Lucene search
+L

1303 matches found

CNNVD
CNNVD
added 2021/04/29 12:00 a.m.13 views

Texas Instruments TI-RTOS-MCU 输入验证错误漏洞

The Texas Instruments TI-RTOS-MCU is an application system from Texas Instruments, Inc. A real-time operating system RTOS for microcontrollers MCUs. An input validation error vulnerability exists in Texas Instrument TI-RTOS that originates from returning a valid pointer to a small buffer on a ver...

7.8CVSS6.3AI score0.00279EPSS
SaveExploits0References5
OSV
OSV
added 2021/04/21 4:15 p.m.10 views

DEBIAN-CVE-2020-35982

An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is an invalid pointer dereference in the function gfhintertrackfinalize in mediatools/isomhinter.c...

7.8CVSS7.6AI score0.01067EPSS
SaveExploits1References1
OSV
OSV
added 2021/04/19 7:15 p.m.5 views

DEBIAN-CVE-2021-31261

The gfhintertracknew function in GPAC 1.0.1 allows attackers to read memory via a crafted file in the MP4Box command...

5.5CVSS6.5AI score0.0107EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2021/04/19 7:15 p.m.6 views

CVE-2021-31260

The MergeTrack function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

5.5CVSS6.7AI score0.00872EPSS
SaveExploits1References3
OSV
OSV
added 2021/04/19 7:15 p.m.6 views

UBUNTU-CVE-2021-31260

The MergeTrack function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

5.5CVSS7.3AI score0.00872EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2021/04/19 12:00 a.m.15 views

GPAC 代码问题漏洞

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A null pointer dereference vulnerability exists in the MergeTrack function in GPAC version 1.0.1. An attacker can exploit this vulnerability via specially crafted files to cause a denial of service...

5.5CVSS5.7AI score0.00872EPSS
SaveExploits1References3
OSV
OSV
added 2021/04/14 2:15 p.m.10 views

DEBIAN-CVE-2021-28300

NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial-of-Service DoS by uploading a malicious MP4 file...

9.8CVSS9.1AI score0.02082EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2021/04/14 2:15 p.m.36 views

CVE-2021-28300

NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial-of-Service DoS by uploading a malicious MP4 file...

9.8CVSS7.5AI score0.02082EPSS
SaveExploits1References2
OSV
OSV
added 2021/04/14 2:15 p.m.38 views

UBUNTU-CVE-2021-28300

NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial-of-Service DoS by uploading a malicious MP4 file...

9.8CVSS7.6AI score0.02082EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2021/04/14 2:15 p.m.5 views

CVE-2021-28300

NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial-of-Service DoS by uploading a malicious MP4 file...

9.8CVSS8.9AI score0.02082EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2021/04/14 12:00 a.m.11 views

GPAC 代码问题漏洞

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A null pointer dereference vulnerability exists in the MergeTrack function of the isomedia/track.c module in GPAC v0.5.2. An attacker can exploit this vulnerability by uploading a malicious MP4 file to execute...

9.8CVSS6.2AI score0.02082EPSS
SaveExploits1References2
CNVD
CNVD
added 2021/03/31 12:00 a.m.57 views

CloudBees Jenkins OWASP Dependency-Track Plugin Improper Authorization Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . An improper authorization...

6.5CVSS6.3AI score0.01051EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/03/31 12:00 a.m.71 views

CloudBees Jenkins OWASP Dependency-Track Plugin Cross-Site Request Forgery Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . A cross-site request forgery...

8.8CVSS6.4AI score0.00777EPSS
SaveExploits0References1
OSV
OSV
added 2021/03/30 12:16 p.m.21 views

CVE-2021-21632

A missing permission check in Jenkins OWASP Dependency-Track Plugin 3.1.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL, capturing credentials stored in Jenkins...

6.5CVSS6.3AI score
SaveExploits0References2
OSV
OSV
added 2021/03/30 12:16 p.m.28 views

CVE-2021-21633

A cross-site request forgery CSRF vulnerability in Jenkins OWASP Dependency-Track Plugin 3.1.0 and earlier allows attackers to connect to an attacker-specified URL, capturing credentials stored in Jenkins...

8.8CVSS6.5AI score
SaveExploits0References2
NVD
NVD
added 2021/03/30 12:16 p.m.44 views

CVE-2021-21633

A cross-site request forgery CSRF vulnerability in Jenkins OWASP Dependency-Track Plugin 3.1.0 and earlier allows attackers to connect to an attacker-specified URL, capturing credentials stored in Jenkins...

8.8CVSS0.00777EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/03/30 12:16 p.m.9 views

CVE-2021-21632

A missing permission check in Jenkins OWASP Dependency-Track Plugin 3.1.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL, capturing credentials stored in Jenkins...

6.5CVSS6.6AI score0.01051EPSS
SaveExploits0References3Affected Software1
Prion
Prion
added 2021/03/30 12:16 p.m.29 views

Information disclosure

A missing permission check in Jenkins OWASP Dependency-Track Plugin 3.1.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL, capturing credentials stored in Jenkins...

4CVSS6.3AI score0.01051EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/03/30 12:16 p.m.6 views

CVE-2021-21633

A cross-site request forgery CSRF vulnerability in Jenkins OWASP Dependency-Track Plugin 3.1.0 and earlier allows attackers to connect to an attacker-specified URL, capturing credentials stored in Jenkins...

8.8CVSS7.2AI score0.00777EPSS
SaveExploits0References3Affected Software1
Prion
Prion
added 2021/03/30 12:16 p.m.27 views

Cross site request forgery (csrf)

A cross-site request forgery CSRF vulnerability in Jenkins OWASP Dependency-Track Plugin 3.1.0 and earlier allows attackers to connect to an attacker-specified URL, capturing credentials stored in Jenkins...

6.8CVSS8.7AI score0.00777EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder