| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-43033 | Cri | 0.64 | 9.8 | 0.06 | Dec 6, 2021 | An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. Multiple functions in the bpserverd daemon were vulnerable to arbitrary remote code execution as root. The vulnerability was caused by untrusted input (received by the server) being passed to system… | ||
| CVE-2021-44048 | Hig | 0.51 | 7.8 | 0.01 | Dec 5, 2021 | An out-of-bounds write vulnerability exists when reading a TIF file using Open Design Alliance (ODA) Drawings Explorer before 2022.11. The specific issue exists after loading TIF files. Crafted data in a TIF file can trigger a write operation past the end of an allocated buffer.… | ||
| CVE-2021-44047 | Hig | 0.51 | 7.8 | 0.01 | Dec 5, 2021 | A use-after-free vulnerability exists when reading a DWF/DWFX file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists with parsing DWF/DWFX files. Crafted data in a DWF/DWFX file and lack of proper validation of input data can trigger a write… | ||
| CVE-2021-44046 | Hig | 0.51 | 7.8 | 0.01 | Dec 5, 2021 | An out-of-bounds write vulnerability exists when reading U3D files in Open Design Alliance PRC SDK before 2022.11. An unchecked return value of a function (verifying input data from a U3D file) leads to an out-of-bounds write. An attacker can leverage this vulnerability to… | ||
| CVE-2021-44045 | Hig | 0.51 | 7.8 | 0.01 | Dec 5, 2021 | An out-of-bounds write vulnerability exists when reading a DGN file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DGN files. Crafted data in a DGN file and lack of proper validation for the XFAT sectors count can trigger… | ||
| CVE-2021-44044 | Hig | 0.51 | 7.8 | 0.01 | Dec 5, 2021 | An out-of-bounds write vulnerability exists when reading a JPG file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists with parsing JPG files. Crafted data in a JPG (4 extraneous bytes before the marker 0xca) can trigger a write operation past the… | ||
| CVE-2021-37253 | Hig | 0.49 | 7.5 | 0.03 | Dec 5, 2021 | M-Files Web before 20.10.9524.1 allows a denial of service via overlapping ranges (in HTTP requests with crafted Range or Request-Range headers). NOTE: this is disputed because the range behavior is the responsibility of the web server, not the responsibility of the individual… | ||
| CVE-2021-4005 | Med | 0.21 | 4.3 | 0.00 | Dec 4, 2021 | firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF) | ||
| CVE-2021-43415 | Hig | 0.57 | 8.8 | 0.01 | Dec 3, 2021 | HashiCorp Nomad and Nomad Enterprise up to 1.0.13, 1.1.7, and 1.2.0, with the QEMU task driver enabled, allowed authenticated users with job submission capabilities to bypass the configured allowed image paths. Fixed in 1.0.14, 1.1.8, and 1.2.1. | ||
| CVE-2021-35415 | Med | 0.31 | 4.8 | 0.01 | Dec 3, 2021 | A stored cross-site scripting (XSS) vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the course "Title" and "Content" fields. | ||
| CVE-2021-35414 | Cri | 0.64 | 9.8 | 0.02 | Dec 3, 2021 | Chamilo LMS v1.11.x was discovered to contain a SQL injection via the doc parameter in main/plagiarism/compilatio/upload.php. | ||
| CVE-2021-35413 | Hig | 0.57 | 8.8 | 0.03 | Dec 3, 2021 | A remote code execution (RCE) vulnerability in course_intro_pdf_import.php of Chamilo LMS v1.11.x allows authenticated attackers to execute arbitrary code via a crafted .htaccess file. | ||
| CVE-2021-44349 | Cri | 0.64 | 9.8 | 0.01 | Dec 3, 2021 | SQL Injection vulnerability exists in TuziCMS v2.0.6 via the id parameter in App\Manage\Controller\DownloadController.class.php. | ||
| CVE-2021-44348 | Cri | 0.64 | 9.8 | 0.01 | Dec 3, 2021 | SQL Injection vulnerability exists in TuziCMS v2.0.6 via the id parameer in App\Manage\Controller\AdvertController.class.php. | ||
| CVE-2021-35346 | Cri | 0.64 | 9.8 | 0.02 | Dec 3, 2021 | tsMuxer v2.6.16 was discovered to contain a heap-based buffer overflow via the function HevcSpsUnit::short_term_ref_pic_set(int) in hevc.cpp. | ||
| CVE-2021-35344 | Cri | 0.64 | 9.8 | 0.02 | Dec 3, 2021 | tsMuxer v2.6.16 was discovered to contain a heap-based buffer overflow via the function BitStreamReader::getCurVal in bitStream.h. | ||
| CVE-2021-23758 | Hig | 0.67 | 8.1 | 0.83 | KEV | Dec 3, 2021 | All versions of package ajaxpro.2 are vulnerable to Deserialization of Untrusted Data due to the possibility of deserialization of arbitrary .NET classes, which can be abused to gain remote code execution. | |
| CVE-2021-23562 | Med | 0.20 | 4.2 | 0.01 | Dec 3, 2021 | This affects the package plupload before 2.3.9. A file name containing JavaScript code could be uploaded and run. An attacker would need to trick a user to upload this kind of file. | ||
| CVE-2021-44352 | Cri | 0.65 | 9.8 | 0.13 | Dec 3, 2021 | A Stack-based Buffer Overflow vulnerability exists in the Tenda AC15 V15.03.05.18_multi device via the list parameter in a post request in goform/SetIpMacBind. | ||
| CVE-2021-44347 | Cri | 0.64 | 9.8 | 0.01 | Dec 3, 2021 | SQL Injection vulnerability exists in TuziCMS v2.0.6 in App\Manage\Controller\GuestbookController.class.php. | ||
| CVE-2021-38909 | Med | 0.35 | 5.4 | 0.01 | Dec 3, 2021 | IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM… | ||
| CVE-2021-29867 | Med | 0.35 | 5.4 | 0.01 | Dec 3, 2021 | IBM Cognos Analytics 11.1.7 and 11.2.0 could allow an authenticated to view or edit a Jupyter notebook that they should not have access to. IBM X-Force ID: 206212. | ||
| CVE-2021-29756 | Hig | 0.57 | 8.8 | 0.01 | Dec 3, 2021 | IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site request forgery (CSRF) in the My Inbox page which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 202167. | ||
| CVE-2021-29719 | Med | 0.35 | 5.3 | 0.01 | Dec 3, 2021 | IBM Cognos Analytics 11.1.7 and 11.2.0 could be vulnerable to client side vulnerabilties due to a web response specifying an incorrect content type. IBM X-Force ID: 201091 | ||
| CVE-2021-29716 | Med | 0.42 | 6.5 | 0.01 | Dec 3, 2021 | IBM Cognos Analytics 11.1.7 and 11.2.0 could allow a low level user to reas of the application that privileged user should only be allowed to view. IBM X-Force ID: 201087. | ||
| CVE-2021-20493 | Med | 0.40 | 6.1 | 0.01 | Dec 3, 2021 | IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM… | ||
| CVE-2021-20470 | Hig | 0.49 | 7.5 | 0.01 | Dec 3, 2021 | IBM Cognos Analytics 11.1.7 and 11.2.0 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 196339. | ||
| CVE-2021-43991 | Med | 0.44 | 6.8 | 0.01 | Dec 3, 2021 | The Kentico Xperience CMS version 13.0 – 13.0.43 is vulnerable to a persistent Cross-Site Scripting (XSS) vulnerability (also known as Stored or Second-Order XSS). Persistent XSS vulnerabilities occur when the application stores and retrieves client supplied data without… | ||
| CVE-2021-3980 | Hig | 0.42 | 7.5 | 0.02 | Dec 3, 2021 | elgg is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor | ||
| CVE-2021-43676 | Cri | 0.57 | 9.8 | 0.01 | Dec 3, 2021 | matyhtf framework v3.0.5 is affected by a path manipulation vulnerability in Smarty.class.php. | ||
| CVE-2021-44278 | Cri | 0.64 | 9.8 | 0.01 | Dec 3, 2021 | Librenms 21.11.0 is affected by a path manipulation vulnerability in includes/html/pages/device/showconfig.inc.php. | ||
| CVE-2021-43674 | Cri | 0.64 | 9.8 | 0.01 | Dec 3, 2021 | ThinkUp 2.0-beta.10 is affected by a path manipulation vulnerability in Smarty.class.php. NOTE: This vulnerability only affects products that are no longer supported by the maintainer | ||
| CVE-2021-43673 | Med | 0.40 | 6.1 | 0.01 | Dec 3, 2021 | dzzoffice 2.02.1_SC_UTF8 is affected by a Cross Site Scripting (XSS) vulnerability in explorerfile.php. The output of the exit function is printed for the user via exit(json_encode($return)). | ||
| CVE-2021-4000 | Med | 0.33 | 6.1 | 0.01 | Dec 3, 2021 | showdoc is vulnerable to URL Redirection to Untrusted Site | ||
| CVE-2021-44022 | Med | 0.36 | 5.5 | 0.00 | Dec 3, 2021 | A reachable assertion vulnerability in Trend Micro Apex One could allow an attacker to crash the program on affected installations, leading to a denial-of-service (DoS). Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in… | ||
| CVE-2021-44021 | Hig | 0.51 | 7.8 | 0.00 | Dec 3, 2021 | An unnecessary privilege vulnerability in Trend Micro Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system… | ||
| CVE-2021-44020 | Hig | 0.51 | 7.8 | 0.00 | Dec 3, 2021 | An unnecessary privilege vulnerability in Trend Micro Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system… | ||
| CVE-2021-44019 | Hig | 0.51 | 7.8 | 0.00 | Dec 3, 2021 | An unnecessary privilege vulnerability in Trend Micro Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system… | ||
| CVE-2021-43772 | Med | 0.36 | 5.5 | 0.00 | Dec 3, 2021 | Trend Micro Security 2021 v17.0 (Consumer) contains a vulnerability that allows files inside the protected folder to be modified without any detection. | ||
| CVE-2021-25785 | Med | 0.31 | 4.8 | 0.01 | Dec 2, 2021 | Taocms v2.5Beta5 was discovered to contain a cross-site scripting (XSS) vulnerability via the component Management column. | ||
| CVE-2021-25784 | Hig | 0.47 | 7.2 | 0.01 | Dec 2, 2021 | Taocms v2.5Beta5 was discovered to contain a blind SQL injection vulnerability via the function Edit Article. | ||
| CVE-2021-25783 | Hig | 0.47 | 7.2 | 0.01 | Dec 2, 2021 | Taocms v2.5Beta5 was discovered to contain a blind SQL injection vulnerability via the function Article Search. | ||
| CVE-2020-29177 | Cri | 0.59 | 9.1 | 0.01 | Dec 2, 2021 | Z-BlogPHP v1.6.1.2100 was discovered to contain an arbitrary file deletion vulnerability via \app_del.php. | ||
| CVE-2020-29176 | Hig | 0.51 | 7.8 | 0.01 | Dec 2, 2021 | An arbitrary file upload vulnerability in Z-BlogPHP v1.6.1.2100 allows attackers to execute arbitrary code via a crafted JPG file. | ||
| CVE-2021-28237 | Cri | 0.64 | 9.8 | 0.01 | Dec 2, 2021 | LibreDWG v0.12.3 was discovered to contain a heap-buffer overflow via decode_preR13. | ||
| CVE-2021-28236 | Hig | 0.49 | 7.5 | 0.01 | Dec 2, 2021 | LibreDWG v0.12.3 was discovered to contain a NULL pointer dereference via out_dxfb.c. | ||
| CVE-2020-36135 | Med | 0.42 | 6.5 | 0.01 | Dec 2, 2021 | AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component rate_hist.c. | ||
| CVE-2020-36134 | Med | 0.42 | 6.5 | 0.01 | Dec 2, 2021 | AOM v2.0.1 was discovered to contain a segmentation violation via the component aom_dsp/x86/obmc_sad_avx2.c. | ||
| CVE-2020-36133 | Hig | 0.57 | 8.8 | 0.02 | Dec 2, 2021 | AOM v2.0.1 was discovered to contain a global buffer overflow via the component av1/encoder/partition_search.h. | ||
| CVE-2020-36131 | Hig | 0.57 | 8.8 | 0.02 | Dec 2, 2021 | AOM v2.0.1 was discovered to contain a stack buffer overflow via the component stats/rate_hist.c. |
- risk 0.64cvss 9.8epss 0.06
An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. Multiple functions in the bpserverd daemon were vulnerable to arbitrary remote code execution as root. The vulnerability was caused by untrusted input (received by the server) being passed to system…
- risk 0.51cvss 7.8epss 0.01
An out-of-bounds write vulnerability exists when reading a TIF file using Open Design Alliance (ODA) Drawings Explorer before 2022.11. The specific issue exists after loading TIF files. Crafted data in a TIF file can trigger a write operation past the end of an allocated buffer.…
- risk 0.51cvss 7.8epss 0.01
A use-after-free vulnerability exists when reading a DWF/DWFX file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists with parsing DWF/DWFX files. Crafted data in a DWF/DWFX file and lack of proper validation of input data can trigger a write…
- risk 0.51cvss 7.8epss 0.01
