Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-21595 State: PUBLISHED Published: 2021-09-16T00:00:00 Last Updated: 2024-08-04T14:30:32.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: libde265 v1.0.4 contains a heap buffer overflow in the mc_luma function, which can be exploited via a crafted a file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/strukturag/libde265/issues/239 - https://www.debian.org/security/2023/dsa-5346
CVE ID: CVE-2020-21596 State: PUBLISHED Published: 2021-09-16T00:00:00 Last Updated: 2024-08-04T14:30:33.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: libde265 v1.0.4 contains a global buffer overflow in the decode_CABAC_bit function, which can be exploited via a crafted a file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/strukturag/libde265/issues/236 - https://lists.debian.org/debian-lts-announce/2023/01/msg00020.html - https://www.debian.org/security/2023/dsa-5346
CVE ID: CVE-2020-21597 State: PUBLISHED Published: 2021-09-16T00:00:00 Last Updated: 2024-08-04T14:30:33.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: libde265 v1.0.4 contains a heap buffer overflow in the mc_chroma function, which can be exploited via a crafted a file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/strukturag/libde265/issues/238 - https://lists.debian.org/debian-lts-announce/2023/01/msg00020.html - https://www.debian.org/security/2023/dsa-5346
CVE ID: CVE-2020-21598 State: PUBLISHED Published: 2021-09-16T00:00:00 Last Updated: 2024-08-04T14:30:33.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: libde265 v1.0.4 contains a heap buffer overflow in the ff_hevc_put_unweighted_pred_8_sse function, which can be exploited via a crafted a file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/strukturag/libde265/issues/237 - https://cwe.mitre.org/data/definitions/122.html - https://lists.debian.org/debian-lts-announce/2023/01/msg00020.html - https://www.debian.org/security/2023/dsa-5346
CVE ID: CVE-2020-21599 State: PUBLISHED Published: 2021-09-16T00:00:00 Last Updated: 2024-08-04T14:30:33.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: libde265 v1.0.4 contains a heap buffer overflow in the de265_image::available_zscan function, which can be exploited via a crafted a file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/strukturag/libde265/issues/235 - https://lists.debian.org/debian-lts-announce/2022/12/msg00027.html - https://www.debian.org/security/2023/dsa-5346
CVE ID: CVE-2020-21600 State: PUBLISHED Published: 2021-09-16T00:00:00 Last Updated: 2024-08-04T14:30:33.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: libde265 v1.0.4 contains a heap buffer overflow in the put_weighted_pred_avg_16_fallback function, which can be exploited via a crafted a file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/strukturag/libde265/issues/243 - https://cwe.mitre.org/data/definitions/122.html - https://www.debian.org/security/2023/dsa-5346
CVE ID: CVE-2020-21601 State: PUBLISHED Published: 2021-09-16T00:00:00 Last Updated: 2024-08-04T14:30:33.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: libde265 v1.0.4 contains a stack buffer overflow in the put_qpel_fallback function, which can be exploited via a crafted a file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/strukturag/libde265/issues/241 - https://www.debian.org/security/2023/dsa-5346
CVE ID: CVE-2020-21602 State: PUBLISHED Published: 2021-09-16T00:00:00 Last Updated: 2024-08-04T14:30:33.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: libde265 v1.0.4 contains a heap buffer overflow in the put_weighted_bipred_16_fallback function, which can be exploited via a crafted a file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/strukturag/libde265/issues/242 - https://cwe.mitre.org/data/definitions/122.html - https://www.debian.org/security/2023/dsa-5346
CVE ID: CVE-2020-21603 State: PUBLISHED Published: 2021-09-16T00:00:00 Last Updated: 2024-08-04T14:30:33.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: libde265 v1.0.4 contains a heap buffer overflow in the put_qpel_0_0_fallback_16 function, which can be exploited via a crafted a file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/strukturag/libde265/issues/240 - https://www.debian.org/security/2023/dsa-5346
CVE ID: CVE-2020-21604 State: PUBLISHED Published: 2021-09-16T00:00:00 Last Updated: 2024-08-04T14:30:33.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: libde265 v1.0.4 contains a heap buffer overflow fault in the _mm_loadl_epi64 function, which can be exploited via a crafted a file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/strukturag/libde265/issues/231 - https://www.debian.org/security/2023/dsa-5346
CVE ID: CVE-2020-21605 State: PUBLISHED Published: 2021-09-16T00:00:00 Last Updated: 2024-08-04T14:30:33.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: libde265 v1.0.4 contains a segmentation fault in the apply_sao_internal function, which can be exploited via a crafted a file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/strukturag/libde265/issues/234 - https://www.debian.org/security/2023/dsa-5346
CVE ID: CVE-2020-21606 State: PUBLISHED Published: 2021-09-16T00:00:00 Last Updated: 2024-08-04T14:30:33.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: libde265 v1.0.4 contains a heap buffer overflow fault in the put_epel_16_fallback function, which can be exploited via a crafted a file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/strukturag/libde265/issues/232 - https://www.debian.org/security/2023/dsa-5346
CVE ID: CVE-2020-21627 State: PUBLISHED Published: 2021-11-16T18:06:35 Last Updated: 2024-08-04T14:30:33.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ruijie RG-UAC commit 9071227 was discovered to contain a vulnerability in the component /current_action.php?action=reboot, which allows attackers to cause a denial of service (DoS) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Sm1L3ing/ACSEC/blob/master/Ruijie-RG-UAC
CVE ID: CVE-2020-21639 State: PUBLISHED Published: 2021-11-16T18:06:33 Last Updated: 2024-08-04T14:30:33.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ruijie RG-UAC 6000-E50 commit 9071227 was discovered to contain a cross-site scripting (XSS) vulnerability via the rule_name parameter. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Sm1L3ing/ACSEC/blob/master/Ruijie-RG-UAC
CVE ID: CVE-2020-21641 State: PUBLISHED Published: 2022-08-15T19:10:38 Last Updated: 2024-08-04T14:30:33.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: Out-of-Band XML External Entity (OOB-XXE) vulnerability in Zoho ManageEngine Analytics Plus before 4.3.5 allows remote attackers to read arbitrary files, enumerate folders and scan internal ports via crafted XML license file. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/analytics-plus/release-notes.html
CVE ID: CVE-2020-21642 State: PUBLISHED Published: 2022-08-15T19:10:38 Last Updated: 2024-08-04T14:30:33.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal vulnerability ZDBQAREFSUBDIR parameter in /zropusermgmt API in Zoho ManageEngine Analytics Plus before 4350 allows remote attackers to run arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/analytics-plus/release-notes.html
CVE ID: CVE-2020-21643 State: PUBLISHED Published: 2023-04-28T00:00:00.000Z Last Updated: 2025-01-31T18:02:09.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in HongCMS 3.0 allows attackers to run arbitrary code via the callback parameter to /ajax/myshop. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Neeke/HongCMS/issues/15
CVE ID: CVE-2020-21648 State: PUBLISHED Published: 2021-10-06T21:33:56 Last Updated: 2024-08-04T14:30:33.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: WDJA CMS v1.5.2 contains an arbitrary file deletion vulnerability in the component admin/cache/manage.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/shadoweb/wdja/issues/9
CVE ID: CVE-2020-21649 State: PUBLISHED Published: 2021-10-06T21:33:57 Last Updated: 2024-08-04T14:30:33.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: Myucms v2.2.1 contains a server-side request forgery (SSRF) in the component \controller\index.php, which can be exploited via the sql() method. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/lolipop1234/XXD/issues/4
CVE ID: CVE-2020-21650 State: PUBLISHED Published: 2021-10-06T21:33:58 Last Updated: 2024-08-04T14:30:33.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: Myucms v2.2.1 contains a remote code execution (RCE) vulnerability in the component \controller\Config.php, which can be exploited via the add() method. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/lolipop1234/XXD/issues/6 - https://cwe.mitre.org/data/definitions/96.html
CVE ID: CVE-2020-21651 State: PUBLISHED Published: 2021-10-06T21:33:59 Last Updated: 2024-08-04T14:30:33.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: Myucms v2.2.1 contains a remote code execution (RCE) vulnerability in the component \controller\point.php, which can be exploited via the add() method. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/lolipop1234/XXD/issues/3 - https://cwe.mitre.org/data/definitions/96.html
CVE ID: CVE-2020-21652 State: PUBLISHED Published: 2021-10-06T21:33:59 Last Updated: 2024-08-04T14:30:33.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: Myucms v2.2.1 contains a remote code execution (RCE) vulnerability in the component \controller\Config.php, which can be exploited via the addqq() method. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/lolipop1234/XXD/issues/7 - https://cwe.mitre.org/data/definitions/96.html
CVE ID: CVE-2020-21653 State: PUBLISHED Published: 2021-10-06T21:34:00 Last Updated: 2024-08-04T14:30:33.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: Myucms v2.2.1 contains a server-side request forgery (SSRF) in the component \controller\index.php, which can be exploited via the sj() method. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/lolipop1234/XXD/issues/5
CVE ID: CVE-2020-21654 State: PUBLISHED Published: 2021-10-06T21:34:01 Last Updated: 2024-08-04T14:30:33.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: emlog v6.0 contains a vulnerability in the component admin\template.php, which allows attackers to getshell via a crafted Zip file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/emlog/emlog/issues/55
CVE ID: CVE-2020-21656 State: PUBLISHED Published: 2021-10-06T21:34:02 Last Updated: 2024-08-04T14:30:33.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: XYHCMS v3.6 contains a stored cross-site scripting (XSS) vulnerability in the component xyhai.php?s=/Link/index. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gosea/xyhcms3/issues/2
