Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 8,924

Export CSV
CVE-2022-3809

Axiomatic Bento4 mp4tag Mp4Tag.cpp ParseCommandLine denial of service

A vulnerability was found in Axiomatic Bento4 and classified as problematic. Affected by this issue is the function ParseCommandLine of the file Mp4Tag/Mp4Tag.cpp of the component mp4tag. The manipulation leads to denial of service. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-212666 is the identifier assigned to this vulnerability.

CVSS 3.1 · 4.3 Medium EPSS 1.0% KEV · Not listed
Vendors
Axiosys
Products
Bento4
CVE-2022-3810

Axiomatic Bento4 mp42hevc Mp42Hevc.cpp AP4_File denial of service

A vulnerability was found in Axiomatic Bento4. It has been classified as problematic. This affects the function AP4_File::AP4_File of the file Mp42Hevc.cpp of the component mp42hevc. The manipulation leads to denial of service. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-212667.

CVSS 3.1 · 4.3 Medium EPSS 1.0% KEV · Not listed
Vendors
Axiosys
Products
Bento4
CVE-2022-3813

Axiomatic Bento4 mp4edit memory leak

A vulnerability classified as problematic has been found in Axiomatic Bento4. This affects an unknown part of the component mp4edit. The manipulation leads to memory leak. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-212679.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Axiosys
Products
Bento4
CVE-2022-3814

Axiomatic Bento4 mp4decrypt memory leak

A vulnerability classified as problematic was found in Axiomatic Bento4. This vulnerability affects unknown code of the component mp4decrypt. The manipulation leads to memory leak. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-212680.

CVSS 3.1 · 4.3 Medium EPSS 1.0% KEV · Not listed
Vendors
Axiosys
Products
Bento4
CVE-2022-3815

Axiomatic Bento4 mp4decrypt memory leak

A vulnerability, which was classified as problematic, has been found in Axiomatic Bento4. This issue affects some unknown processing of the component mp4decrypt. The manipulation leads to memory leak. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-212681 was assigned to this vulnerability.

CVSS 3.1 · 4.3 Medium EPSS 1.0% KEV · Not listed
Vendors
Axiosys
Products
Bento4
CVE-2022-3816

Axiomatic Bento4 mp4decrypt memory leak

A vulnerability, which was classified as problematic, was found in Axiomatic Bento4. Affected is an unknown function of the component mp4decrypt. The manipulation leads to memory leak. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-212682 is the identifier assigned to this vulnerability.

CVSS 3.1 · 4.3 Medium EPSS 1.0% KEV · Not listed
Vendors
Axiosys
Products
Bento4
CVE-2022-3817

Axiomatic Bento4 mp4mux memory leak

A vulnerability has been found in Axiomatic Bento4 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component mp4mux. The manipulation leads to memory leak. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-212683.

CVSS 3.1 · 4.3 Medium EPSS 1.1% KEV · Not listed
Vendors
Axiosys
Products
Bento4
CVE-2022-3957

GPAC SVG Parser svg_attributes.c svg_parse_preserveaspectratio memory leak

A vulnerability classified as problematic was found in GPAC. Affected by this vulnerability is the function svg_parse_preserveaspectratio of the file scenegraph/svg_attributes.c of the component SVG Parser. The manipulation leads to memory leak. The attack can be launched remotely. The name of the patch is 2191e66aa7df750e8ef01781b1930bea87b713bb. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-213463.

CVSS 3.1 · 4.3 Medium EPSS 1.3% KEV · Not listed
Vendors
Gpac
Products
Gpac
CVE-2022-4006

WBCE CMS Header class.login.php increase_attempts excessive authentication

A vulnerability, which was classified as problematic, has been found in WBCE CMS. Affected by this issue is the function increase_attempts of the file wbce/framework/class.login.php of the component Header Handler. The manipulation of the argument X-Forwarded-For leads to improper restriction of excessive authentication attempts. The attack may be launched remotely. The name of the patch is d394ba39a7bfeb31eda797b6195fd90ef74b2e75. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-213716.

CVSS 3.1 · 3.7 Low EPSS 1.0% KEV · Not listed
Vendors
Wbce
Products
Wbce Cms
CVE-2022-4066

davidmoreno onion Log response.c onion_response_flush allocation of resources

A vulnerability was found in davidmoreno onion. It has been rated as problematic. Affected by this issue is the function onion_response_flush of the file src/onion/response.c of the component Log Handler. The manipulation leads to allocation of resources. The name of the patch is de8ea938342b36c28024fd8393ebc27b8442a161. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-214028.

CVSS 3.1 · 3.5 Low EPSS 1.2% KEV · Not listed
Vendors
Mozilla Onion Project
Products
Firefox Onion
CVE-2022-4246

Kakao PotPlayer MID File denial of service

A vulnerability classified as problematic has been found in Kakao PotPlayer. This affects an unknown part of the component MID File Handler. The manipulation leads to denial of service. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-214623.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Kakaocorp
Products
Potplayer
CVE-2022-4296

TP-Link TL-WR740N ARP resource consumption

A vulnerability classified as problematic has been found in TP-Link TL-WR740N. Affected is an unknown function of the component ARP Handler. The manipulation leads to resource consumption. The attack needs to be done within the local network. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-214812.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Tp-link
Products
Tl-wr740n Tl-wr740n Firmware
CVE-2021-4247

OWASP NodeGoat Query Parameter research.js denial of service

A vulnerability has been found in OWASP NodeGoat and classified as problematic. This vulnerability affects unknown code of the file app/routes/research.js of the component Query Parameter Handler. The manipulation leads to denial of service. The attack can be initiated remotely. The name of the patch is 4a4d1db74c63fb4ff8d366551c3af006c25ead12. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-216184.

CVSS 3.1 · 4.3 Medium EPSS 1.1% KEV · Not listed
Vendors
Owasp
Products
Nodegoat
CVE-2021-4249

xml-conduit DOCTYPE Entity Expansion Parse.hs infinite loop

A vulnerability was found in xml-conduit. It has been classified as problematic. Affected is an unknown function of the file xml-conduit/src/Text/XML/Stream/Parse.hs of the component DOCTYPE Entity Expansion Handler. The manipulation leads to infinite loop. It is possible to launch the attack remotely. Upgrading to version 1.9.1.0 is able to address this issue. The name of the patch is 4be1021791dcdee8b164d239433a2043dc0939ea. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-216204.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Haskell
Products
Xml-conduit
CVE-2020-36620

Brondahl EnumStringValues EnumExtensions.cs GetStringValuesWithPreferences_Uncache resource consumption

A vulnerability was found in Brondahl EnumStringValues up to 4.0.0. It has been declared as problematic. This vulnerability affects the function GetStringValuesWithPreferences_Uncache of the file EnumStringValues/EnumExtensions.cs. The manipulation leads to resource consumption. Upgrading to version 4.0.1 is able to address this issue. The name of the patch is c0fc7806beb24883cc2f9543ebc50c0820297307. It is recommended to upgrade the affected component. VDB-216466 is the identifier assigned to this vulnerability.

CVSS 3.1 · 3.5 Low EPSS 1.4% KEV · Not listed
Vendors
Enumstringvalues Project
Products
Enumstringvalues