An out-of-bounds write vulnerability exists when reading U3D files in Open Design Alliance PRC SDK before 2022.11. An unchecked return value of a function (verifying input data from a U3D file) leads to an out-of-bounds write. An attacker can leverage this vulnerability to…
- risk 0.51cvss 7.8epss 0.01
An out-of-bounds write vulnerability exists when reading a DGN file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DGN files. Crafted data in a DGN file and lack of proper validation for the XFAT sectors count can trigger…
- risk 0.51cvss 7.8epss 0.01
An out-of-bounds write vulnerability exists when reading a JPG file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists with parsing JPG files. Crafted data in a JPG (4 extraneous bytes before the marker 0xca) can trigger a write operation past the…
- risk 0.49cvss 7.5epss 0.03
M-Files Web before 20.10.9524.1 allows a denial of service via overlapping ranges (in HTTP requests with crafted Range or Request-Range headers). NOTE: this is disputed because the range behavior is the responsibility of the web server, not the responsibility of the individual…
- risk 0.21cvss 4.3epss 0.00
firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)
- risk 0.57cvss 8.8epss 0.01
HashiCorp Nomad and Nomad Enterprise up to 1.0.13, 1.1.7, and 1.2.0, with the QEMU task driver enabled, allowed authenticated users with job submission capabilities to bypass the configured allowed image paths. Fixed in 1.0.14, 1.1.8, and 1.2.1.
- risk 0.31cvss 4.8epss 0.01
A stored cross-site scripting (XSS) vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the course "Title" and "Content" fields.
- risk 0.64cvss 9.8epss 0.02
Chamilo LMS v1.11.x was discovered to contain a SQL injection via the doc parameter in main/plagiarism/compilatio/upload.php.
- risk 0.57cvss 8.8epss 0.03
A remote code execution (RCE) vulnerability in course_intro_pdf_import.php of Chamilo LMS v1.11.x allows authenticated attackers to execute arbitrary code via a crafted .htaccess file.
- risk 0.64cvss 9.8epss 0.01
SQL Injection vulnerability exists in TuziCMS v2.0.6 via the id parameter in App\Manage\Controller\DownloadController.class.php.
- risk 0.64cvss 9.8epss 0.01
SQL Injection vulnerability exists in TuziCMS v2.0.6 via the id parameer in App\Manage\Controller\AdvertController.class.php.
- risk 0.64cvss 9.8epss 0.02
tsMuxer v2.6.16 was discovered to contain a heap-based buffer overflow via the function HevcSpsUnit::short_term_ref_pic_set(int) in hevc.cpp.
- risk 0.64cvss 9.8epss 0.02
tsMuxer v2.6.16 was discovered to contain a heap-based buffer overflow via the function BitStreamReader::getCurVal in bitStream.h.
- risk 0.67cvss 8.1epss 0.83
All versions of package ajaxpro.2 are vulnerable to Deserialization of Untrusted Data due to the possibility of deserialization of arbitrary .NET classes, which can be abused to gain remote code execution.
- risk 0.20cvss 4.2epss 0.01
This affects the package plupload before 2.3.9. A file name containing JavaScript code could be uploaded and run. An attacker would need to trick a user to upload this kind of file.
- risk 0.65cvss 9.8epss 0.13
A Stack-based Buffer Overflow vulnerability exists in the Tenda AC15 V15.03.05.18_multi device via the list parameter in a post request in goform/SetIpMacBind.
- risk 0.64cvss 9.8epss 0.01
SQL Injection vulnerability exists in TuziCMS v2.0.6 in App\Manage\Controller\GuestbookController.class.php.
- risk 0.35cvss 5.4epss 0.01
IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM…
- risk 0.35cvss 5.4epss 0.01
IBM Cognos Analytics 11.1.7 and 11.2.0 could allow an authenticated to view or edit a Jupyter notebook that they should not have access to. IBM X-Force ID: 206212.
- risk 0.57cvss 8.8epss 0.01
IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site request forgery (CSRF) in the My Inbox page which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 202167.