CVE ID: CVE-2020-21658 State: PUBLISHED Published: 2021-10-06T21:34:03 Last Updated: 2024-08-04T14:30:33.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Request Forgery (CSRF) in WDJA CMS v1.5.2 allows attackers to arbitrarily add administrator accounts via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/shadoweb/wdja/issues/10
CVE ID: CVE-2020-21662 State: PUBLISHED Published: 2023-07-31T00:00:00 Last Updated: 2024-10-22T19:37:31.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in yunyecms 2.0.2 allows remote attackers to run arbitrary SQL commands via XFF. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://note.youdao.com/noteshare?id=5c3b984ee36dfd1da690e0b5963926bc
CVE ID: CVE-2020-21665 State: PUBLISHED Published: 2020-11-17T14:58:46 Last Updated: 2024-08-04T14:30:33.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: In fastadmin V1.0.0.20191212_beta, when a user with administrator rights has logged in, a malicious parameter can be passed for SQL injection in URL /admin/ajax/weigh. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/karsonzhang/fastadmin/commit/e14008ca029d644e2486873fa22629a1d62a7380
CVE ID: CVE-2020-21667 State: PUBLISHED Published: 2020-11-13T15:03:46 Last Updated: 2024-08-04T14:30:33.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: In fastadmin-tp6 v1.0, in the file app/admin/controller/Ajax.php the 'table' parameter passed is not filtered so a malicious parameter can be passed for SQL injection. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/che-my/fastadmin-tp6/issues/2
CVE ID: CVE-2020-21674 State: PUBLISHED Published: 2020-10-15T14:59:02 Last Updated: 2024-08-04T14:30:33.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in archive_string_append_from_wcs() (archive_string.c) in libarchive-3.4.1dev allows remote attackers to cause a denial of service (out-of-bounds write in heap memory resulting into a crash) via a crafted archive file. NOTE: this only affects users who downloaded the development code from GitHub. Users of the product's official releases are unaffected. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libarchive/libarchive/issues/1298 - https://github.com/libarchive
VE Program Container: References: - https://github.com/libarchive/libarchive/issues/1298 - https://github.com/libarchive/libarchive/commit/4f085eea879e2be745f4d9bf57e8513ae48157f4
CVE ID: CVE-2020-21675 State: PUBLISHED Published: 2021-08-10T20:19:45 Last Updated: 2024-08-04T14:30:33.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack-based buffer overflow in the genptk_text component in genptk.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into ptk format. Additional Analyst Notes: - CVE Program Container: References: - https://cwe.mitre.org/data/definitions/121.html - https://sourceforge.net/p/mcj/tickets/78/ - https://lists.debian.org/debian-lts-announce/2021/10/msg00002.html
CVE ID: CVE-2020-21676 State: PUBLISHED Published: 2021-08-10T00:00:00 Last Updated: 2024-08-04T14:30:33.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack-based buffer overflow in the genpstrx_text() component in genpstricks.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into pstricks format. Additional Analyst Notes: - CVE Program Container: References: - https://cwe.mitre.org/data/definitions/121.html - https://sourceforge.net/p/mcj/tickets/76/ - https://lists.debian.org/debian-lts-announce/2021/10/msg00002.html - https://lists.debian.org/debian-lts-announce/2023/01/msg00044.html
CVE ID: CVE-2020-21677 State: PUBLISHED Published: 2021-08-10T20:19:47 Last Updated: 2024-08-04T14:30:33.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based buffer overflow in the sixel_encoder_output_without_macro function in encoder.c of Libsixel 1.8.4 allows attackers to cause a denial of service (DOS) via converting a crafted PNG file into Sixel format. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/saitoha/libsixel/issues/123
CVE ID: CVE-2020-21678 State: PUBLISHED Published: 2021-08-10T20:19:48 Last Updated: 2024-08-04T14:30:33.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: A global buffer overflow in the genmp_writefontmacro_latex component in genmp.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into mp format. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/mcj/tickets/71/
CVE ID: CVE-2020-21679 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-07T15:14:28.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in WritePCXImage function in pcx.c in GraphicsMagick 1.4 allows remote attackers to cause a denial of service via converting of crafted image file to pcx format. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceforge.net/p/graphicsmagick/bugs/619/
CVE ID: CVE-2020-21680 State: PUBLISHED Published: 2021-08-10T20:19:42 Last Updated: 2024-08-04T14:30:33.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack-based buffer overflow in the put_arrow() component in genpict2e.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into pict2e format. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/mcj/tickets/74/
