rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-14698 
ASUS DSL-AC51, DSL-AC52U, DSL-AC55U, DSL-N55U C1, DSL-N55U D1, DSL-AC56U, DSL-N10_C1, DSL-N12U C1, DSL-N12E C1, DSL-N14U, DSL-N14U-B1, DSL-N16, DSL-N16U, DSL-N17U, DSL-N66U, and DSL-AC750 routers allow remote attackers to change passwords of arbitrary users via the http_passwd parameter to mod_login.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-29T16:00:00.000Z
CVE-2017-14699 
Multiple XML external entity (XXE) vulnerabilities in the AiCloud feature on ASUS DSL-AC51, DSL-AC52U, DSL-AC55U, DSL-N55U C1, DSL-N55U D1, DSL-AC56U, DSL-N10_C1, DSL-N12U C1, DSL-N12E C1, DSL-N14U, DSL-N14U-B1, DSL-N16, DSL-N16U, DSL-N17U, DSL-N66U, and DSL-AC750 routers allow remote authenticated users to read arbitrary files via a crafted DTD in (1) an UPDATEACCOUNT or (2) a PROPFIND request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-29T16:00:00.000Z
CVE-2017-14702 
ERS Data System 1.8.1.0 allows remote attackers to execute arbitrary code, related to "com.branaghgroup.ecers.update.UpdateRequest" object deserialization.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-29T14:00:00.000Z
CVE-2017-14703 
SQL injection vulnerability in Cash Back Comparison Script 1.0 allows remote attackers to execute arbitrary SQL commands via the PATH_INFO to search/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-26T13:00:00.000Z
CVE-2017-14704 
Multiple unrestricted file upload vulnerabilities in the (1) imageSubmit and (2) proof_submit functions in Claydip Laravel Airbnb Clone 1.0 allow remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in images/profile.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-26T14:00:00.000Z
CVE-2017-14705 
DenyAll WAF before 6.4.1 allows unauthenticated remote command execution via TCP port 3001 because shell metacharacters can be inserted into the type parameter to the tailDateFile function in /webservices/stream/tail.php. An iToken authentication parameter is required but can be obtained by exploiting CVE-2017-14706. This affects DenyAll i-Suite LTS 5.5.0 through 5.5.12, i-Suite 5.6, Web Application Firewall 5.7, and Web Application Firewall 6.x before 6.4.1, with On Premises or AWS/Azure cloud deployments.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-22T18:00:00.000Z
CVE-2017-14706 
DenyAll WAF before 6.4.1 allows unauthenticated remote attackers to obtain authentication information by making a typeOf=debug request to /webservices/download/index.php, and then reading the iToken field in the reply. This affects DenyAll i-Suite LTS 5.5.0 through 5.5.12, i-Suite 5.6, Web Application Firewall 5.7, and Web Application Firewall 6.x before 6.4.1, with On Premises or AWS/Azure cloud deployments.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-22T18:00:00.000Z
CVE-2017-14709 
The komoot GmbH "Komoot - Cycling & Hiking Maps" app before 9.3.2 -- aka komoot-cycling-hiking-maps/id447374873 -- for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-12T16:00:00.000Z
CVE-2017-14710 
The Shein Group Ltd. "SHEIN - Fashion Shopping" app -- aka shein fashion-shopping/id878577184 -- for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-12T16:00:00.000Z
CVE-2017-14711 
The Kickbase GmbH "Kickbase Bundesliga Manager" app before 2.2.1 -- aka kickbase-bundesliga-manager/id678241305 -- for iOS is vulnerable to a credentials leak due to transmitting a username and password in cleartext from client to server during registration and authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-13T09:00:00.000Z
CVE-2017-14712 
In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Phonecall Notes Title parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-22T19:00:00.000Z
CVE-2017-14713 
In EPESI 1.8.2 rev20170830, there is Stored XSS in the Phonecalls Description parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-22T19:00:00.000Z
CVE-2017-14714 
In EPESI 1.8.2 rev20170830, there is Stored XSS in the Phonecalls Subject parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-22T19:00:00.000Z
CVE-2017-14715 
In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Alerts Title parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-22T19:00:00.000Z
CVE-2017-14716 
In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Title parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-22T19:00:00.000Z
CVE-2017-14717 
In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Description parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-22T19:00:00.000Z
CVE-2017-14718 
Before version 4.8.2, WordPress was susceptible to a Cross-Site Scripting attack in the link modal via a javascript: or data: URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-23T20:00:00.000Z
CVE-2017-14719 
