Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-21930 State: PUBLISHED Published: 2021-08-10T21:18:18 Last Updated: 2024-08-04T14:30:33.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross site scripting (XSS) vulnerability in the web_attr_2 field of Eyoucms v1.4.1 allows authenticated attackers to execute arbitrary web scripts or HTML. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/eyoucms/eyoucms/issues/9
CVE ID: CVE-2020-21932 State: PUBLISHED Published: 2021-07-21T13:23:56 Last Updated: 2024-08-04T14:30:33.710Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in /Login.html of Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n allows attackers to bypass login and obtain a partially authorized token and uid. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cc-crack/router/blob/master/motocx2.md - https://l0n0l.xyz/post/motocx2/
CVE ID: CVE-2020-21933 State: PUBLISHED Published: 2021-07-21T13:23:59 Last Updated: 2024-08-04T14:30:33.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n where the admin password and private key could be found in the log tar package. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cc-crack/router/blob/master/motocx2.md - https://l0n0l.xyz/post/motocx2/
CVE ID: CVE-2020-21934 State: PUBLISHED Published: 2021-07-21T13:24:01 Last Updated: 2024-08-04T14:30:33.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n where authentication to download the Syslog could be bypassed. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cc-crack/router/blob/master/motocx2.md - https://l0n0l.xyz/post/motocx2/
CVE ID: CVE-2020-21935 State: PUBLISHED Published: 2021-07-21T13:24:02 Last Updated: 2024-08-04T14:30:33.757Z Vendors: n/a Products: n/a Problem Types: n/a Description: A command injection vulnerability in HNAP1/GetNetworkTomographySettings of Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n allows attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cc-crack/router/blob/master/motocx2.md - https://l0n0l.xyz/post/motocx2/
CVE ID: CVE-2020-21936 State: PUBLISHED Published: 2021-07-21T13:24:04 Last Updated: 2024-08-04T14:30:33.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in HNAP1/GetMultipleHNAPs of Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n allows attackers to access the components GetStationSettings, GetWebsiteFilterSettings and GetNetworkSettings without authentication. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cc-crack/router/blob/master/motocx2.md - https://l0n0l.xyz/post/motocx2/
CVE ID: CVE-2020-21937 State: PUBLISHED Published: 2021-07-21T13:24:06 Last Updated: 2024-08-04T14:30:33.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: An command injection vulnerability in HNAP1/SetWLanApcliSettings of Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n allows attackers to execute arbitrary system commands. Additional Analyst Notes: - CVE Program Container: References: - https://cwe.mitre.org/data/definitions/78.html - https://github.com/cc-crack/router/blob/master/motocx2.md - https://l0n0l.xyz/post/motocx2/
CVE ID: CVE-2020-21967 State: PUBLISHED Published: 2022-07-13T19:01:57 Last Updated: 2024-08-04T14:30:33.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: File upload vulnerability in the Catalog feature in Prestashop 1.7.6.7 allows remote attackers to run arbitrary code via the add new file page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PrestaShop/PrestaShop/issues/20306 - http://packetstormsecurity.com/files/167742/PrestaShop-1.7.6.7-Cross-Site-Scripting.html
CVE ID: CVE-2020-21976 State: PUBLISHED Published: 2021-08-11T17:41:43 Last Updated: 2024-08-04T14:30:33.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload in the <input type="file" name="user_image"> component of NewsOne CMS v1.1.0 allows attackers to webshell and execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - https://cxsecurity.com/issue/WLB-2020010143
CVE ID: CVE-2020-21987 State: PUBLISHED Published: 2021-04-27T17:37:00 Last Updated: 2024-08-04T14:30:33.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: HomeAutomation 3.3.2 is affected by persistent Cross Site Scripting (XSS). XSS vulnerabilities occur when input passed via several parameters to several scripts is not properly sanitized before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session. Additional Analyst Notes: - CVE Program Container: References: - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5556.php - https://www.exploit-db.com/exploits/47806
CVE ID: CVE-2020-21989 State: PUBLISHED Published: 2021-04-27T17:41:55 Last Updated: 2024-08-04T14:30:33.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: HomeAutomation 3.3.2 is affected by Cross Site Request Forgery (CSRF). The application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to perform certain actions with administrative privileges if a logged-in user visits a malicious web site. Additional Analyst Notes: - CVE Program Container: References: - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5558.php - https://www.exploit-db.com/exploits/47808
CVE ID: CVE-2020-21990 State: PUBLISHED Published: 2021-04-29T13:55:02 Last Updated: 2024-08-04T14:30:33.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: Emmanuel MyDomoAtHome (MDAH) REST API REST API Domoticz ISS Gateway 0.2.40 is affected by an information disclosure vulnerability due to improper access control enforcement. An unauthenticated remote attacker can exploit this, via a specially crafted request to gain access to sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5555.php - https://www.exploit-db.com/exploits/47824
CVE ID: CVE-2020-21991 State: PUBLISHED Published: 2021-04-28T13:58:50 Last Updated: 2024-08-04T14:30:33.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: AVE DOMINAplus <=1.10.x suffers from an authentication bypass vulnerability due to missing control check when directly calling the autologin GET parameter in changeparams.php script. Setting the autologin value to 1 allows an unauthenticated attacker to permanently disable the authentication security control and access the management interface with admin privileges without providing credentials. Additional Analyst Notes: - CVE Program Container: References: - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5549.php - h
nalyst Notes: - CVE Program Container: References: - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5549.php - https://www.exploit-db.com/exploits/47822
CVE ID: CVE-2020-21992 State: PUBLISHED Published: 2021-04-29T14:04:03 Last Updated: 2024-08-04T14:30:33.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: Inim Electronics SmartLiving SmartLAN/G/SI <=6.x suffers from an authenticated remote command injection vulnerability. The issue exist due to the 'par' POST parameter not being sanitized when called with the 'testemail' module through web.cgi binary. The vulnerable CGI binary (ELF 32-bit LSB executable, ARM) is calling the 'sh' executable via the system() function to issue a command using the mailx service and its vulnerable string format parameter allowing for OS command injection with root privileges. An attacker can remote
nd its vulnerable string format parameter allowing for OS command injection with root privileges. An attacker can remotely execute system commands as the root user using default credentials and bypass access controls in place. Additional Analyst Notes: - CVE Program Container: References: - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5544.php
CVE ID: CVE-2020-21993 State: PUBLISHED Published: 2021-04-28T14:46:26 Last Updated: 2024-08-04T14:30:33.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: In WEMS Limited Enterprise Manager 2.58, input passed to the GET parameter 'email' is not properly sanitized before being returned to the user. This can be exploited to execute arbitrary HTML code in a user's browser session in context of an affected site. Additional Analyst Notes: - CVE Program Container: References: - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5551.php - https://cxsecurity.com/issue/WLB-2020010032
CVE ID: CVE-2020-21994 State: PUBLISHED Published: 2021-04-28T14:50:56 Last Updated: 2024-08-04T14:30:33.769Z Vendors: n/a Products: n/a Problem Types: n/a Description: AVE DOMINAplus <=1.10.x suffers from clear-text credentials disclosure vulnerability that allows an unauthenticated attacker to issue a request to an unprotected directory that hosts an XML file '/xml/authClients.xml' and obtain administrative login information that allows for a successful authentication bypass attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5550.php - https://www.exploit-db.com/exploits/47819 - https://cwe.mitre.org/data/definiti
