Browse CVEs

MEDIUM 6.5 CVE-2022-43235 Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via ff_hevc_put_hevc_epel_pixels_8_sse in sse-motion.cc. This vulnerab… Debian Linux No fix yet Fix from $1,6002022-11-02 MEDIUM 6.5 CVE-2022-43236 Libde265 v1.0.8 was discovered to contain a stack-buffer-overflow vulnerability via put_qpel_fallback<unsigned short> in fallback-motion.cc. This vul… Debian Linux No fix yet Fix from $1,6002022-11-02 MEDIUM 6.5 CVE-2022-43237 Libde265 v1.0.8 was discovered to contain a stack-buffer-overflow vulnerability via void put_epel_hv_fallback<unsigned short> in fallback-motion.cc. … Debian Linux No fix yet Fix from $1,6002022-11-02 MEDIUM 6.5 CVE-2022-43238 Libde265 v1.0.8 was discovered to contain an unknown crash via ff_hevc_put_hevc_qpel_h_3_v_3_sse in sse-motion.cc. This vulnerability allows attacker… Debian Linux No fix yet Fix from $1,6002022-11-02 HIGH 8.1 CVE-2021-37789 stb_image.h 2.27 has a heap-based buffer over in stbi__jpeg_load, leading to Information Disclosure or Denial of Service. Debian Linux No fix yet Fix from $1,9502022-11-02 HIGH 7.8 CVE-2022-1270 In GraphicsMagick, a heap buffer overflow was found when parsing MIFF. Debian Linux No fix yet Fix from $1,9502022-09-28 MEDIUM 5.5 CVE-2022-38850 The MPlayer Project mencoder SVN-r38374-13.0.1 is vulnerable to Divide By Zero via the function config () of llibmpcodecs/vf_scale.c. Debian Linux No fix yet Fix from $1,6002022-09-15 MEDIUM 5.5 CVE-2022-38851 Certain The MPlayer Project products are vulnerable to Out-of-bounds Read via function read_meta_record() of mplayer/libmpdemux/asfheader.c. This aff… Debian Linux No fix yet Fix from $1,6002022-09-15 MEDIUM 5.5 CVE-2022-38855 Certain The MPlayer Project products are vulnerable to Buffer Overflow via function gen_sh_video () of mplayer/libmpdemux/demux_mov.c. This affects m… Debian Linux No fix yet Fix from $1,6002022-09-15 MEDIUM 5.5 CVE-2022-38858 Certain The MPlayer Project products are vulnerable to Buffer Overflow via function mov_build_index() of libmpdemux/demux_mov.c. This affects mplayer… Debian Linux No fix yet Fix from $1,6002022-09-15 MEDIUM 5.5 CVE-2022-38860 Certain The MPlayer Project products are vulnerable to Divide By Zero via function demux_open_avi() of libmpdemux/demux_avi.c which affects mencoder.… Debian Linux No fix yet Fix from $1,6002022-09-15 MEDIUM 5.5 CVE-2022-38861 The MPlayer Project mplayer SVN-r38374-13.0.1 is vulnerable to memory corruption via function free_mp_image() of libmpcodecs/mp_image.c. Debian Linux No fix yet Fix from $1,6002022-09-15 MEDIUM 5.5 CVE-2022-38863 Certain The MPlayer Project products are vulnerable to Buffer Overflow via function mp_getbits() of libmpdemux/mpeg_hdr.c which affects mencoder and … Debian Linux No fix yet Fix from $1,6002022-09-15 MEDIUM 5.5 CVE-2022-38864 Certain The MPlayer Project products are vulnerable to Buffer Overflow via the function mp_unescape03() of libmpdemux/mpeg_hdr.c. This affects mencod… Debian Linux No fix yet Fix from $1,6002022-09-15 MEDIUM 5.5 CVE-2022-38865 Certain The MPlayer Project products are vulnerable to Divide By Zero via the function demux_avi_read_packet of libmpdemux/demux_avi.c. This affects … Debian Linux No fix yet Fix from $1,6002022-09-15 MEDIUM 5.5 CVE-2022-38866 Certain The MPlayer Project products are vulnerable to Buffer Overflow via read_avi_header() of libmpdemux/aviheader.c . This affects mplayer SVN-r38… Debian Linux Mitigation only Fix from $1,6002022-09-15 HIGH 7.5 CVE-2022-37797 In lighttpd 1.4.65, mod_wstunnel does not initialize a handler function pointer if an invalid HTTP request (websocket handshake) is received. It lead… Debian Linux No fix yet Fix from $1,9502022-09-12 HIGH 7.4 CVE-2021-3563 A flaw was found in openstack-keystone. Only the first 72 characters of an application secret are verified allowing attackers bypass some password co… Debian Linux No fix yet Fix from $1,9502022-08-26 MEDIUM 5.5 CVE-2021-4214 A heap overflow flaw was found in libpngs' pngimage.c program. This flaw allows an attacker with local network access to pass a specially crafted PNG… Debian Linux No fix yet Fix from $1,6002022-08-24 HIGH 7.8 CVE-2020-35511 A global buffer overflow was discovered in pngcheck function in pngcheck-2.4.0(5 patches applied) via a crafted png file. Debian Linux Mitigation only Fix from $1,9502022-08-23 MEDIUM 5.5 CVE-2022-26373 Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially enable i… Debian Linux Mitigation only Fix from $1,6002022-08-18 MEDIUM 6.5 CVE-2022-23825 Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type potentially leading to information disclosure. Debian Linux Mitigation only Fix from $1,6002022-07-14 MEDIUM 6.5 CVE-2022-29900 Mis-trained branch predictions for return instructions may allow arbitrary speculative code execution under certain microarchitecture-dependent condi… Debian Linux Mitigation only Fix from $1,6002022-07-12 HIGH 8.8 CVE-2019-9971 PhoneSystem Terminal in 3CX Phone System (Debian based installation) 16.0.0.1570 allows an attacker to gain root privileges by using sudo with the tc… Debian Linux No fix yet Fix from $1,9502022-06-07 HIGH 8.8 CVE-2019-9972 PhoneSystem Terminal in 3CX Phone System (Debian based installation) 16.0.0.1570 allows an authenticated attacker to run arbitrary commands with the … Debian Linux No fix yet Fix from $1,9502022-06-07 MEDIUM 5.5 CVE-2022-21151 Processor optimization removal or modification of security-critical code for some Intel(R) Processors may allow an authenticated user to potentially … Debian Linux Mitigation only Fix from $1,6002022-05-12 HIGH 7.8 CVE-2021-3624 There is an integer overflow vulnerability in dcraw. When the victim runs dcraw with a maliciously crafted X3F input image, arbitrary code may be exe… Debian Linux No fix yet Fix from $1,9502022-04-18 HIGH 8.8 CVE-2020-35629 Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed fil… Debian Linux No fix yet Fix from $1,9502022-04-18 HIGH 8.8 CVE-2020-35630 Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed fil… Debian Linux No fix yet Fix from $1,9502022-04-18 HIGH 8.8 CVE-2020-35631 Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed fil… Debian Linux No fix yet Fix from $1,9502022-04-18