Latest CVE Feed
-
5.5
MEDIUMCVE-2021-40723
Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could levera... Read more
- Published: Sep. 07, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2019-12973
In OpenJPEG 2.3.1, there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. This issue is similar to CVE-2018-6616.... Read more
- Published: Jun. 26, 2019
- Modified: Nov. 21, 2024
-
5.5
MEDIUM- Published: Aug. 29, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2016-8884
The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference) by calling the imginfo command with a crafted BMP image. NOTE: this vulnerability exists because of an in... Read more
- Published: Mar. 28, 2017
- Modified: Apr. 20, 2025
-
5.5
MEDIUMCVE-2016-10053
The WriteTIFFImage function in coders/tiff.c in ImageMagick before 6.9.5-8 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted file.... Read more
Affected Products : imagemagick- Published: Mar. 23, 2017
- Modified: Apr. 20, 2025
-
5.5
MEDIUMCVE-2021-40737
Adobe Audition version 14.4 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the conte... Read more
- Published: Mar. 16, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-40608
The gf_hinter_track_finalize function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command.... Read more
Affected Products : gpac- Published: Jun. 28, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2017-13842
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.... Read more
- Published: Nov. 13, 2017
- Modified: Apr. 20, 2025
-
5.5
MEDIUMCVE-2021-40575
The binary MP4Box in Gpac 1.0.1 has a null pointer dereference vulnerability in the mpgviddmx_process function in reframe_mpgvid.c, which allows attackers to cause a denial of service. This vulnerability is possibly due to an incomplete fix for CVE-2021-4... Read more
Affected Products : gpac- Published: Jan. 13, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-40606
The gf_bs_write_data function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command.... Read more
Affected Products : gpac- Published: Jun. 28, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-40648
In man2html 1.6g, a filename can be created to overwrite the previous size parameter of the next chunk and the fd, bk, fd_nextsize, bk_nextsize of the current chunk. The next chunk is then freed later on, causing a freeing of an arbitrary amount of memory... Read more
Affected Products : man2html- Published: Sep. 09, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-40566
A Segmentation fault casued by heap use after free vulnerability exists in Gpac through 1.0.1 via the mpgviddmx_process function in reframe_mpgvid.c when using mp4box, which causes a denial of service.... Read more
Affected Products : gpac- Published: Jan. 12, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-40647
In man2html 1.6g, a specific string being read in from a file will overwrite the size parameter in the top chunk of the heap. This at least causes the program to segmentation abort if the heap size parameter isn't aligned correctly. In version before GLIB... Read more
Affected Products : man2html- Published: Sep. 09, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-40564
A Segmentation fault caused by null pointer dereference vulnerability eists in Gpac through 1.0.2 via the avc_parse_slice function in av_parsers.c when using mp4box, which causes a denial of service.... Read more
Affected Products : gpac- Published: Jan. 12, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2013-3831
Unspecified vulnerability in the Oracle Portal component in Oracle Fusion Middleware 11.1.1.6.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Demos.... Read more
Affected Products : fusion_middleware- Published: Oct. 16, 2013
- Modified: Apr. 11, 2025
-
5.5
MEDIUMCVE-2020-9797
An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. A malicious application may be able to determine another application's memo... Read more
- Published: Jun. 09, 2020
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-40609
The GetHintFormat function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command.... Read more
Affected Products : gpac- Published: Jun. 28, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUM- Published: Aug. 29, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-40472
Microsoft Excel Information Disclosure Vulnerability... Read more
Affected Products : office 365_apps excel office_online_server office_long_term_servicing_channel office_web_apps_server- Published: Oct. 13, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-40454
Rich Text Edit Control Information Disclosure Vulnerability... Read more
Affected Products : windows_10 windows_8.1 windows_rt_8.1 windows_server_2012 windows_server_2016 office windows_server_2019 365_apps windows_server windows_10_1607 +12 more products- Published: Oct. 13, 2021
- Modified: Nov. 21, 2024