Lucene search
+L

603 matches found

CVE
CVE
added 2019/08/14 8:30 p.m.79 views

CVE-2019-15058

CVE-2019-15058 affects stb_image.h (stb_image loader) version 2.23. A heap-based buffer over-read in stbi__tga_load leads to Information Disclosure or Denial of Service. Documented impact includes possibly exposing data or causing service disruption. Exploitation details are not provided in the s...

9.1CVSS9AI score0.02796EPSS
SaveExploits1References6Affected Software1
Debian CVE
Debian CVE
added 2019/08/14 8:30 p.m.47 views

CVE-2019-15058

stbimage.h aka the stb image loader 2.23 has a heap-based buffer over-read in stbitgaload, leading to Information Disclosure or Denial of Service...

9.1CVSS9.2AI score0.02796EPSS
SaveExploits1
myhack58
myhack58
added 2019/06/13 12:00 a.m.277 views

We can control you see the content: mainstream IPTV remote code execution vulnerability analysis-vulnerability warning-the black bar safety net

About a year ago, Check Point Research Team found that the Ukrainian TV streaming platform, there is a serious vulnerability, once exploited, could enable service providers face a serious risk. Specifically, an attacker can get the entire customer database of personal information and financial...

SaveExploits0
OSV
OSV
added 2018/11/30 3:29 a.m.7 views

UBUNTU-CVE-2018-19756

There is a heap-based buffer over-read at stbimage.h function: stbitgaload in libsixel 1.8.2 that will cause a denial of service...

5.5CVSS7.3AI score0.00684EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2018/11/30 12:00 a.m.14 views

PT-2018-15074 · Libsixel +1 · Libsixel +1

Name of the Vulnerable Software and Affected Versions: libsixel version 1.8.2 Description: The issue is a heap-based buffer over-read located in the stb image write.h file, specifically within the stbi write png to mem function. This will cause a denial of service. Recommendations: For libsixel...

9.8CVSS5.8AI score0.01551EPSS
SaveExploits21References60
CNVD
CNVD
added 2018/11/30 12:00 a.m.7 views

libsixel buffer overflow vulnerability (CNVD-2019-00646)

libsixel is a package that provides encoding/decoding implementations for DEC SIXEL graphics and other converter programs. A heap buffer overflow vulnerability exists in the stbimagewrite.h file the 'stbiwritepngtomem' function in libsixel version 1.8.2, which can be exploited by an attacker to...

5.5CVSS6.5AI score0.00684EPSS
SaveExploits1References1
OSV
OSV
added 2018/09/12 11:29 p.m.10 views

UBUNTU-CVE-2018-16981

stb stbimage.h 2.19, as used in catimg, Emscripten, and other products, has a heap-based buffer overflow in the stbioutgifcode function...

8.8CVSS6.1AI score0.01592EPSS
SaveExploits1References4
OSV
OSV
added 2018/09/12 11:29 p.m.10 views

DEBIAN-CVE-2018-16981

stb stbimage.h 2.19, as used in catimg, Emscripten, and other products, has a heap-based buffer overflow in the stbioutgifcode function...

8.8CVSS7.5AI score0.01592EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2018/09/12 12:00 a.m.11 views

PT-2018-13814

Name of the Vulnerable Software and Affected Versions stb image.h version 2.19 Description The issue is a heap-based buffer overflow in the stbi out gif code function. This problem affects products that use stb image.h, including catimg and Emscripten. Recommendations For stb image.h version 2.19...

8.8CVSS7.4AI score0.0379EPSS
SaveExploits7References55
Positive Technologies
Positive Technologies
added 2018/07/28 12:00 a.m.10 views

PT-2018-3777 · Libsixel +1 · Libsixel +1

Name of the Vulnerable Software and Affected Versions: libsixel versions prior to 1.8.5 Description: The issue is related to an invalid read in the stb image.h component of libsixel, which can be exploited by attackers to cause a denial of service DOS via a crafted PSD file. This can be achieved ...

9.8CVSS5.6AI score0.01551EPSS
SaveExploits21References65
OSV
OSV
added 2018/07/09 9:29 p.m.29 views

UBUNTU-CVE-2018-13794

A heap-based buffer overflow exists in stbibmploadcont in stbimage.h in catimg 2.4.0...

9.8CVSS7.5AI score0.01545EPSS
SaveExploits0References3
CNVD
CNVD
added 2018/07/03 12:00 a.m.14 views

Unspecified vulnerability in jpeg-compressor

jpeg-compressor is an encoder for generating JPEG format files. A security vulnerability exists in the 'bmpload' function of the stbimage.c file in jpeg-compressor version 0.1. A remote attacker can exploit this vulnerability to cause a denial of service heap buffer overflow and application crash...

7.8CVSS7.2AI score0.01573EPSS
SaveExploits1References1
Openbugbounty
Openbugbounty
added 2018/06/14 6:02 a.m.29 views

stb.gov.sg XSS vulnerability

Open Bug Bounty ID: OBB-631892 Description| Value ---|--- Affected Website:| stb.gov.sg Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SaveExploits0
NVD
NVD
added 2018/03/20 3:29 p.m.19 views

CVE-2017-8176

Huawei IPTV STB with earlier than IPTV STB V100R003C01LMYTa6SPC001 versions has an authentication bypass vulnerability. An attacker could exploit this vulnerability to access the serial interface and modify the configuration. Successful exploit could lead to the authentication bypass and view...

7.5CVSS7.6AI score0.00905EPSS
SaveExploits0References2
CVE
CVE
added 2018/03/20 3:00 p.m.63 views

CVE-2017-8176

CVE-2017-8176 pertains to Huawei IPTV STB (earlier than V100R003C01LMYTa6SPC001). The vulnerability is an authentication bypass that could be exploited to access the device’s serial interface and modify configuration, potentially enabling viewing channels for free. Affected component/condition: H...

7.5CVSS7.6AI score0.00905EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2018/03/20 3:00 p.m.24 views

CVE-2017-8176

Huawei IPTV STB with earlier than IPTV STB V100R003C01LMYTa6SPC001 versions has an authentication bypass vulnerability. An attacker could exploit this vulnerability to access the serial interface and modify the configuration. Successful exploit could lead to the authentication bypass and view...

7.7AI score0.00905EPSS
SaveExploits0References2
CNVD
CNVD
added 2018/02/26 12:00 a.m.12 views

Sean Barrett stb_vorbis Buffer Overflow Vulnerability

Sean Barrett stbvorbis is a single-file public domain library based on C++. A buffer overflow vulnerability exists in the entire vorbis decoding path in Sean Barrett stbvorbis 1.12 and earlier. An attacker can exploit this vulnerability to corrupt memory, cause a denial of service, and execute a...

8.8CVSS7.5AI score0.01838EPSS
SaveExploits0References1
OSV
OSV
added 2018/02/09 11:29 p.m.8 views

UBUNTU-CVE-2018-1000050

Sean Barrett stbvorbis version 1.12 and earlier contains a Buffer Overflow vulnerability in All vorbis decoding paths. that can result in memory corruption, denial of service, comprised execution of host program. This attack appear to be exploitable via Victim must open a specially crafted Ogg...

8.8CVSS7.4AI score0.01838EPSS
SaveExploits0References4
Prion
Prion
added 2017/09/07 9:29 p.m.20 views

Design/Logic Flaw

A vulnerability in the HTTP remote procedure call RPC service of set-top box STB receivers manufactured by Cisco for Yes could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability exists because the firmware of an affected...

7.8CVSS7.5AI score0.01738EPSS
SaveExploits0References2
CVE
CVE
added 2017/09/07 9:00 p.m.64 views

CVE-2017-6631

The CVE-2017-6631 entry concerns Cisco YesMaxTotal, YesMax HD, and YesQuattro set-top box (STB) devices. The vulnerability is in the HTTP RPC service where the firmware fails to handle certain XML values on a local-subnet interface, allowing an unauthenticated, remote attacker to trigger a device...

7.8CVSS7.6AI score0.01738EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder