Lucene search
+L

940 matches found

Cvelist
Cvelist
•added 2021/04/19 7:34 p.m.•45 views

CVE-2021-30014

There is a integer overflow in mediatools/avparsers.c in the hevcparseslicesegment function in GPAC from v0.9.0-preview to 1.0.1 which results in a crash...

5.9AI score0.01072EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2021/04/19 12:00 a.m.•19 views

GPAC 输入验证错误漏洞

GPAC is a multimedia framework for rich media and distributed under the LGPL license. An integer overflow vulnerability exists in the hevcparseslicesegment function in mediatools/avparsers.c in GPAC version 1.0.1. An attacker can exploit this vulnerability to cause a program crash...

5.5CVSS5.7AI score0.01072EPSS
SaveExploits1References4
CNVD
CNVD
•added 2021/04/16 12:00 a.m.•15 views

Rust Resource Management Error Vulnerability (CNVD-2021-29836)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A resource management error vulnerability exists in slice-deque crate for Rust 2021-02-19 and earlier versions, which originates from SliceDeque::drainfilter.No detailed vulnerability details are available at th...

7.5CVSS6.7AI score0.01135EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2021/04/14 12:00 a.m.•9 views

PT-2021-12083 · Revel · Revel

Name of the Vulnerable Software and Affected Versions: revel versions prior to 1.0.0 Description: The issue is caused by unsanitized input in the query parser, allowing remote attackers to cause resource exhaustion via memory allocation. An attacker can manipulate the request query sent to an...

7.5CVSS7.2AI score0.01464EPSS
SaveExploits1References15
OSV
OSV
•added 2021/04/01 5:15 a.m.•15 views

CVE-2021-29938

An issue was discovered in the slice-deque crate through 2021-02-19 for Rust. A double drop can occur in SliceDeque::drainfilter upon a panic in a predicate function...

7.5CVSS7.1AI score0.01135EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2021/04/01 5:15 a.m.•10 views

CVE-2021-29938

An issue was discovered in the slice-deque crate through 2021-02-19 for Rust. A double drop can occur in SliceDeque::drainfilter upon a panic in a predicate function...

7.5CVSS7AI score0.01135EPSS
SaveExploits1References2
Prion
Prion
•added 2021/04/01 5:15 a.m.•23 views

Double free

An issue was discovered in the slice-deque crate through 2021-02-19 for Rust. A double drop can occur in SliceDeque::drainfilter upon a panic in a predicate function...

5CVSS7.5AI score0.01135EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2021/04/01 4:23 a.m.•106 views

CVE-2021-29938

CVE-2021-29938 concerns the Rust slice-deque crate. The connected advisories indicate that SliceDeque::drain_filter can drop the last element twice if the predicate panics, due to the implementation mutating the drain-filter iterator index before invoking the predicate. Affected scope is the slic...

7.5CVSS7.4AI score0.01135EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2021/04/01 4:23 a.m.•42 views

CVE-2021-29938

An issue was discovered in the slice-deque crate through 2021-02-19 for Rust. A double drop can occur in SliceDeque::drainfilter upon a panic in a predicate function...

7.7AI score0.01135EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/01 12:00 a.m.•3 views

CVE-2021-29938: Double Free

An issue was discovered in the slice-deque crate through 2021-02-19 for Rust. A double drop can occur in SliceDeque::drainfilter upon a panic in a predicate function...

7.5CVSS5.8AI score0.01135EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/04/01 12:00 a.m.•19 views

Rust 资源管理错误漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A resource management error vulnerability exists in slice-deque crate for Rust 2021-02-19 and earlier versions, which originates from SliceDeque::drainfilter.No detailed vulnerability details are available at th...

7.5CVSS5.5AI score0.01135EPSS
SaveExploits1References2
The Hacker News
The Hacker News
•added 2021/03/26 8:57 a.m.•10 views

New 5G Flaw Exposes Priority Networks to Location Tracking and Other Attacks

New research into 5G architecture has uncovered a security flaw in its network slicing and virtualized network functions that could be exploited to allow data access and denial of service attacks between different network slices on a mobile operator's 5G network. AdaptiveMobile shared its finding...

5.8AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2021/03/26 8:57 a.m.•227 views

New 5G Flaw Exposes Priority Networks to Location Tracking and Other Attacks

New research into 5G architecture has uncovered a security flaw in its network slicing and virtualized network functions that could be exploited to allow data access and denial of service attacks between different network slices on a mobile operator's 5G network. AdaptiveMobile shared its finding...

0.3AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2021/03/11 12:00 a.m.•14 views

The vulnerability in the implementation of the gst_h264_slice_parse_dec_ref_pic_marking function in the gst-plugins-bad plugin for the Gstreamer multimedia framework allows a attacker to execute arbitrary code.

The vulnerability in the implementation of the gsth264sliceparsedecrefpicmarking function in the gst-plugins-bad plugin for the Gstreamer multimedia framework is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow a maliciou...

10CVSS8.6AI score0.02377EPSS
SaveExploits0References8Affected Software5
OSV
OSV
•added 2021/03/10 5:15 p.m.•15 views

CVE-2021-0382

In checkSlicePermission of SliceManagerService.java, there is a possible resource exposure due to an incorrect permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions...

5.5CVSS6.2AI score0.00127EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/03/10 5:15 p.m.•8 views

CVE-2021-0382

In checkSlicePermission of SliceManagerService.java, there is a possible resource exposure due to an incorrect permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions...

5.5CVSS6.1AI score0.00127EPSS
SaveExploits0References2
OSV
OSV
•added 2021/03/10 4:15 p.m.•14 views

CVE-2021-0372

In getMediaOutputSliceAction of RemoteMediaSlice.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

7.8CVSS7.2AI score0.00119EPSS
SaveExploits0References1
OSV
OSV
•added 2021/02/24 4:15 p.m.•26 views

CVE-2021-21617

A cross-site request forgery CSRF vulnerability in Jenkins Configuration Slicing Plugin 1.51 and earlier allows attackers to apply different slice configurations...

8.8CVSS6.7AI score
SaveExploits0References2
attackerkb
attackerkb
•added 2021/02/24 4:15 p.m.•9 views

CVE-2021-21617

A cross-site request forgery CSRF vulnerability in Jenkins Configuration Slicing Plugin 1.51 and earlier allows attackers to apply different slice configurations...

8.8CVSS7.2AI score0.00943EPSS
SaveExploits0References3
Prion
Prion
•added 2021/02/24 4:15 p.m.•26 views

Cross site request forgery (csrf)

A cross-site request forgery CSRF vulnerability in Jenkins Configuration Slicing Plugin 1.51 and earlier allows attackers to apply different slice configurations...

6.8CVSS8.7AI score0.00943EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder