Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ZDI-21-1541/ - https://cert-portal.siemens.com/productcert/pdf/ssa-501673.pdf - https://www.oracle.com/security-alerts/cpujan2022.html - https://www.oracle.com/security-alerts/cpuapr2022.html - https://www.oracle.com/security-alerts/cpujul2022.html
CVE ID: CVE-2021-45106 State: PUBLISHED Published: 2022-02-09T15:17:12 Last Updated: 2024-08-04T04:39:20.268Z Vendors: Siemens Products: SICAM TOOLBOX II Problem Types: CWE-798 Description: A vulnerability has been identified in SICAM TOOLBOX II (All versions). Affected applications use a circumventable access control within a database service. This could allow an attacker to access the database. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-669737.pdf
CVE ID: CVE-2021-45111 State: PUBLISHED Published: 2023-04-25T18:33:00.392Z Last Updated: 2024-08-04T04:39:20.253Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N) Vendors: Odoo Products: Odoo Community, Odoo Enterprise Problem Types: CWE-284 Description: Improper access control in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows remote authenticated users to trigger the creation of demonstration data, including user accounts with known credentials. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/odoo/odoo/issues/107683 - https://www.debian.org/security/2023/dsa-5399
CVE ID: CVE-2021-45115 State: PUBLISHED Published: 2022-01-04T23:16:00 Last Updated: 2024-08-04T04:39:20.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1. UserAttributeSimilarityValidator incurred significant overhead in evaluating a submitted password that was artificially large in relation to the comparison values. In a situation where access to user registration was unrestricted, this provided a potential vector for a denial-of-service attack. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/#%21forum/django-announce - https://docs.dja
tes: - CVE Program Container: References: - https://groups.google.com/forum/#%21forum/django-announce - https://docs.djangoproject.com/en/4.0/releases/security/ - https://www.djangoproject.com/weblog/2022/jan/04/security-releases/ - https://security.netapp.com/advisory/ntap-20220121-0005/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B4SQG2EAF4WCI2SLRL6XRDJ3RPK3ZRDV/
CVE ID: CVE-2021-45116 State: PUBLISHED Published: 2022-01-04T23:12:43.000Z Last Updated: 2025-05-22T18:36:21.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1. Due to leveraging the Django Template Language's variable resolution logic, the dictsort template filter was potentially vulnerable to information disclosure, or an unintended method call, if passed a suitably crafted key. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://groups.google.com/forum/#%21forum/django-announce - https://docs.djangoproject.com/en/4.0/releases/security/ -
https://groups.google.com/forum/#%21forum/django-announce - https://docs.djangoproject.com/en/4.0/releases/security/ - https://www.djangoproject.com/weblog/2022/jan/04/security-releases/ - https://security.netapp.com/advisory/ntap-20220121-0005/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B4SQG2EAF4WCI2SLRL6XRDJ3RPK3ZRDV/
CVE ID: CVE-2021-45117 State: PUBLISHED Published: 2022-03-21T14:05:45 Last Updated: 2024-08-04T04:39:20.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OPC autogenerated ANSI C stack stubs (in the NodeSets) do not handle all error cases. This can lead to a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - https://www.youtube.com/watch?v=qv-RBdCaV4k - https://files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2021-45117.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-285795.pdf
CVE ID: CVE-2021-45222 State: PUBLISHED Published: 2022-01-24T19:55:30 Last Updated: 2024-08-04T04:39:20.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in COINS Construction Cloud 11.12. Due to logical flaws in the human ressources interface, it is vulnerable to privilege escalation by HR personnel. Additional Analyst Notes: - CVE Program Container: References: - https://appsource.microsoft.com/en-us/product/web-apps/constructionindustrysolutionslimited-5057232.coinsconstructioncloud?tab=overview - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-029.txt - https://www.syss.de/pentest-blog/multiple-schwachstellen-im-coins-cons
ente/Publikationen/Advisories/SYSS-2021-029.txt - https://www.syss.de/pentest-blog/multiple-schwachstellen-im-coins-construction-cloud-erp-syss-2021-028/-029/-030/-031/-051/-052/-053
CVE ID: CVE-2021-45223 State: PUBLISHED Published: 2022-01-24T19:57:31 Last Updated: 2024-08-04T04:39:20.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in COINS Construction Cloud 11.12. Due to insufficient input neutralization, it is vulnerable to denial of service attacks via forced server crashes. Additional Analyst Notes: - CVE Program Container: References: - https://appsource.microsoft.com/en-us/product/web-apps/constructionindustrysolutionslimited-5057232.coinsconstructioncloud?tab=overview - https://www.syss.de/pentest-blog/multiple-schwachstellen-im-coins-construction-cloud-erp-syss-2021-028/-029/-030/-031/-051/-052/-053 - https://www.syss.de
ultiple-schwachstellen-im-coins-construction-cloud-erp-syss-2021-028/-029/-030/-031/-051/-052/-053 - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-028.txt
CVE ID: CVE-2021-45224 State: PUBLISHED Published: 2022-01-24T19:58:24 Last Updated: 2024-08-04T04:39:20.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in COINS Construction Cloud 11.12. In several locations throughout the application, JavaScript code is passed as a URL parameter. Attackers can trivially alter this code to cause malicious behaviour. The application is therefore vulnerable to reflected XSS via malicious URLs. Additional Analyst Notes: - CVE Program Container: References: - https://appsource.microsoft.com/en-us/product/web-apps/constructionindustrysolutionslimited-5057232.coinsconstructioncloud?tab=overview - https://www.syss.de/pentest
/web-apps/constructionindustrysolutionslimited-5057232.coinsconstructioncloud?tab=overview - https://www.syss.de/pentest-blog/multiple-schwachstellen-im-coins-construction-cloud-erp-syss-2021-028/-029/-030/-031/-051/-052/-053 - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-053.txt
CVE ID: CVE-2021-45225 State: PUBLISHED Published: 2022-01-24T19:58:04 Last Updated: 2024-08-04T04:39:20.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in COINS Construction Cloud 11.12. Due to improper input neutralization, it is vulnerable to reflected cross-site scripting (XSS) via malicious links (affecting the search window and activity view window). Additional Analyst Notes: - CVE Program Container: References: - https://appsource.microsoft.com/en-us/product/web-apps/constructionindustrysolutionslimited-5057232.coinsconstructioncloud?tab=overview - https://www.syss.de/pentest-blog/multiple-schwachstellen-im-coins-construction-cloud-erp-syss-2021
ncloud?tab=overview - https://www.syss.de/pentest-blog/multiple-schwachstellen-im-coins-construction-cloud-erp-syss-2021-028/-029/-030/-031/-051/-052/-053 - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-052.txt
CVE ID: CVE-2021-45226 State: PUBLISHED Published: 2022-01-24T19:57:39 Last Updated: 2024-08-04T04:39:20.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in COINS Construction Cloud 11.12. Due to improper validation of user-controlled HTTP headers, attackers can cause it to send password-reset e-mails pointing to arbitrary websites. Additional Analyst Notes: - CVE Program Container: References: - https://appsource.microsoft.com/en-us/product/web-apps/constructionindustrysolutionslimited-5057232.coinsconstructioncloud?tab=overview - https://www.syss.de/pentest-blog/multiple-schwachstellen-im-coins-construction-cloud-erp-syss-2021-028/-029/-030/-031/-051/
ps://www.syss.de/pentest-blog/multiple-schwachstellen-im-coins-construction-cloud-erp-syss-2021-028/-029/-030/-031/-051/-052/-053 - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-051.txt
CVE ID: CVE-2021-45227 State: PUBLISHED Published: 2022-04-14T14:12:35 Last Updated: 2024-08-04T04:39:20.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in COINS Construction Cloud 11.12. Due to an inappropriate use of HTML IFRAME elements, the file upload functionality is vulnerable to a persistent Cross-Site Scripting (XSS) attack. Additional Analyst Notes: - CVE Program Container: References: - https://appsource.microsoft.com/en-us/product/web-apps/constructionindustrysolutionslimited-5057232.coinsconstructioncloud?tab=overview - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-030.txt
