The vulnerability of the decoder in the SIX functional decoding system for MPEG-4 multimedia platform GPAC allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the SSIX decoder for MPEG-4 multimedia platform GPAC is related to incorrect checking of the result of an arithmetic operation. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from the lack of protective measures for website structures, allowing attackers to compromise data integrity.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the absence of markdown filtering. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

The vulnerability of the Clipboard editing plugin for the CKEditor WYSIWYG editor allows a hacker to compromise data integrity.

The vulnerability of the Clipboard editing plugin of the CKEditor editor is related to improper handling of code generation. Exploiting this vulnerability allows an attacker to compromise data integrity remotely...

The vulnerability of the Fraction function in the libheif/box.cc component of the HEIF and AVIF encoding/decoding library allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Fraction function in the libheif/box.cc component of the HEIF and AVIF encoding/decoding library allows attackers to exploit it remotely. This enables them to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the IsNextToken function in the src/base/PdfToenizer.cpp component of the PDF processing software PoDoFo allows a malicious actor to access confidential data.

The vulnerability of the IsNextToken function in the src/base/PdfToenizer.cpp component of the PDF processing software library is related to the disclosure of information in the error-prone data area. Exploiting this vulnerability allows an attacker to gain access to confidential data remotely...

The vulnerability of the Gradle plugin and script for the automatic build system Gradle allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Gradle plugin and script in the automatic build system Gradle is related to the lack of measures to sanitize input data. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the Singularity container platform, related to insufficient entropy, allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Singularity container platform is related to insufficient entropy. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in its ability to read data beyond the memory boundaries. This allows attackers to gain unauthorized access to protected information and also cause system failures.

The vulnerability of Adobe After Effects video and dynamic image editing software relates to reading beyond the memory boundaries. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information, as well as cause service failures...

PT-2022-6592 · Pcre2 +8 · Pcre2 +8

Name of the Vulnerable Software and Affected Versions: PCRE2 affected versions not specified Description: The issue is related to an out-of-bounds read vulnerability in the PCRE2 library, specifically in the get recurse data length function of the pcre2 jit compile.c file. This vulnerability...

PT-2022-7557 · Apple +8 · Itunes +14

Name of the Vulnerable Software and Affected Versions: Safari versions prior to 15.4 iTunes versions prior to 12.12.3 for Windows macOS versions prior to Monterey 12.3 watchOS versions prior to 8.5 iOS versions prior to 15.4 iPadOS versions prior to 15.4 tvOS versions prior to 15.4 WebKitGTK and...

CVE-2022-26143

The TP-240 aka tp240dvr component in Mitel MiCollab before 9.4 SP1 FP1 and MiVoice Business Express through 8.1 allows remote attackers to obtain sensitive information and cause a denial of service performance degradation and excessive outbound traffic. This was exploited in the wild in February...

Mitel Networks MiCollab和Mitel Networks MiVoice Business Express 访问控制错误漏洞

Mitel Networks MiCollab and Mitel Networks MiVoice Business Express are both products of Mitel Networks, Inc. of Canada.Mitel Networks MiCollab is a voice, video, messaging, audio conferencing, and team collaboration for employees. Mitel Networks MiVoice Business Express is a real-time...

CVE-2022-24055

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Sante DICOM Viewer Pro 11.8.7.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2022-24055

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Sante DICOM Viewer Pro 11.8.7.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46654

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

CVE-2021-46630

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

CVE-2021-46620

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

CVE-2021-46624

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

CVE-2021-46623

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

CVE-2021-46589

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...