Lucene search
+L

50 matches found

OSV
OSV
added 2026/05/08 2:16 a.m.22 views

UBUNTU-CVE-2026-8124

A security vulnerability has been detected in GPAC up to 26.02.0. This affects the function sidxboxread of the file src/isomedia/boxcodebase.c. The manipulation leads to allocation of resources. The attack must be carried out locally. The exploit has been disclosed publicly and may be used. The...

5.5CVSS5.2AI score0.00159EPSS
Exploits1References8
Debian CVE
Debian CVE
added 2026/05/08 1:15 a.m.12 views

CVE-2026-8124

A security vulnerability has been detected in GPAC up to 26.02.0. This affects the function sidxboxread of the file src/isomedia/boxcodebase.c. The manipulation leads to allocation of resources. The attack must be carried out locally. The exploit has been disclosed publicly and may be used. The...

5.5CVSS5.3AI score0.00159EPSS
Exploits1
Vulnrichment
Vulnrichment
added 2026/05/08 1:15 a.m.7 views

CVE-2026-8124 GPAC box_code_base.c sidx_box_read allocation of resources

A security vulnerability has been detected in GPAC up to 26.02.0. This affects the function sidxboxread of the file src/isomedia/boxcodebase.c. The manipulation leads to allocation of resources. The attack must be carried out locally. The exploit has been disclosed publicly and may be used. The...

4.8CVSS5.3AI score0.00159EPSS
Exploits1References6
ATTACKERKB
ATTACKERKB
added 2026/05/08 1:15 a.m.8 views

CVE-2026-8124

A security vulnerability has been detected in GPAC up to 26.02.0. This affects the function sidxboxread of the file src/isomedia/boxcodebase.c. The manipulation leads to allocation of resources. The attack must be carried out locally. The exploit has been disclosed publicly and may be used. The...

4.8CVSS5.3AI score0.00159EPSS
Exploits1References6
Cvelist
Cvelist
added 2026/05/08 1:15 a.m.36 views

CVE-2026-8124 GPAC box_code_base.c sidx_box_read allocation of resources

A security vulnerability has been detected in GPAC up to 26.02.0. This affects the function sidxboxread of the file src/isomedia/boxcodebase.c. The manipulation leads to allocation of resources. The attack must be carried out locally. The exploit has been disclosed publicly and may be used. The...

4.8CVSS0.00159EPSS
Exploits1References6
OSV
OSV
added 2026/05/08 1:15 a.m.5 views

CVE-2026-8124 GPAC box_code_base.c sidx_box_read allocation of resources

A security vulnerability has been detected in GPAC up to 26.02.0. This affects the function sidxboxread of the file src/isomedia/boxcodebase.c. The manipulation leads to allocation of resources. The attack must be carried out locally. The exploit has been disclosed publicly and may be used. The...

4.8CVSS5.2AI score0.00159EPSS
Exploits1References8
Positive Technologies
Positive Technologies
added 2026/05/08 12:0 a.m.19 views

PT-2026-38628

Name of the Vulnerable Software and Affected Versions GPAC versions prior to 26.02.0 Description A flaw in the sidx box read function within the src/isomedia/box code base.c file allows for the allocation of resources through manipulation. This issue requires local access to be exploited...

5.5CVSS5.8AI score0.00159EPSS
Exploits1References17
CNNVD
CNNVD
added 2026/05/08 12:0 a.m.15 views

GPAC 资源管理错误漏洞

GPAC is an open-source multimedia framework developed by GPAC. Versions of GPAC prior to 26.02.0 contain a resource management vulnerability. This vulnerability arises from the function sidxboxread in the file src/isomedia/boxcodebase.c, which involves resource allocation and requires a local...

5.5CVSS5.8AI score0.00159EPSS
Exploits1References1
NVD
NVD
added 2026/04/02 1:16 p.m.6 views

CVE-2026-5328

A weakness has been identified in shsuishang modulithshop up to 829bac71f507e84684c782b9b062b8bf3b5585d6. The impacted element is the function listItem of the file src/main/java/com/suisung/shopsuite/pt/service/impl/ProductIndexServiceImpl.java of the component ProductItemDao Interface. Executing...

6.5CVSS0.00204EPSS
Exploits0References7
CNNVD
CNNVD
added 2026/04/02 12:0 a.m.9 views

ModulithShop SQL注入漏洞

ModulithShop is an online shopping system developed by Shopsuite’s individual developers. ModulithShop has a SQL injection vulnerability. This vulnerability stems from improper handling of parameters sidx/sort in the function listItem in the file...

6.5CVSS6.6AI score0.00204EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2026/04/02 12:0 a.m.6 views

PT-2026-29726

A weakness has been identified in shsuishang modulithshop up to 829bac71f507e84684c782b9b062b8bf3b5585d6. The impacted element is the function listItem of the file src/main/java/com/suisung/shopsuite/pt/service/impl/ProductIndexServiceImpl.java of the component ProductItemDao Interface. Executing...

6.5CVSS5.7AI score0.00204EPSS
Exploits0References8
EUVD
EUVD
added 2026/01/31 12:30 a.m.7 views

EUVD-2020-30928

Navigate CMS 2.8.7 contains an authenticated SQL injection vulnerability that allows attackers to leak database information by manipulating the 'sidx' parameter in comments. Attackers can exploit the vulnerability to extract user activation keys by using time-based blind SQL injection techniques,...

7.1CVSS5.9AI score0.00338EPSS
Exploits1References5
OSV
OSV
added 2026/01/30 11:16 p.m.5 views

CVE-2020-37053

Navigate CMS 2.8.7 contains an authenticated SQL injection vulnerability that allows attackers to leak database information by manipulating the 'sidx' parameter in comments. Attackers can exploit the vulnerability to extract user activation keys by using time-based blind SQL injection techniques,...

6.5CVSS5.8AI score0.00338EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2026/01/30 10:7 p.m.2 views

CVE-2020-37053 Navigate CMS 2.8.7 - ''sidx' SQL Injection

Navigate CMS 2.8.7 contains an authenticated SQL injection vulnerability that allows attackers to leak database information by manipulating the 'sidx' parameter in comments. Attackers can exploit the vulnerability to extract user activation keys by using time-based blind SQL injection techniques,...

7.1CVSS5.7AI score0.00338EPSS
Exploits1References4
CVE
CVE
added 2026/01/30 10:7 p.m.16 views

CVE-2020-37053

CVE-2020-37053 affects Navigate CMS 2.8.7, where an authenticated user can exploit a vulnerability in the sidx parameter within comments to perform time-based blind SQL injection. This allows leakage of database information and could enable extraction of user activation keys, potentially enabling...

7.1CVSS5.9AI score0.00338EPSS
Exploits1References4Affected Software1
CNNVD
CNNVD
added 2026/01/30 12:0 a.m.11 views

Naviwebs Navigate CMS SQL Injection Vulnerability

Naviwebs Navigate CMS is an open-source content management system developed by Naviwebs Inc. In the version 2.8.7 of Naviwebs Navigate CMS, there is a SQL injection vulnerability. This vulnerability stems from the sidx parameter in the comments, which allows for SQL injections, potentially leadin...

7.1CVSS5.9AI score0.00338EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2026/01/30 12:0 a.m.10 views

PT-2026-5490

Name of the Vulnerable Software and Affected Versions Navigate CMS version 2.8.7 Description Navigate CMS 2.8.7 contains an authenticated SQL injection issue that allows attackers to obtain database information by manipulating the sidx parameter within comments. Attackers can exploit this to...

7.1CVSS5.5AI score0.00338EPSS
Exploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2015-3468

Malware in sbrugna...

8.8CVSS8.6AI score0.01566EPSS
Exploits2References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.2 views

Malicious code in node-youtube-dash-sidx (npm)

The package node-youtube-dash-sidx was found to contain malicious code...

7AI score
Exploits0
OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-27665 Malicious code in node-youtube-dash-sidx (npm)

The package node-youtube-dash-sidx was found to contain malicious code...

7.2AI score
Exploits0
Rows per page
Query Builder