CVE ID: CVE-2021-45228 State: PUBLISHED Published: 2022-04-14T14:00:53 Last Updated: 2024-08-04T04:39:20.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS issue was discovered in COINS Construction Cloud 11.12. Due to insufficient neutralization of user input in the description of a task, it is possible to store malicious JavaScript code in the task description. This is later executed when it is reflected back to the user. Additional Analyst Notes: - CVE Program Container: References: - https://appsource.microsoft.com/en-us/product/web-apps/constructionindustrysolutionslimited-5057232.coinsconstructioncloud?tab=overview - https://www.syss.de/fileadmin/dokumente/Publikati
industrysolutionslimited-5057232.coinsconstructioncloud?tab=overview - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-031.txt
CVE ID: CVE-2021-45229 State: PUBLISHED Published: 2022-02-25T08:30:15 Last Updated: 2024-08-04T04:39:20.190Z Vendors: Apache Software Foundation Products: Apache Airflow Problem Types: CWE-79 Description: It was discovered that the "Trigger DAG with config" screen was susceptible to XSS attacks via the `origin` query argument. This issue affects Apache Airflow versions 2.2.3 and below. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/phx76cgtmhwwdy780rvwhobx8qoy4bnk
CVE ID: CVE-2021-45230 State: PUBLISHED Published: 2022-01-20T10:25:10 Last Updated: 2024-08-04T04:39:20.469Z Vendors: Apache Software Foundation Products: Apache Airflow Problem Types: Permission checks were limited. Description: In Apache Airflow prior to 2.2.0. This CVE applies to a specific case where a User who has "can_create" permissions on DAG Runs can create Dag Runs for dags that they don't have "edit" permissions for. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/m778ojn0k595rwco4ht9wjql89mjoxnl
CVE ID: CVE-2021-45231 State: PUBLISHED Published: 2022-01-08T15:51:05 Last Updated: 2024-08-04T04:39:20.384Z Vendors: Trend Micro Products: Trend Micro Apex One, Trend Micro Worry-Free Business Security Problem Types: Link Following Privilege Escalation Description: A link following privilege escalation vulnerability in Trend Micro Apex One (on-prem and SaaS) and Trend Micro Worry-Free Business Security (10.0 SP1 and Services) could allow a local attacker to create a specially crafted file with arbitrary content which could grant local privilege escalation on the affected system. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in or
system. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000289996 - https://www.zerodayinitiative.com/advisories/ZDI-22-013/
CVE ID: CVE-2021-45232 State: PUBLISHED Published: 2021-12-27T15:06:50 Last Updated: 2024-08-04T04:39:20.275Z Vendors: Apache Software Foundation Products: Apache APISIX Dashboard Problem Types: CWE-306 Description: In Apache APISIX Dashboard before 2.10.1, the Manager API uses two frameworks and introduces framework `droplet` on the basis of framework `gin`, all APIs and authentication middleware are developed based on framework `droplet`, but some API directly use the interface of framework `gin` thus bypassing the authentication. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/979qbl6vlm8269fopfyygnxofgqyn6k5 - http://www.openwall.com/lists
ontainer: References: - https://lists.apache.org/thread/979qbl6vlm8269fopfyygnxofgqyn6k5 - http://www.openwall.com/lists/oss-security/2021/12/27/1
CVE ID: CVE-2021-45252 State: PUBLISHED Published: 2021-12-21T11:04:26 Last Updated: 2024-08-04T04:39:20.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities are found on Simple Forum-Discussion System 1.0 For example on three applications which are manage_topic.php, manage_user.php, and ajax.php. The attacker can be retrieving all information from the database of this system by using this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/Forum-Discussion-System-1.0
