| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2022-21848 | Hig | 0.49 | 7.5 | 0.04 | Jan 11, 2022 | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability | ||
| CVE-2022-21847 | Med | 0.42 | 6.5 | 0.01 | Jan 11, 2022 | Windows Hyper-V Denial of Service Vulnerability | ||
| CVE-2022-21846 | Cri | 0.59 | 9.0 | 0.01 | Jan 11, 2022 | Microsoft Exchange Server Remote Code Execution Vulnerability | ||
| CVE-2022-21843 | Hig | 0.49 | 7.5 | 0.04 | Jan 11, 2022 | Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability | ||
| CVE-2022-21842 | Hig | 0.51 | 7.8 | 0.02 | Jan 11, 2022 | Microsoft Word Remote Code Execution Vulnerability | ||
| CVE-2022-21841 | Hig | 0.51 | 7.8 | 0.03 | Jan 11, 2022 | Microsoft Excel Remote Code Execution Vulnerability | ||
| CVE-2022-21840 | Hig | 0.57 | 8.8 | 0.03 | Jan 11, 2022 | Microsoft Office Remote Code Execution Vulnerability | ||
| CVE-2022-21839 | Med | 0.40 | 6.1 | 0.02 | Jan 11, 2022 | Windows Event Tracing Discretionary Access Control List Denial of Service Vulnerability | ||
| CVE-2022-21838 | Med | 0.36 | 5.5 | 0.02 | Jan 11, 2022 | Windows Cleanup Manager Elevation of Privilege Vulnerability | ||
| CVE-2022-21837 | Hig | 0.54 | 8.3 | 0.03 | Jan 11, 2022 | Microsoft SharePoint Server Remote Code Execution Vulnerability | ||
| CVE-2022-21836 | Hig | 0.51 | 7.8 | 0.01 | Jan 11, 2022 | Windows Certificate Spoofing Vulnerability | ||
| CVE-2022-21835 | Hig | 0.51 | 7.8 | 0.01 | Jan 11, 2022 | Microsoft Cryptographic Services Elevation of Privilege Vulnerability | ||
| CVE-2022-21834 | Hig | 0.46 | 7.0 | 0.01 | Jan 11, 2022 | Windows User-mode Driver Framework Reflector Driver Elevation of Privilege Vulnerability | ||
| CVE-2022-21833 | Hig | 0.51 | 7.8 | 0.01 | Jan 11, 2022 | Virtual Machine IDE Drive Elevation of Privilege Vulnerability | ||
| CVE-2021-43974 | Med | 0.35 | 5.3 | 0.01 | Jan 11, 2022 | An issue was discovered in SysAid ITIL 20.4.74 b10. The /enduserreg endpoint is used to register end users anonymously, but does not respect the server-side setting that determines if anonymous users are allowed to register new accounts. Configuring the server-side setting to… | ||
| CVE-2021-43973 | Hig | 0.57 | 8.8 | 0.02 | Jan 11, 2022 | An unrestricted file upload vulnerability in /UploadPsIcon.jsp in SysAid ITIL 20.4.74 b10 allows a remote authenticated attacker to upload an arbitrary file via the file parameter in the HTTP POST body. A successful request returns the absolute, server-side filesystem path of… | ||
| CVE-2021-43972 | Med | 0.42 | 6.5 | 0.02 | Jan 11, 2022 | An unrestricted file copy vulnerability in /UserSelfServiceSettings.jsp in SysAid ITIL 20.4.74 b10 allows a remote authenticated attacker to copy arbitrary files on the server filesystem to the web root (with an arbitrary filename) via the tempFile and fileName parameters in the… | ||
| CVE-2021-43971 | Hig | 0.57 | 8.8 | 0.02 | Jan 11, 2022 | A SQL injection vulnerability in /mobile/SelectUsers.jsp in SysAid ITIL 20.4.74 b10 allows a remote authenticated attacker to execute arbitrary SQL commands via the filterText parameter. | ||
| CVE-2021-43055 | Med | 0.38 | 5.9 | 0.01 | Jan 11, 2022 | The eFTL Server component of TIBCO Software Inc.'s TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, and TIBCO eFTL - Enterprise Edition contains an easily exploitable vulnerability that allows clients to inherit the permissions of the client that initially… | ||
| CVE-2021-43054 | Hig | 0.46 | 7.1 | 0.01 | Jan 11, 2022 | The eFTL Server component of TIBCO Software Inc.'s TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, and TIBCO eFTL - Enterprise Edition contains an easily exploitable vulnerability that allows a low privileged attacker with network access to generate API tokens… | ||
| CVE-2021-43053 | Hig | 0.55 | 8.5 | 0.01 | Jan 11, 2022 | The Realm Server component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TIBCO FTL - Enterprise Edition contains a difficult to exploit vulnerability that allows an unauthenticated attacker with network access to obtain the cluster… | ||
| CVE-2021-43052 | Cri | 0.61 | 9.3 | 0.01 | Jan 11, 2022 | The Realm Server component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TIBCO FTL - Enterprise Edition contains an easily exploitable vulnerability that allows authentication bypass due to a hard coded secret used in the default… | ||
| CVE-2021-34704 | Hig | 0.56 | 8.6 | 0.01 | Jan 11, 2022 | A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition. This vulnerability is due to… | ||
| CVE-2021-1573 | Hig | 0.56 | 8.6 | 0.01 | Jan 11, 2022 | A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition. This vulnerability is due to… | ||
| CVE-2022-0173 | Med | 0.36 | 5.5 | 0.01 | Jan 11, 2022 | radare2 is vulnerable to Out-of-bounds Read | ||
| CVE-2022-0129 | Hig | 0.48 | 7.4 | 0.00 | Jan 11, 2022 | Uncontrolled search path element vulnerability in McAfee TechCheck prior to 4.0.0.2 allows a local administrator to load their own Dynamic Link Library (DLL) gaining elevation of privileges to system user. This was achieved through placing the malicious DLL in the same directory… | ||
| CVE-2021-38991 | Hig | 0.51 | 7.8 | 0.00 | Jan 11, 2022 | IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the lscore command which could lead to code execution. IBM X-Force ID: 212953. | ||
| CVE-2021-29701 | Med | 0.28 | 4.3 | 0.01 | Jan 11, 2022 | IBM Engineering Workflow Management 7.0, 7.0.1, and 7.0.2 as well as IBM Rational Team Concert 6.0.6 and 6.0.6.1 could allow an authneticated attacker to obtain sensitive information from build definitions that could aid in further attacks against the system. IBM X-Force ID:… | ||
| CVE-2022-0170 | Med | 0.28 | 4.3 | 0.01 | Jan 11, 2022 | peertube is vulnerable to Improper Access Control | ||
| CVE-2021-43566 | Low | 0.16 | 2.5 | 0.00 | Jan 11, 2022 | All versions of Samba prior to 4.13.16 are vulnerable to a malicious client using an SMB1 or NFS race to allow a directory to be created in an area of the server file system not exported under the share definition. Note that SMB1 has to be enabled, or the share also available… | ||
| CVE-2020-28103 | Cri | 0.64 | 9.8 | 0.01 | Jan 11, 2022 | cscms v4.1 allows for SQL injection via the "page_del" function. | ||
| CVE-2020-28102 | Cri | 0.64 | 9.8 | 0.01 | Jan 11, 2022 | cscms v4.1 allows for SQL injection via the "js_del" function. | ||
| CVE-2022-21671 | Hig | 0.46 | 8.1 | 0.01 | Jan 11, 2022 | @replit/crosis is a JavaScript client that speaks Replit's container protocol. A vulnerability that involves exposure of sensitive information exists in versions prior to 7.3.1. When using this library as a way to programmatically communicate with Replit in a standalone fashion,… | ||
| CVE-2022-21669 | Cri | 0.59 | 9.1 | 0.01 | Jan 11, 2022 | PuddingBot is a group management bot. In version 0.0.6-b933652 and prior, the bot token is publicly exposed in main.py, making it accessible to malicious actors. The bot token has been revoked and new version is already running on the server. As of time of publication, the… | ||
| CVE-2021-44647 | Med | 0.36 | 5.5 | 0.00 | Jan 11, 2022 | Lua v5.4.3 and above are affected by SEGV by type confusion in funcnamefromcode function in ldebug.c which can cause a local denial of service. | ||
| CVE-2021-45460 | Hig | 0.53 | 8.1 | 0.01 | Jan 11, 2022 | A vulnerability has been identified in SICAM PQ Analyzer (All versions < V3.18). A service is started by an unquoted registry entry. As there are spaces in this path, attackers with write privilege to those directories might be able to plant executables that will run in place of… | ||
| CVE-2021-45034 | Hig | 0.49 | 7.5 | 0.02 | Jan 11, 2022 | A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions < V16.20), CP-8000 MASTER MODULE WITH I/O -40/+70°C (All versions < V16.20), CP-8021 MASTER MODULE (All versions < V16.20), CP-8022 MASTER MODULE WITH GPRS (All versions < V16.20).… | ||
| CVE-2021-45033 | Hig | 0.57 | 8.8 | 0.01 | Jan 11, 2022 | A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions < V16.20), CP-8000 MASTER MODULE WITH I/O -40/+70°C (All versions < V16.20), CP-8021 MASTER MODULE (All versions < V16.20), CP-8022 MASTER MODULE WITH GPRS (All versions < V16.20). An… | ||
| CVE-2021-41769 | Hig | 0.49 | 7.5 | 0.01 | Jan 11, 2022 | A vulnerability has been identified in SIPROTEC 5 6MD85 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 6MD86 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 6MD89 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 6MU85 devices (CPU… | ||
| CVE-2021-37198 | Hig | 0.57 | 8.8 | 0.00 | Jan 11, 2022 | A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All versions < V10.3.3.3 only if web components are used), COMOS V10.4 (All versions < V10.4.1 only if web components are used). The COMOS Web component of COMOS uses… | ||
| CVE-2021-37197 | Hig | 0.57 | 8.8 | 0.01 | Jan 11, 2022 | A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All versions < V10.3.3.3 only if web components are used), COMOS V10.4 (All versions < V10.4.1 only if web components are used). The COMOS Web component of COMOS is… | ||
| CVE-2021-37196 | Med | 0.42 | 6.5 | 0.01 | Jan 11, 2022 | A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All versions < V10.3.3.3 only if web components are used), COMOS V10.3 (All versions >= V10.3.3.3 only if web components are used), COMOS V10.4 (All versions < V10.4.1… | ||
| CVE-2021-37195 | Med | 0.40 | 6.1 | 0.01 | Jan 11, 2022 | A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All versions < V10.3.3.3 only if web components are used), COMOS V10.4 (All versions < V10.4.1 only if web components are used). The COMOS Web component of COMOS… | ||
| CVE-2022-0144 | Hig | 0.39 | 7.1 | 0.00 | Jan 11, 2022 | shelljs is vulnerable to Improper Privilege Management | ||
| CVE-2021-36414 | Hig | 0.51 | 7.8 | 0.01 | Jan 10, 2022 | A heab-based buffer overflow vulnerability exists in MP4Box in GPAC 1.0.1 via media.c, which allows attackers to cause a denial of service or execute arbitrary code via a crafted file. | ||
| CVE-2021-36412 | Hig | 0.51 | 7.8 | 0.01 | Jan 10, 2022 | A heap-based buffer overflow vulnerability exists in MP4Box in GPAC 1.0.1 via the gp_rtp_builder_do_mpeg12_video function, which allows attackers to possibly have unspecified other impact via a crafted file in the MP4Box command, | ||
| CVE-2021-36411 | Med | 0.36 | 5.5 | 0.01 | Jan 10, 2022 | An issue has been found in libde265 v1.0.8 due to incorrect access control. A SEGV caused by a READ memory access in function derive_boundaryStrength of deblock.cc has occurred. The vulnerability causes a segmentation fault and application crash, which leads to remote denial of… | ||
| CVE-2021-36410 | Med | 0.36 | 5.5 | 0.01 | Jan 10, 2022 | A stack-buffer-overflow exists in libde265 v1.0.8 via fallback-motion.cc in function put_epel_hv_fallback when running program dec265. | ||
| CVE-2021-36409 | Hig | 0.51 | 7.8 | 0.01 | Jan 10, 2022 | There is an Assertion `scaling_list_pred_matrix_id_delta==1' failed at sps.cc:925 in libde265 v1.0.8 when decoding file, which allows attackers to cause a Denial of Service (DoS) by running the application with a crafted file or possibly have unspecified other impact. | ||
| CVE-2021-36408 | Med | 0.36 | 5.5 | 0.01 | Jan 10, 2022 | An issue was discovered in libde265 v1.0.8.There is a Heap-use-after-free in intrapred.h when decoding file using dec265. |
- risk 0.49cvss 7.5epss 0.04
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
- risk 0.42cvss 6.5epss 0.01
Windows Hyper-V Denial of Service Vulnerability
- risk 0.59cvss 9.0epss 0.01
Microsoft Exchange Server Remote Code Execution Vulnerability
- risk 0.49cvss 7.5epss 0.04
Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.02
Microsoft Word Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.03
Microsoft Excel Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.03
Microsoft Office Remote Code Execution Vulnerability
- risk 0.40cvss 6.1epss 0.02
Windows Event Tracing Discretionary Access Control List Denial of Service Vulnerability
- risk 0.36cvss 5.5epss 0.02
Windows Cleanup Manager Elevation of Privilege Vulnerability
- risk 0.54cvss 8.3epss 0.03
Microsoft SharePoint Server Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Certificate Spoofing Vulnerability
- risk 0.51cvss 7.8epss 0.01
