Lucene search
+L

42 matches found

SUSE CVE
SUSE CVE
•added 2026/07/28 5:07 p.m.•15 views

SUSE CVE-2026-65704

FFmpeg through 8.1.2 contains an out-of-bounds write vulnerability that allows attackers to cause heap corruption by supplying a crafted ffconcat file processed with the -safe 0 flag. The TY demuxer's demuxaudio function decrements packet size without bounds checking, producing a negative size...

6.1CVSS7.9AI score0.00178EPSS
SaveExploits0References5
OSV
OSV
•added 2026/07/23 8:17 p.m.•17 views

UBUNTU-CVE-2026-65704

FFmpeg through 8.1.2 contains an out-of-bounds write vulnerability that allows attackers to cause heap corruption by supplying a crafted ffconcat file processed with the -safe 0 flag. The TY demuxer's demuxaudio function decrements packet size without bounds checking, producing a negative size...

7.8CVSS7.9AI score0.00178EPSS
SaveExploits0References7
CVE
CVE
•added 2026/07/23 6:55 p.m.•65 views

CVE-2026-65704

CVE-2026-65704 affects FFmpeg up to version 8.1.2, where the TY demuxer’s demux_audio() decrements packet size without bounds checking, producing a negative size that, when passed to memcpy in shorten_decode_frame(), wraps to near SIZE_MAX and causes heap corruption from reads beyond the source a...

7.8CVSS7.9AI score0.00178EPSS
SaveExploits0References3Affected Software1
attackerkb
attackerkb
•added 2026/07/23 6:55 p.m.•18 views

CVE-2026-65704

FFmpeg through 8.1.2 contains an out-of-bounds write vulnerability that allows attackers to cause heap corruption by supplying a crafted ffconcat file processed with the -safe 0 flag. The TY demuxer's demuxaudio function decrements packet size without bounds checking, producing a negative size...

7.8CVSS7.9AI score0.00178EPSS
SaveExploits0References4
OSV
OSV
•added 2026/07/23 6:55 p.m.•27 views

CVE-2026-65704 FFmpeg 8.1.2 Out-of-Bounds Write via TY Demuxer and Shorten Decoder

FFmpeg through 8.1.2 contains an out-of-bounds write vulnerability that allows attackers to cause heap corruption by supplying a crafted ffconcat file processed with the -safe 0 flag. The TY demuxer's demuxaudio function decrements packet size without bounds checking, producing a negative size...

7.3CVSS5.5AI score
SaveExploits0References6
Cvelist
Cvelist
•added 2026/07/23 6:55 p.m.•61 views

CVE-2026-65704 FFmpeg 8.1.2 Out-of-Bounds Write via TY Demuxer and Shorten Decoder

FFmpeg through 8.1.2 contains an out-of-bounds write vulnerability that allows attackers to cause heap corruption by supplying a crafted ffconcat file processed with the -safe 0 flag. The TY demuxer's demuxaudio function decrements packet size without bounds checking, producing a negative size...

7.8CVSS0.00178EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/07/23 6:55 p.m.•17 views

CVE-2026-65704 FFmpeg 8.1.2 Out-of-Bounds Write via TY Demuxer and Shorten Decoder

FFmpeg through 8.1.2 contains an out-of-bounds write vulnerability that allows attackers to cause heap corruption by supplying a crafted ffconcat file processed with the -safe 0 flag. The TY demuxer's demuxaudio function decrements packet size without bounds checking, producing a negative size...

7.8CVSS7.9AI score0.00178EPSS
SaveExploits0References3
Snyk
Snyk
•added 2026/07/04 3:15 p.m.•29 views

Protection Mechanism Failure

Overview fickling is an A static analyzer and interpreter for Python pickle data Affected versions of this package are vulnerable to Protection Mechanism Failure due to shared mutable state in the shortencode function. An attacker can execute arbitrary code by providing a malicious pickle payload...