CVE ID: CVE-2021-45253 State: PUBLISHED Published: 2021-12-21T11:23:30 Last Updated: 2024-08-04T04:39:20.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: The id parameter in view_storage.php from Simple Cold Storage Management System 1.0 appears to be vulnerable to SQL injection attacks. A payload injects a SQL sub-query that calls MySQL's load_file function with a UNC file path that references a URL on an external domain. The application interacted with that domain, indicating that the injected SQL query was executed. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/CSMS-1.0
CVE ID: CVE-2021-45255 State: PUBLISHED Published: 2021-12-21T11:50:25 Last Updated: 2024-08-04T04:39:20.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: The email parameter from ajax.php of Video Sharing Website 1.0 appears to be vulnerable to SQL injection attacks. A payload injects a SQL sub-query that calls MySQL's load_file function with a UNC file path that references a URL on an external domain. The application interacted with that domain, indicating that the injected SQL query was executed. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/Video-Sharing-Website
CVE ID: CVE-2021-45256 State: PUBLISHED Published: 2021-12-22T16:30:59 Last Updated: 2024-08-04T04:39:20.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Null Pointer Dereference vulnerability existfs in nasm 2.16rc0 via asm/preproc.c. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.nasm.us/show_bug.cgi?id=3392789
CVE ID: CVE-2021-45257 State: PUBLISHED Published: 2021-12-22T16:37:12 Last Updated: 2024-08-04T04:39:20.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: An infinite loop vulnerability exists in nasm 2.16rc0 via the gpaste_tokens function. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.nasm.us/show_bug.cgi?id=3392790
CVE ID: CVE-2021-45258 State: PUBLISHED Published: 2021-12-22T16:53:06 Last Updated: 2024-08-04T04:39:20.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack overflow vulnerability exists in gpac 1.1.0 via the gf_bifs_dec_proto_list function, which causes a segmentation fault and application crash. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1970
CVE ID: CVE-2021-45259 State: PUBLISHED Published: 2021-12-22T16:58:26 Last Updated: 2024-08-04T04:39:20.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Invalid pointer reference vulnerability exists in gpac 1.1.0 via the gf_svg_node_del function, which causes a segmentation fault and application crash. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1986
CVE ID: CVE-2021-45260 State: PUBLISHED Published: 2021-12-22T17:04:36 Last Updated: 2024-08-04T04:39:20.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: A null pointer dereference vulnerability exists in gpac 1.1.0 in the lsr_read_id.part function, which causes a segmentation fault and application crash. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1979
CVE ID: CVE-2021-45261 State: PUBLISHED Published: 2021-12-22T17:12:19 Last Updated: 2024-08-04T04:39:20.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Invalid Pointer vulnerability exists in GNU patch 2.7 via the another_hunk function, which causes a Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://savannah.gnu.org/bugs/?61685
CVE ID: CVE-2021-45262 State: PUBLISHED Published: 2021-12-22T00:00:00 Last Updated: 2024-08-04T04:39:20.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: An invalid free vulnerability exists in gpac 1.1.0 via the gf_sg_command_del function, which causes a segmentation fault and application crash. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1980 - https://www.debian.org/security/2023/dsa-5411
CVE ID: CVE-2021-45263 State: PUBLISHED Published: 2021-12-22T00:00:00 Last Updated: 2024-08-04T04:39:20.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: An invalid free vulnerability exists in gpac 1.1.0 via the gf_svg_delete_attribute_value function, which causes a segmentation fault and application crash. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1975 - https://www.debian.org/security/2023/dsa-5411
CVE ID: CVE-2021-45266 State: PUBLISHED Published: 2021-12-22T17:53:40 Last Updated: 2024-08-04T04:39:20.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: A null pointer dereference vulnerability exists in gpac 1.1.0 via the lsr_read_anim_values_ex function, which causes a segmentation fault and application crash. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1985