Before version 4.8.2, WordPress was vulnerable to a directory traversal attack during unzip operations in the ZipArchive and PclZip components.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-23T20:00:00.000Z
CVE-2017-14720 
Before version 4.8.2, WordPress allowed a Cross-Site scripting attack in the template list view via a crafted template name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-23T20:00:00.000Z
CVE-2017-14721 
Before version 4.8.2, WordPress allowed Cross-Site scripting in the plugin editor via a crafted plugin name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-23T20:00:00.000Z
CVE-2017-14722 
Before version 4.8.2, WordPress allowed a Directory Traversal attack in the Customizer component via a crafted theme filename.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-23T20:00:00.000Z
CVE-2017-14723 
Before version 4.8.2, WordPress mishandled % characters and additional placeholder values in $wpdb->prepare, and thus did not properly address the possibility of plugins and themes enabling SQL injection attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-23T20:00:00.000Z
CVE-2017-14724 
Before version 4.8.2, WordPress was vulnerable to cross-site scripting in oEmbed discovery.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-23T20:00:00.000Z
CVE-2017-14725 
Before version 4.8.2, WordPress was susceptible to an open redirect attack in wp-admin/edit-tag-form.php and wp-admin/user-edit.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-23T20:00:00.000Z
CVE-2017-14726 
Before version 4.8.2, WordPress was vulnerable to a cross-site scripting attack via shortcodes in the TinyMCE visual editor.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-23T20:00:00.000Z
CVE-2017-14727 
logger.c in the logger plugin in WeeChat before 1.9.1 allows a crash via strftime date/time specifiers, because a buffer is not initialized.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-23T20:00:00.000Z
CVE-2017-14728 
An authentication bypass was found in an unknown area of the SiteOmat source code. All SiteOmat BOS versions are affected, prior to the submission of this exploit. Also, the SiteOmat does not force administrators to switch passwords, leaving SSH and HTTP remote authentication open to public.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-03T18:47:42.000Z
CVE-2017-14729 
The *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, do not ensure a unique PLT entry for a symbol, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted ELF file, related to elf32-i386.c and elf64-x86-64.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-25T16:00:00.000Z
CVE-2017-14730 
The init script in the Gentoo app-admin/logstash-bin package before 5.5.3 and 5.6.x before 5.6.1 has "chown -R" calls for user-writable directory trees, which allows local users to gain privileges by leveraging access to a $LS_USER account for creation of a hard link.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-25T17:00:00.000Z
CVE-2017-14731 
ofx_proc_file in ofx_preproc.cpp in LibOFX 0.9.12 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file, as demonstrated by an ofxdump call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-25T21:00:00.000Z
CVE-2017-14733 
ReadRLEImage in coders/rle.c in GraphicsMagick 1.3.26 mishandles RLE headers that specify too few colors, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-25T21:00:00.000Z
CVE-2017-14734 
The build_msps function in libbpg.c in libbpg 0.9.7 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted BPG file, related to hevc_decode_init1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-25T21:00:00.000Z
CVE-2017-14735 
OWASP AntiSamy before 1.5.7 allows XSS via HTML5 entities, as demonstrated by use of &colon; to construct a javascript: URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-25T21:00:00.000Z
CVE-2017-14737 
A cryptographic cache-based side channel in the RSA implementation in Botan before 1.10.17, and 1.11.x and 2.x before 2.3.0, allows a local attacker to recover information about RSA secret keys, as demonstrated by CacheD. This occurs because an array is indexed with bits derived from a secret key.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-26T01:00:00.000Z
CVE-2017-14738 
FileRun (version 2017.09.18 and below) suffers from a remote SQL injection vulnerability due to a failure to sanitize input in the metafield parameter inside the metasearch module (under the search function).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-29T08:00:00.000Z
CVE-2017-14739 
The AcquireResampleFilterThreadSet function in magick/resample-private.h in ImageMagick 7.0.7-4 mishandles failed memory allocation, which allows remote attackers to cause a denial of service (NULL Pointer Dereference in DistortImage in MagickCore/distort.c, and application crash) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-26T02:00:00.000Z