9.8CVSS6.3AI score0.00564EPSS
SaveExploits1References2
PyPA
PyPA
•added 2026/07/04 2:16 p.m.•22 views

PYSEC-2026-2150

In Trail of Bits fickling versions up to and including 0.1.11, the UnsafeImportsML analysis pass unconditionally calls AnalysisContext.shortencodenode on every import node it inspects, regardless of whether the import is flagged as unsafe. This call registers the shortened code representation in...

9.8CVSS6.1AI score0.00564EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2026/07/04 2:16 p.m.•21 views

PYSEC-2026-2150

In Trail of Bits fickling versions up to and including 0.1.11, the UnsafeImportsML analysis pass unconditionally calls AnalysisContext.shortencodenode on every import node it inspects, regardless of whether the import is flagged as unsafe. This call registers the shortened code representation in...

9.8CVSS6.1AI score0.00564EPSS
SaveExploits1References4
OSV
OSV
•added 2026/07/04 1:31 p.m.•15 views

CVE-2026-14535 Fickling MLAllowlist analysis pass rendered inoperative by shared mutable state in AnalysisContext.shorten_code()

In Trail of Bits fickling versions up to and including 0.1.11, the UnsafeImportsML analysis pass unconditionally calls AnalysisContext.shortencodenode on every import node it inspects, regardless of whether the import is flagged as unsafe. This call registers the shortened code representation in...

8.8CVSS5.9AI score
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2025/12/15 12:00 a.m.•14 views

PT-2025-51199

The URL Shortify WordPress plugin before 1.11.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.1AI score0.00173EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•9 views

EUVD-2012-0883

Malware in sbrugna...

6.8CVSS6AI score0.04344EPSS
SaveExploits0References11
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•9 views

EUVD-2012-4421

Malware in sbrugna...

2.1CVSS6.4AI score0.01041EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
•added 2025/05/22 12:03 p.m.•14 views

CVE-2012-0858

The Shorten codec shorten.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary...

6.8CVSS7.9AI score0.04344EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/02 12:00 a.m.•0 views

CVE-2023-47225: Missing Authorization

Missing Authorization vulnerability in KaizenCoders Short URL shorten-url allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Short URL: from n/a through = 1.6.8...

5.4CVSS5.9AI score0.0035EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/08/16 12:00 a.m.•11 views

PT-2024-40556 · Git +1 · Pcapplusplus

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow crash. Technical details about the crash include the pcpp::Layer::shortenLayer,...

6.9AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/03/05 12:00 a.m.•14 views

PT-2024-13264 · Unknown · Ailux Imx6 Bundle

Name of the Vulnerable Software and Affected Versions: AiLux imx6 bundle versions prior to imx6 1.0.7-2 Description: A CWE-613 “Insufficient Session Expiration” issue in the web application exists due to the session cookie sessionid lasting two weeks, which facilitates session hijacking attacks...

9.8CVSS7.1AI score0.00373EPSS
SaveExploits0References5
Fedora
Fedora
•added 2022/07/04 1:35 a.m.•27 views

[SECURITY] Fedora 36 Update: powerline-go-1.21.0-4.fc36

A Powerline like prompt for Bash, ZSH and Fish. - Shows some important details about the git/hg branch - Changes color if the last command exited with a failure code - If you're too deep into a directory tree, shortens the displayed path with an ellipsis - Shows the current Python virtualenv...

9.3CVSS8.3AI score0.0995EPSS
SaveExploits4
OSV
OSV
•added 2022/06/19 6:15 a.m.•13 views

UBUNTU-CVE-2014-125022

A vulnerability was found in FFmpeg 2.0. It has been classified as problematic. Affected is the function shortendecodeframe of the component Bitstream Buffer. The manipulation leads to memory corruption. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this...

5.5CVSS4.8AI score0.00678EPSS
SaveExploits0References4
Rows per page
Query Builder