k/en/vulnerabilities/ZSL-2019-5550.php - https://www.exploit-db.com/exploits/47819 - https://cwe.mitre.org/data/definitions/522.html
CVE ID: CVE-2020-21995 State: PUBLISHED Published: 2021-04-29T14:10:23 Last Updated: 2024-08-04T14:30:33.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: Inim Electronics Smartliving SmartLAN/G/SI <=6.x uses default hardcoded credentials. An attacker could exploit this to gain Telnet, SSH and FTP access to the system. Additional Analyst Notes: - CVE Program Container: References: - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5546.php - https://www.exploit-db.com/exploits/47763
CVE ID: CVE-2020-21996 State: PUBLISHED Published: 2021-04-28T14:54:48 Last Updated: 2024-08-04T14:30:33.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: AVE DOMINAplus <=1.10.x suffers from an unauthenticated reboot command execution. Attackers can exploit this issue to cause a denial of service scenario. Additional Analyst Notes: - CVE Program Container: References: - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5548.php - https://www.exploit-db.com/exploits/47820 - https://cwe.mitre.org/data/definitions/306.html
CVE ID: CVE-2020-21997 State: PUBLISHED Published: 2021-04-29T14:17:28 Last Updated: 2024-08-04T14:30:33.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: Smartwares HOME easy <=1.0.9 is vulnerable to an unauthenticated database backup download and information disclosure vulnerability. An attacker could disclose sensitive and clear-text information resulting in authentication bypass, session hijacking and full system control. Additional Analyst Notes: - CVE Program Container: References: - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5541.php - https://www.exploit-db.com/exploits/47596 - https://cwe.mitre.org/data/definitions/306.html
CVE ID: CVE-2020-21998 State: PUBLISHED Published: 2021-04-27T17:46:42 Last Updated: 2024-08-04T14:30:33.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: In HomeAutomation 3.3.2 input passed via the 'redirect' GET parameter in 'api.php' script is not properly verified before being used to redirect users. This can be exploited to redirect a user to an arbitrary website e.g. when a user clicks a specially crafted link to the affected script hosted on a trusted domain. Additional Analyst Notes: - CVE Program Container: References: - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5559.php - https://cxsecurity.com/issue/WLB-2019120132
CVE ID: CVE-2020-21999 State: PUBLISHED Published: 2021-05-04T15:21:53 Last Updated: 2024-08-04T14:30:33.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: iWT Ltd FaceSentry Access Control System 6.4.8 suffers from an authenticated OS command injection vulnerability using default credentials. This can be exploited to inject and execute arbitrary shell commands as the root user via the 'strInIP' POST parameter in pingTest PHP script. Additional Analyst Notes: - CVE Program Container: References: - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5525.php - https://www.exploit-db.com/exploits/47066
CVE ID: CVE-2020-22000 State: PUBLISHED Published: 2021-04-27T17:51:17 Last Updated: 2024-08-04T14:30:33.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: HomeAutomation 3.3.2 suffers from an authenticated OS command execution vulnerability using custom command v0.1 plugin. This can be exploited with a CSRF vulnerability to execute arbitrary shell commands as the web user via the 'set_command_on' and 'set_command_off' POST parameters in '/system/systemplugins/customcommand/customcommand.plugin.php' by using an unsanitized PHP exec() function. Additional Analyst Notes: - CVE Program Container: References: - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5560.php - https:
t Notes: - CVE Program Container: References: - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5560.php - https://www.exploit-db.com/exploits/47809
CVE ID: CVE-2020-22001 State: PUBLISHED Published: 2021-04-27T17:54:07 Last Updated: 2024-08-04T14:30:33.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: HomeAutomation 3.3.2 suffers from an authentication bypass vulnerability when spoofing client IP address using the X-Forwarded-For header with the local (loopback) IP address value allowing remote control of the smart home solution. Additional Analyst Notes: - CVE Program Container: References: - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5557.php - https://www.exploit-db.com/exploits/47807 - https://cwe.mitre.org/data/definitions/290.html