CVE-2017-14740 
Cross-site scripting (XSS) vulnerability in GeniXCMS 1.1.0 allows remote authenticated users to inject arbitrary web script or HTML via the Menu ID when adding a menu.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-26T14:00:00.000Z
CVE-2017-14741 
The ReadCAPTIONImage function in coders/caption.c in ImageMagick 7.0.7-3 allows remote attackers to cause a denial of service (infinite loop) via a crafted font file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-26T02:00:00.000Z
CVE-2017-14742 
Buffer overflow in LabF nfsAxe FTP client 3.7 allows an attacker to execute code remotely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-25T21:01:58.000Z
CVE-2017-14743 
Faleemi FSC-880 00.01.01.0048P2 devices allow unauthenticated SQL injection via the Username element in an XML document to /onvif/device_service, as demonstrated by reading the admin password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-26T06:00:00.000Z
CVE-2017-14744 
UEditor 1.4.3.3 has XSS via the SRC attribute of an IFRAME element.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-26T06:00:00.000Z
CVE-2017-14745 
The *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, interpret a -1 value as a sorting count instead of an error flag, which allows remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact via a crafted ELF file, related to elf32-i386.c and elf64-x86-64.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-26T16:00:00.000Z
CVE-2017-14746 
Use-after-free vulnerability in Samba 4.x before 4.7.3 allows remote attackers to execute arbitrary code via a crafted SMB1 request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-27T22:00:00.000Z
CVE-2017-14748 
Race condition in Blizzard Overwatch 1.15.0.2 allows remote authenticated users to cause a denial of service (season bans and SR losses for other users) by leaving a competitive match at a specific time during the initial loading of that match.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-26T17:00:00.000Z
CVE-2017-14749 
JerryScript 1.0 allows remote attackers to cause a denial of service (jmem_heap_alloc_block_internal heap memory corruption) or possibly execute arbitrary code via a crafted .js file, because unrecognized \ characters cause incorrect 0x00 characters in bytecode.literal data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-26T18:00:00.000Z
CVE-2017-14751 
The Intense WP "WP Jobs" plugin 1.5 for WordPress has XSS, related to the Job Qualification field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-26T22:00:00.000Z
CVE-2017-14752 
Mahara 15.04 before 15.04.15, 16.04 before 16.04.9, 16.10 before 16.10.6, and 17.04 before 17.04.4 are vulnerable to a user submitting a potential dangerous payload, e.g., XSS code, to be saved as their first name, last name, or display name in the profile fields that can cause issues such as escalation of privileges or unknown execution of malicious code when replying to messages in Mahara.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-31T18:00:00.000Z
CVE-2017-14753 
Cross-site scripting (XSS) vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated users to inject arbitrary web script or HTML via the filter parameter to module/module_filters/index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-27T03:00:00.000Z
CVE-2017-14754 
OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone to Arbitrary File Read: /xAdmin/html/cm_datasource_group_xsd.jsp, parameter: xsd_datasource_schema_file filename. In order for this vulnerability to be exploited, an attacker must authenticate to the application first.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-02T17:00:00.000Z
CVE-2017-14755 
OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone to Cross-Site Scripting: /xAdmin/html/XPressoDoc, parameter: categoryId.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-02T17:00:00.000Z
CVE-2017-14756 
OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone to Cross-Site Scripting: /xAdmin/html/Deployment (cat_id).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-02T17:00:00.000Z
CVE-2017-14757 
OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone to SQL Injection: /xDashboard/html/jobhistory/downloadSupportFile.action, parameter: jobRunId. In order for this vulnerability to be exploited, an attacker must authenticate to the application first.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-02T17:00:00.000Z
CVE-2017-14758 
OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone to SQL Injection: /xAdmin/html/cm_doclist_view_uc.jsp, parameter: documentId. In order for this vulnerability to be exploited, an attacker must authenticate to the application first.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-02T17:00:00.000Z
CVE-2017-14759 
OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone to an XML External Entity vulnerability: /xFramework/services/QuickDoc.QuickDocHttpSoap11Endpoint/. An unauthenticated user is able to read directory listings or system files, or cause SSRF or Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-02T17:00:00.000Z
CVE-2017-14760 
SQL Injection exists in /includes/event-management/index.php in the event-espresso-free (aka Event Espresso Lite) plugin v3.1.37.12.L for WordPress via the recurrence_id parameter to /wp-admin/admin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-27T08:00:00.000Z
CVE-2017-14761 
In GeniXCMS 1.1.4, /inc/lib/backend/menus.control.php has XSS via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-27T08:00:00.000Z
CVE-2017-14762 
In GeniXCMS 1.1.4, /inc/lib/Control/Backend/menus.control.php has XSS via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-27T08:00:00.000Z
CVE-2017-14763 
In the Install Themes page in GeniXCMS 1.1.4, remote authenticated users can execute arbitrary PHP code via a .php file in a ZIP archive of a theme.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-27T08:00:00.000Z
CVE-2017-14764 
In the Upload Modules page in GeniXCMS 1.1.4, remote authenticated users can execute arbitrary PHP code via a .php file in a ZIP archive of a module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-27T08:00:00.000Z
CVE-2017-14765 
In GeniXCMS 1.1.4, gxadmin/index.php has XSS via the Menu ID field in a page=menus request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-27T08:00:00.000Z
CVE-2017-14766 
The Simple Student Result plugin before 1.6.4 for WordPress has an Authentication Bypass vulnerability because the fn_ssr_add_st_submit() function and fn_ssr_del_st_submit() function in functions.php only require knowing the student id number.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-27T08:00:00.000Z
CVE-2017-14767 
The sdp_parse_fmtp_config_h264 function in libavformat/rtpdec_h264.c in FFmpeg before 3.3.4 mishandles empty sprop-parameter-sets values, which allows remote attackers to cause a denial of service (heap buffer overflow) or possibly have unspecified other impact via a crafted sdp file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-27T08:00:00.000Z
CVE-2017-14770 
Skybox Manager Client Application prior to 8.5.501 is prone to an information disclosure vulnerability of user password hashes. A local authenticated attacker can access the password hashes in a debugger-pause state during the authentication process.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-02T21:00:00.000Z
CVE-2017-14771 
Skybox Manager Client Application prior to 8.5.501 is prone to an arbitrary file upload vulnerability due to insufficient input validation of user-supplied files path when uploading files via the application. During a debugger-pause state, a local authenticated attacker can upload an arbitrary file and overwrite existing files within the scope of the affected application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-02T21:00:00.000Z
CVE-2017-14772 
Skybox Manager Client Application is prone to information disclosure via a username enumeration attack. A local unauthenticated attacker could exploit the flaw to obtain valid usernames, by analyzing error messages upon valid and invalid account login attempts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-02T21:00:00.000Z
CVE-2017-14773 
Skybox Manager Client Application prior to 8.5.501 is prone to an elevation of privileges vulnerability during authentication of a valid user in a debugger-pause state. The vulnerability can only be exploited by a local authenticated attacker.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-02T21:00:00.000Z
CVE-2017-14775 
Laravel before 5.5.10 mishandles the remember_me token verification process because DatabaseUserProvider does not have constant-time token comparison.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-27T16:00:00.000Z
CVE-2017-14795 
The hevc_write_frame function in libbpg.c in libbpg 0.9.7 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) or possibly have unspecified other impact via a crafted BPG file, related to improper interaction with hls_pcm_sample in hevc.c in libavcodec in FFmpeg and put_pcm_var in hevcdsp_template.c in libavcodec in FFmpeg.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-27T17:00:00.000Z
CVE-2017-14796 
The hevc_write_frame function in libbpg.c in libbpg 0.9.7 allows remote attackers to cause a denial of service (integer underflow and application crash) or possibly have unspecified other impact via a crafted BPG file, related to improper interaction with copy_CTB_to_hv in hevc_filter.c in libavcodec in FFmpeg and sao_filter_CTB in hevc_filter.c in libavcodec in FFmpeg.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-27T17:00:00.000Z