=4.2.1, <=4.2.2) +724 more potentially affected by CVE-2020-8124 via url-parse (>=0.1.5, <=1.4.4)
url-parse NPM version =0.1.5, =0.0.3, =4.2.1, =2.1.0-beta.4, =5.0.0-beta, =0.1.0-beta.2, =0.0.1, =0.1.1, =0.0.1, =0.1.0, =0.0.0-4, =0.0.1, =1.2.5, =1.5.0, =0.1.0, =0.1.7 and more Source cves: CVE-2020-8124 Source advisory: OSV:GHSA-46C4-8WRP-J99V...
GHSA-46C4-8WRP-J99V Improper Validation and Sanitization in url-parse
Insufficient validation and sanitization of user input exists in url-parse npm package version 1.4.4 and earlier may allow attacker to bypass security checks...
Improper Validation and Sanitization in url-parse
Insufficient validation and sanitization of user input exists in url-parse npm package version 1.4.4 and earlier may allow attacker to bypass security checks...
PT-2022-5913
Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.16-rc6 Description An issue was discovered in the Linux kernel where the function kfd parse subtype iolink in the module drivers/gpu/drm/amd/amdkfd/kfd crat.c lacks a check of the return value of the function...
PT-2022-1624
Name of the Vulnerable Software and Affected Versions PHP Everywhere versions 2.0.3 and earlier Description The issue is related to the incorrect management of code generation in the wp ajax parse media shortcode function of the PHP Everywhere plugin, allowing for the execution of PHP code snippe...
PT-2022-36641
Name of the Vulnerable Software and Affected Versions curl affected versions not specified Description The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the Curl sasl decode mech and Curl sasl parse url auth option functions, as well as the pop3...
AZL-7110 CVE-2021-41817 affecting package ruby for versions less than 3.1.2-2
Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS regular expression Denial of Service via a long string. The fixed versions are 3.2.1, 3.1.2, 3.0.2, and 2.0.1...
DEBIAN-CVE-2021-41817
Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS regular expression Denial of Service via a long string. The fixed versions are 3.2.1, 3.1.2, 3.0.2, and 2.0.1...
PT-2021-27984
Name of the Vulnerable Software and Affected Versions curl affected versions not specified Description The issue is related to a heap buffer overflow read. Technical details about the crash include the Curl sasl decode mech and Curl sasl parse url auth option functions, as well as the pop3 parse...