2021

If Ethernet communication of the JTEKT Corporation TOYOPUC product series’ (TOYOPUC-PC10 Series: PC10G-CPU TCC-6353: All

A flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file system from within a conta

A flaw was found in libtpms in versions before 0.8.0. The TPM 2 implementation returns 2048 bit keys with ~1984 bit stre

GStreamer before 1.18.4 might cause heap corruption when parsing certain malformed Matroska files.

GStreamer before 1.18.4 might access already-freed memory in error code paths when demuxing certain malformed Matroska f

An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3. The serialnumber par

An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3. The componentStatus

In filters/reframe_latm.c in GPAC 1.0.1 there is a Null Pointer Dereference, when gf_filter_pck_get_data is called. The

There is a integer overflow in media_tools/av_parsers.c in the gf_avc_read_pps_bs_internal in GPAC from 0.5.2 to 1.0.1.

In the function gf_hevc_read_pps_bs_internal function in media_tools/av_parsers.c in GPAC 1.0.1 there is a loop, which w

In the adts_dmx_process function in filters/reframe_adts.c in GPAC 1.0.1, a crafted file may cause ctx->hdr.frame_size t

There is a Null Pointer Dereference in function filter_core/filter_pck.c:gf_filter_pck_new_alloc_internal in GPAC 1.0.1.

There is a integer overflow in media_tools/av_parsers.c in the hevc_parse_slice_segment function in GPAC from v0.9.0-pre

There is a integer overflow in function filter_core/filter_props.c:gf_props_assign_value in GPAC 1.0.1. In which, the ar

The AV1_DuplicateConfig function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference)

The gf_hinter_track_new function in GPAC 1.0.1 allows attackers to read memory via a crafted file in the MP4Box command.

The MergeTrack function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a cra

The gf_isom_cenc_get_default_info_internal function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL po

The gf_isom_set_extraction_slc function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer derefe

The HintFile function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a craft

Memory leak in the stbl_GetSampleInfos function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted fi

Buffer overflow in the abst_box_read function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or e

Buffer overflow in the tenc_box_read function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or e

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image file

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image file

Grassroot Platform is an application to make it faster, cheaper and easier to persistently organize and mobilize people

matrix-media-repo is an open-source multi-domain media repository for Matrix. Versions 1.2.6 and earlier of matrix-media

Wagtail is a Django content management system. In affected versions of Wagtail, when saving the contents of a rich text

IBM Resilient SOAR V38.0 could allow a privileged user to create create malicious scripts that could be executed as anot

A user may be tricked into opening a malicious FBX file which may exploit a use-after-free vulnerability in FBX's Review

A user may be tricked into opening a malicious FBX file which may exploit a Directory Traversal Remote Code Execution vu

The user may be tricked into opening a malicious FBX file which may exploit a Null Pointer Dereference vulnerability in

A Memory Corruption Vulnerability in Autodesk FBX Review version 1.5.0 and prior may lead to remote code execution throu

An Out-Of-Bounds Read Vulnerability in Autodesk FBX Review version 1.5.0 and prior may lead to code execution through ma

The messaging subsystem in the Online Discussion Forum 1.0 is vulnerable to XSS in the message body. An authenticated us

VMware NSX-T contains a privilege escalation vulnerability due to an issue with RBAC (Role based access control) role as

In Fibaro Home Center 2 and Lite devices in all versions provide a web based management interface over unencrypted HTTP

In Fibaro Home Center 2 and Lite devices with firmware version 4.540 and older an authenticated user can run commands as

In Fibaro Home Center 2 and Lite devices with firmware version 4.600 and older an internal management service is accessi

Fibaro Home Center 2 and Lite devices with firmware version 4.600 and older initiate SSH connections to the Fibaro cloud

Adobe Robohelp version 2020.0.3 (and earlier) is affected by an uncontrolled search path element vulnerability that coul

Innorix Web-Based File Transfer Solution versuibs prior to and including 9.2.18.385 contains a vulnerability that could

XMB is vulnerable to cross-site scripting (XSS) due to inadequate filtering of BBCode input. This bug affects all versio

This affects all versions of package killing. If attacker-controlled user input is given, it is possible for an attacker

This affects all versions of package roar-pidusage. If attacker-controlled user input is given to the stat function of t

This affects all versions of package portkiller. If (attacker-controlled) user input is given, it is possible for an att

This affects all versions of package picotts. If attacker-controlled user input is given to the say function, it is poss

This affects all versions of package onion-oled-js. If attacker-controlled user input is given to the scroll function, i

This affects all versions of package ffmpegdotjs. If attacker-controlled user input is given to the trimvideo function,

This affects all versions of package psnode. If attacker-controlled user input is given to the kill function, it is poss