CVE ID: CVE-2020-22002 State: PUBLISHED Published: 2021-04-29T14:22:20 Last Updated: 2024-08-04T14:30:33.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Unauthenticated Server-Side Request Forgery (SSRF) vulnerability exists in Inim Electronics Smartliving SmartLAN/G/SI <=6.x within the GetImage functionality. The application parses user supplied data in the GET parameter 'host' to construct an image request to the service through onvif.cgi. Since no validation is carried out on the parameter, an attacker can specify an external domain and force the application to make an HTTP request to an arbitrary destination host. Additional Analyst Notes: - CVE Program Container: Refe
cation to make an HTTP request to an arbitrary destination host. Additional Analyst Notes: - CVE Program Container: References: - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5545.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/172839
CVE ID: CVE-2020-22007 State: PUBLISHED Published: 2023-01-18T00:00:00.000Z Last Updated: 2025-04-04T18:05:07.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: OS Command Injection vulnerability in OKER G955V1 v1.03.02.20161128, allows physical attackers to interrupt the boot sequence and execute arbitrary commands with root privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.okerthai.com - https://www.dropbox.com/s/cnzwbxhxl0ahzoa/OKER_UART_2.mp4 - https://gist.github.com/tanprathan/69fbf6fbac11988e12f44069ec5b18ea#file-cve-2020-22007-txt
CVE ID: CVE-2020-22015 State: PUBLISHED Published: 2021-05-26T16:25:49 Last Updated: 2024-08-04T14:30:33.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in FFmpeg 4.2 in mov_write_video_tag due to the out of bounds in libavformat/movenc.c, which could let a remote malicious user obtain sensitive information, cause a Denial of Service, or execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/8190 - https://lists.debian.org/debian-lts-announce/2021/08/msg00018.html - https://www.debian.org/security/2021/dsa-4990
CVE ID: CVE-2020-22016 State: PUBLISHED Published: 2021-05-27T18:29:13 Last Updated: 2024-08-04T14:30:33.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based Buffer Overflow vulnerability in FFmpeg 4.2 at libavcodec/get_bits.h when writing .mov files, which might lead to memory corruption and other potential consequences. Additional Analyst Notes: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/8183 - https://lists.debian.org/debian-lts-announce/2021/08/msg00018.html - https://www.debian.org/security/2021/dsa-4990
CVE ID: CVE-2020-22017 State: PUBLISHED Published: 2021-05-27T18:27:39 Last Updated: 2024-08-04T14:30:33.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at ff_fill_rectangle in libavfilter/drawutils.c, which might lead to memory corruption and other potential consequences. Additional Analyst Notes: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/8309 - https://cwe.mitre.org/data/definitions/122.html - https://www.debian.org/security/2021/dsa-4990
CVE ID: CVE-2020-22019 State: PUBLISHED Published: 2021-05-26T19:13:44 Last Updated: 2024-08-04T14:30:33.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in FFmpeg 4.2 at convolution_y_10bit in libavfilter/vf_vmafmotion.c, which could let a remote malicious user cause a Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/8241 - https://www.debian.org/security/2021/dsa-4990
CVE ID: CVE-2020-22020 State: PUBLISHED Published: 2021-05-26T19:08:08 Last Updated: 2024-08-04T14:30:33.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in FFmpeg 4.2 in the build_diff_map function in libavfilter/vf_fieldmatch.c, which could let a remote malicious user cause a Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/8239 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=ce5274c1385d55892a692998923802023526b765 - https://lists.debian.org/debian-lts-announce/2021/08/msg00018.html - https://www.debian.org/security/2021/dsa-4990
CVE ID: CVE-2020-22021 State: PUBLISHED Published: 2021-05-26T19:25:31 Last Updated: 2024-08-04T14:30:33.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in FFmpeg 4.2 at filter_edges function in libavfilter/vf_yadif.c, which could let a remote malicious user cause a Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/8240 - https://lists.debian.org/debian-lts-announce/2021/08/msg00018.html - https://www.debian.org/security/2021/dsa-4990
CVE ID: CVE-2020-22022 State: PUBLISHED Published: 2021-05-27T18:14:26 Last Updated: 2024-08-04T14:30:33.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_frame at libavfilter/vf_fieldorder.c, which might lead to memory corruption and other potential consequences. Additional Analyst Notes: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/8264 - https://lists.debian.org/debian-lts-announce/2021/08/msg00018.html - https://www.debian.org/security/2021/dsa-4990
CVE ID: CVE-2020-22023 State: PUBLISHED Published: 2021-05-27T18:13:31 Last Updated: 2024-08-04T14:51:09.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based Buffer Overflow vulnerabililty exists in FFmpeg 4.2 in filter_frame at libavfilter/vf_bitplanenoise.c, which might lead to memory corruption and other potential consequences. Additional Analyst Notes: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/8244 - https://lists.debian.org/debian-lts-announce/2021/08/msg00018.html - https://www.debian.org/security/2021/dsa-4990
CVE ID: CVE-2020-22024 State: PUBLISHED Published: 2021-05-26T20:18:27 Last Updated: 2024-08-04T14:51:09.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in FFmpeg 4.2 at the lagfun_frame16 function in libavfilter/vf_lagfun.c, which could let a remote malicious user cause Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/8310
CVE ID: CVE-2020-22025 State: PUBLISHED Published: 2021-05-27T18:11:20 Last Updated: 2024-08-04T14:51:10.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based Buffer Overflow vulnerability exists in gaussian_blur at libavfilter/vf_edgedetect.c, which might lead to memory corruption and other potential consequences. Additional Analyst Notes: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/8260 - https://cwe.mitre.org/data/definitions/122.html - https://lists.debian.org/debian-lts-announce/2021/08/msg00018.html - https://www.debian.org/security/2021/dsa-4990
CVE ID: CVE-2020-22026 State: PUBLISHED Published: 2021-05-26T20:31:30 Last Updated: 2024-08-04T14:51:09.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability exists in FFmpeg 4.2 in the config_input function at libavfilter/af_tremolo.c, which could let a remote malicious user cause a Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/8317 - https://lists.debian.org/debian-lts-announce/2021/08/msg00018.html - https://www.debian.org/security/2021/dsa-4990
CVE ID: CVE-2020-22027 State: PUBLISHED Published: 2021-05-27T18:05:41 Last Updated: 2024-08-04T14:51:09.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based Buffer Overflow vulnerability exits in FFmpeg 4.2 in deflate16 at libavfilter/vf_neighbor.c, which might lead to memory corruption and other potential consequences. Additional Analyst Notes: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/8242 - https://trac.ffmpeg.org/attachment/ticket/8242/gdb-vf_neighbor_191 - https://www.debian.org/security/2021/dsa-4990
CVE ID: CVE-2020-22028 State: PUBLISHED Published: 2021-05-26T20:39:05 Last Updated: 2024-08-04T14:51:09.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_vertically_8 at libavfilter/vf_avgblur.c, which could cause a remote Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/8274 - https://lists.debian.org/debian-lts-announce/2021/08/msg00018.html - https://www.debian.org/security/2021/dsa-4990
CVE ID: CVE-2020-22029 State: PUBLISHED Published: 2021-05-27T17:54:38 Last Updated: 2024-08-04T14:51:09.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/vf_colorconstancy.c: in slice_get_derivative, which crossfade_samples_fltp, which might lead to memory corruption and other potential consequences. Additional Analyst Notes: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/8250 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=a7fd1279703683ebb548ef7baa2f1519994496ae - https://www.debian.org/security/2021/dsa-4990
CVE ID: CVE-2020-22030 State: PUBLISHED Published: 2021-05-27T17:55:25 Last Updated: 2024-08-04T14:51:10.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/af_afade.c in crossfade_samples_fltp, which might lead to memory corruption and other potential consequences. Additional Analyst Notes: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/8276 - https://www.debian.org/security/2021/dsa-4990