Microsoft Cryptographic Services Elevation of Privilege Vulnerability
- risk 0.46cvss 7.0epss 0.01
Windows User-mode Driver Framework Reflector Driver Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Virtual Machine IDE Drive Elevation of Privilege Vulnerability
- risk 0.35cvss 5.3epss 0.01
An issue was discovered in SysAid ITIL 20.4.74 b10. The /enduserreg endpoint is used to register end users anonymously, but does not respect the server-side setting that determines if anonymous users are allowed to register new accounts. Configuring the server-side setting to…
- risk 0.57cvss 8.8epss 0.02
An unrestricted file upload vulnerability in /UploadPsIcon.jsp in SysAid ITIL 20.4.74 b10 allows a remote authenticated attacker to upload an arbitrary file via the file parameter in the HTTP POST body. A successful request returns the absolute, server-side filesystem path of…
- risk 0.42cvss 6.5epss 0.02
An unrestricted file copy vulnerability in /UserSelfServiceSettings.jsp in SysAid ITIL 20.4.74 b10 allows a remote authenticated attacker to copy arbitrary files on the server filesystem to the web root (with an arbitrary filename) via the tempFile and fileName parameters in the…
- risk 0.57cvss 8.8epss 0.02
A SQL injection vulnerability in /mobile/SelectUsers.jsp in SysAid ITIL 20.4.74 b10 allows a remote authenticated attacker to execute arbitrary SQL commands via the filterText parameter.
- risk 0.38cvss 5.9epss 0.01
The eFTL Server component of TIBCO Software Inc.'s TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, and TIBCO eFTL - Enterprise Edition contains an easily exploitable vulnerability that allows clients to inherit the permissions of the client that initially…
- risk 0.46cvss 7.1epss 0.01
The eFTL Server component of TIBCO Software Inc.'s TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, and TIBCO eFTL - Enterprise Edition contains an easily exploitable vulnerability that allows a low privileged attacker with network access to generate API tokens…
- risk 0.55cvss 8.5epss 0.01
The Realm Server component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TIBCO FTL - Enterprise Edition contains a difficult to exploit vulnerability that allows an unauthenticated attacker with network access to obtain the cluster…
- risk 0.61cvss 9.3epss 0.01
The Realm Server component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TIBCO FTL - Enterprise Edition contains an easily exploitable vulnerability that allows authentication bypass due to a hard coded secret used in the default…
- risk 0.56cvss 8.6epss 0.01
A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition. This vulnerability is due to…
- risk 0.56cvss 8.6epss 0.01
A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition. This vulnerability is due to…
- risk 0.36cvss 5.5epss 0.01
radare2 is vulnerable to Out-of-bounds Read
- risk 0.48cvss 7.4epss 0.00
Uncontrolled search path element vulnerability in McAfee TechCheck prior to 4.0.0.2 allows a local administrator to load their own Dynamic Link Library (DLL) gaining elevation of privileges to system user. This was achieved through placing the malicious DLL in the same directory…
- risk 0.51cvss 7.8epss 0.00
IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the lscore command which could lead to code execution. IBM X-Force ID: 212953.
- risk 0.28cvss 4.3epss 0.01
IBM Engineering Workflow Management 7.0, 7.0.1, and 7.0.2 as well as IBM Rational Team Concert 6.0.6 and 6.0.6.1 could allow an authneticated attacker to obtain sensitive information from build definitions that could aid in further attacks against the system. IBM X-Force ID:…
- risk 0.28cvss 4.3epss 0.01
peertube is vulnerable to Improper Access Control
- risk 0.16cvss 2.5epss 0.00
All versions of Samba prior to 4.13.16 are vulnerable to a malicious client using an SMB1 or NFS race to allow a directory to be created in an area of the server file system not exported under the share definition. Note that SMB1 has to be enabled, or the share also available…
- risk 0.64cvss 9.8epss 0.01
cscms v4.1 allows for SQL injection via the "page_del" function.