- risk 0.35cvss 5.3epss 0.01
IBM Cognos Analytics 11.1.7 and 11.2.0 could be vulnerable to client side vulnerabilties due to a web response specifying an incorrect content type. IBM X-Force ID: 201091
- risk 0.42cvss 6.5epss 0.01
IBM Cognos Analytics 11.1.7 and 11.2.0 could allow a low level user to reas of the application that privileged user should only be allowed to view. IBM X-Force ID: 201087.
- risk 0.40cvss 6.1epss 0.01
IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM…
- risk 0.49cvss 7.5epss 0.01
IBM Cognos Analytics 11.1.7 and 11.2.0 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 196339.
- risk 0.44cvss 6.8epss 0.01
The Kentico Xperience CMS version 13.0 – 13.0.43 is vulnerable to a persistent Cross-Site Scripting (XSS) vulnerability (also known as Stored or Second-Order XSS). Persistent XSS vulnerabilities occur when the application stores and retrieves client supplied data without…
- risk 0.42cvss 7.5epss 0.02
elgg is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor
- risk 0.57cvss 9.8epss 0.01
matyhtf framework v3.0.5 is affected by a path manipulation vulnerability in Smarty.class.php.
- risk 0.64cvss 9.8epss 0.01
Librenms 21.11.0 is affected by a path manipulation vulnerability in includes/html/pages/device/showconfig.inc.php.
- risk 0.64cvss 9.8epss 0.01
ThinkUp 2.0-beta.10 is affected by a path manipulation vulnerability in Smarty.class.php. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
- risk 0.40cvss 6.1epss 0.01
dzzoffice 2.02.1_SC_UTF8 is affected by a Cross Site Scripting (XSS) vulnerability in explorerfile.php. The output of the exit function is printed for the user via exit(json_encode($return)).
- risk 0.33cvss 6.1epss 0.01
showdoc is vulnerable to URL Redirection to Untrusted Site
- risk 0.36cvss 5.5epss 0.00
A reachable assertion vulnerability in Trend Micro Apex One could allow an attacker to crash the program on affected installations, leading to a denial-of-service (DoS). Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in…
- risk 0.51cvss 7.8epss 0.00
An unnecessary privilege vulnerability in Trend Micro Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system…
- risk 0.51cvss 7.8epss 0.00
An unnecessary privilege vulnerability in Trend Micro Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system…
- risk 0.51cvss 7.8epss 0.00
An unnecessary privilege vulnerability in Trend Micro Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system…
- risk 0.36cvss 5.5epss 0.00
Trend Micro Security 2021 v17.0 (Consumer) contains a vulnerability that allows files inside the protected folder to be modified without any detection.
- risk 0.31cvss 4.8epss 0.01
Taocms v2.5Beta5 was discovered to contain a cross-site scripting (XSS) vulnerability via the component Management column.
- risk 0.47cvss 7.2epss 0.01
Taocms v2.5Beta5 was discovered to contain a blind SQL injection vulnerability via the function Edit Article.
- risk 0.47cvss 7.2epss 0.01
Taocms v2.5Beta5 was discovered to contain a blind SQL injection vulnerability via the function Article Search.
- risk 0.59cvss 9.1epss 0.01
Z-BlogPHP v1.6.1.2100 was discovered to contain an arbitrary file deletion vulnerability via \app_del.php.
- risk 0.51cvss 7.8epss 0.01
An arbitrary file upload vulnerability in Z-BlogPHP v1.6.1.2100 allows attackers to execute arbitrary code via a crafted JPG file.
- risk 0.64cvss 9.8epss 0.01
LibreDWG v0.12.3 was discovered to contain a heap-buffer overflow via decode_preR13.
- risk 0.49cvss 7.5epss 0.01
LibreDWG v0.12.3 was discovered to contain a NULL pointer dereference via out_dxfb.c.
- risk 0.42cvss 6.5epss 0.01
AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component rate_hist.c.
- risk 0.42cvss 6.5epss 0.01
AOM v2.0.1 was discovered to contain a segmentation violation via the component aom_dsp/x86/obmc_sad_avx2.c.
- risk 0.57cvss 8.8epss 0.02
AOM v2.0.1 was discovered to contain a global buffer overflow via the component av1/encoder/partition_search.h.
- risk 0.57cvss 8.8epss 0.02
AOM v2.0.1 was discovered to contain a stack buffer overflow via the component stats/rate_hist.c.