CVE ID: CVE-2021-45267 State: PUBLISHED Published: 2021-12-22T00:00:00 Last Updated: 2024-08-04T04:39:20.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: An invalid memory address dereference vulnerability exists in gpac 1.1.0 via the svg_node_start function, which causes a segmentation fault and application crash. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1965 - https://www.debian.org/security/2023/dsa-5411
CVE ID: CVE-2021-45268 State: PUBLISHED Published: 2022-02-03T21:46:03 Last Updated: 2024-08-04T04:39:20.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross Site Request Forgery (CSRF) vulnerability exists in Backdrop CMS 1.20, which allows Remote Attackers to gain Remote Code Execution (RCE) on the Hosting Webserver via uploading a maliciously add-on with crafted PHP file. NOTE: the vendor disputes this because the attack requires a session cookie of a high-privileged authenticated user who is entitled to install arbitrary add-ons Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/50323 - https://github.com/V1n1v131r4/CSR
es: - CVE Program Container: References: - https://www.exploit-db.com/exploits/50323 - https://github.com/V1n1v131r4/CSRF-to-RCE-on-Backdrop-CMS
CVE ID: CVE-2021-45281 State: PUBLISHED Published: 2022-02-07T21:23:48 Last Updated: 2024-08-04T04:39:20.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: QuickBox Pro v2.4.8 contains a cross-site scripting (XSS) vulnerability at "adminuseredit.php?usertoedit=XSS", as the user supplied input for the value of this parameter is not properly sanitized. Additional Analyst Notes: - CVE Program Container: References: - https://websec.nl/blog/61b2b37a43a1155c848f3b08/developing%20a%20remote%20code%20execution%20exploit%20for%20a%20popular%20media%20box
CVE ID: CVE-2021-45286 State: PUBLISHED Published: 2022-02-09T19:34:03 Last Updated: 2024-08-04T04:39:20.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal vulnerability exists in ZZCMS 2021 via the skin parameter in 1) index.php, 2) bottom.php, and 3) top_index.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Boomingjacob/ZZCMS2021#readme
CVE ID: CVE-2021-45288 State: PUBLISHED Published: 2021-12-21T16:55:31 Last Updated: 2024-08-04T04:39:20.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Double Free vulnerability exists in filedump.c in GPAC 1.0.1, which could cause a Denail of Service via a crafted file in the MP4Box command. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1956
CVE ID: CVE-2021-45289 State: PUBLISHED Published: 2021-12-21T17:14:26 Last Updated: 2024-08-04T04:39:20.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability exists in GPAC 1.0.1 due to an omission of security-relevant Information, which could cause a Denial of Service. The program terminates with signal SIGKILL. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1972
CVE ID: CVE-2021-45290 State: PUBLISHED Published: 2021-12-21T17:25:05 Last Updated: 2024-08-04T04:39:20.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Denial of Service vulnerability exits in Binaryen 103 due to an assertion abort in wasm::handle_unreachable. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/WebAssembly/binaryen/issues/4383 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YCWLB4PWYQO55F7IGNC7KUYN2MFZE3JP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UKGCHPS7UAIOOBGSXDJAUFE5CROTTF6J/
CVE ID: CVE-2021-45291 State: PUBLISHED Published: 2021-12-21T00:00:00 Last Updated: 2024-08-04T04:39:20.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gf_dump_setup function in GPAC 1.0.1 allows malicoius users to cause a denial of service (Invalid memory address dereference) via a crafted file in the MP4Box command. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1955 - https://www.debian.org/security/2023/dsa-5411
CVE ID: CVE-2021-45292 State: PUBLISHED Published: 2021-12-21T00:00:00 Last Updated: 2024-08-04T04:39:20.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gf_isom_hint_rtp_read function in GPAC 1.0.1 allows attackers to cause a denial of service (Invalid memory address dereference) via a crafted file in the MP4Box command. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1958 - https://www.debian.org/security/2023/dsa-5411