- risk 0.64cvss 9.8epss 0.01
cscms v4.1 allows for SQL injection via the "js_del" function.
- risk 0.46cvss 8.1epss 0.01
@replit/crosis is a JavaScript client that speaks Replit's container protocol. A vulnerability that involves exposure of sensitive information exists in versions prior to 7.3.1. When using this library as a way to programmatically communicate with Replit in a standalone fashion,…
- risk 0.59cvss 9.1epss 0.01
PuddingBot is a group management bot. In version 0.0.6-b933652 and prior, the bot token is publicly exposed in main.py, making it accessible to malicious actors. The bot token has been revoked and new version is already running on the server. As of time of publication, the…
- risk 0.36cvss 5.5epss 0.00
Lua v5.4.3 and above are affected by SEGV by type confusion in funcnamefromcode function in ldebug.c which can cause a local denial of service.
- risk 0.53cvss 8.1epss 0.01
A vulnerability has been identified in SICAM PQ Analyzer (All versions < V3.18). A service is started by an unquoted registry entry. As there are spaces in this path, attackers with write privilege to those directories might be able to plant executables that will run in place of…
- risk 0.49cvss 7.5epss 0.02
A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions < V16.20), CP-8000 MASTER MODULE WITH I/O -40/+70°C (All versions < V16.20), CP-8021 MASTER MODULE (All versions < V16.20), CP-8022 MASTER MODULE WITH GPRS (All versions < V16.20).…
- risk 0.57cvss 8.8epss 0.01
A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions < V16.20), CP-8000 MASTER MODULE WITH I/O -40/+70°C (All versions < V16.20), CP-8021 MASTER MODULE (All versions < V16.20), CP-8022 MASTER MODULE WITH GPRS (All versions < V16.20). An…
- risk 0.49cvss 7.5epss 0.01
A vulnerability has been identified in SIPROTEC 5 6MD85 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 6MD86 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 6MD89 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 6MU85 devices (CPU…
- risk 0.57cvss 8.8epss 0.00
A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All versions < V10.3.3.3 only if web components are used), COMOS V10.4 (All versions < V10.4.1 only if web components are used). The COMOS Web component of COMOS uses…
- risk 0.57cvss 8.8epss 0.01
A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All versions < V10.3.3.3 only if web components are used), COMOS V10.4 (All versions < V10.4.1 only if web components are used). The COMOS Web component of COMOS is…
- risk 0.42cvss 6.5epss 0.01
A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All versions < V10.3.3.3 only if web components are used), COMOS V10.3 (All versions >= V10.3.3.3 only if web components are used), COMOS V10.4 (All versions < V10.4.1…
- risk 0.40cvss 6.1epss 0.01
A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All versions < V10.3.3.3 only if web components are used), COMOS V10.4 (All versions < V10.4.1 only if web components are used). The COMOS Web component of COMOS…
- risk 0.39cvss 7.1epss 0.00
shelljs is vulnerable to Improper Privilege Management
- risk 0.51cvss 7.8epss 0.01
A heab-based buffer overflow vulnerability exists in MP4Box in GPAC 1.0.1 via media.c, which allows attackers to cause a denial of service or execute arbitrary code via a crafted file.
- risk 0.51cvss 7.8epss 0.01
A heap-based buffer overflow vulnerability exists in MP4Box in GPAC 1.0.1 via the gp_rtp_builder_do_mpeg12_video function, which allows attackers to possibly have unspecified other impact via a crafted file in the MP4Box command,
- risk 0.36cvss 5.5epss 0.01
An issue has been found in libde265 v1.0.8 due to incorrect access control. A SEGV caused by a READ memory access in function derive_boundaryStrength of deblock.cc has occurred. The vulnerability causes a segmentation fault and application crash, which leads to remote denial of…
- risk 0.36cvss 5.5epss 0.01
A stack-buffer-overflow exists in libde265 v1.0.8 via fallback-motion.cc in function put_epel_hv_fallback when running program dec265.
- risk 0.51cvss 7.8epss 0.01
There is an Assertion `scaling_list_pred_matrix_id_delta==1' failed at sps.cc:925 in libde265 v1.0.8 when decoding file, which allows attackers to cause a Denial of Service (DoS) by running the application with a crafted file or possibly have unspecified other impact.
- risk 0.36cvss 5.5epss 0.01
An issue was discovered in libde265 v1.0.8.There is a Heap-use-after-free in intrapred.h when decoding file using dec265.