CVE ID: CVE-2020-21681 State: PUBLISHED Published: 2021-08-10T20:19:42 Last Updated: 2024-08-04T14:30:33.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: A global buffer overflow in the set_color component in genge.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into ge format. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/mcj/tickets/73/
CVE ID: CVE-2020-21682 State: PUBLISHED Published: 2021-08-10T20:19:41 Last Updated: 2024-08-04T14:30:33.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: A global buffer overflow in the set_fill component in genge.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into ge format. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/mcj/tickets/72/
CVE ID: CVE-2020-21683 State: PUBLISHED Published: 2021-08-10T20:19:40 Last Updated: 2024-08-04T14:30:33.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: A global buffer overflow in the shade_or_tint_name_after_declare_color in genpstricks.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into pstricks format. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/mcj/tickets/77/
CVE ID: CVE-2020-21684 State: PUBLISHED Published: 2021-08-10T20:19:40 Last Updated: 2024-08-04T14:30:33.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: A global buffer overflow in the put_font in genpict2e.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into pict2e format. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/mcj/tickets/75/
CVE ID: CVE-2020-21685 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-07T15:11:02.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in hash_findi function in hashtbl.c in nasm 2.15rc0 allows remote attackers to cause a denial of service via crafted asm file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.nasm.us/show_bug.cgi?id=3392644
CVE ID: CVE-2020-21686 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-07T15:09:12.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack-use-after-scope issue discovered in expand_mmac_params function in preproc.c in nasm before 2.15.04 allows remote attackers to cause a denial of service via crafted asm file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.nasm.us/show_bug.cgi?id=3392643
CVE ID: CVE-2020-21687 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T19:58:29.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in scan function in stdscan.c in nasm 2.15rc0 allows remote attackers to cause a denial of service via crafted asm file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.nasm.us/show_bug.cgi?id=3392645
CVE ID: CVE-2020-21688 State: PUBLISHED Published: 2021-08-10T20:19:37 Last Updated: 2024-08-04T14:30:33.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-use-after-free in the av_freep function in libavutil/mem.c of FFmpeg 4.2 allows attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/8186 - https://www.debian.org/security/2021/dsa-4998
CVE ID: CVE-2020-21690 State: REJECTED Published: 2021-08-10T20:19:36 Last Updated: 2021-08-11T16:12:45 Description: No description available.
CVE ID: CVE-2020-21697 State: PUBLISHED Published: 2021-08-10T20:19:34 Last Updated: 2024-08-04T14:30:33.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-use-after-free in the mpeg_mux_write_packet function in libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of service (DOS) via a crafted avi file. Additional Analyst Notes: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/8188 - https://www.debian.org/security/2021/dsa-4998
CVE ID: CVE-2020-21699 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T19:57:47.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web server Tengine 2.2.2 developed in the Nginx version from 0.5.6 thru 1.13.2 is vulnerable to an integer overflow vulnerability in the nginx range filter module, resulting in the leakage of potentially sensitive information triggered by specially crafted requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ZxDecide/Nginx-variants/blob/master/%E9%99%84%E4%BB%B6%28Tengine%29.docx
CVE ID: CVE-2020-21710 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T20:07:54.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: A divide by zero issue discovered in eps_print_page in gdevepsn.c in Artifex Software GhostScript 9.50 allows remote attackers to cause a denial of service via opening of crafted PDF file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugs.ghostscript.com/show_bug.cgi?id=701843 - https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=4e713293de84b689c4ab358f3e110ea54aa81925 - https://lists.debian.org/debian-lts-announce/2023/09/msg00029.html
CVE ID: CVE-2020-21722 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-07T14:26:29.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in oggvideotools 0.9.1 allows remote attackers to run arbitrary code via opening of crafted ogg file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceforge.net/p/oggvideotools/bugs/11/ - https://github.com/xiaoxiongwang/security/tree/master/oggvideotools#segv-and-heap-use-after-free-detected-in-line-17-of-streamextractorcpp - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LO6NXK73PNR4KAAHLXAG
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LO6NXK73PNR4KAAHLXAGPWJAPP772IOD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5E3JKOO7D6Y2SW2TQB5JDVG7I4Y3UFGW/