rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-21321 
emlog v6.0 contains a Cross-Site Request Forgery (CSRF) via /admin/link.php?action=addlink, which allows attackers to arbitrarily add articles.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-15T21:17:09.000Z
CVE-2020-21322 
An arbitrary file upload vulnerability in Feehi CMS v2.0.8 and below allows attackers to execute arbitrary code via a crafted PHP file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-15T21:17:10.000Z
CVE-2020-21325 
An issue in WUZHI CMS v.4.1.0 allows a remote attacker to execute arbitrary code via the set_chache method of the function\common.func.php file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-06-20T00:00:00.000Z
CVE-2020-21333 
Cross Site Scripting (XSS) vulnerability in PublicCMS 4.0 to get an admin cookie when the Administrator reviews submit case.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-09T16:41:17.000Z
CVE-2020-21342 
Insecure permissions issue in zzcms 201910 via the reset any user password in /one/getpassword.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-13T14:42:56.000Z
CVE-2020-21345 
Cross Site Scripting (XSS) vulnerability in Halo 1.1.3 via post publish components in the manage panel, which lets a remote malicious user execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-20T16:51:50.000Z
CVE-2020-21353 
A stored cross site scripting (XSS) vulnerability in /admin/snippets.php of GetSimple CMS 3.4.0a allows attackers to execute arbitrary web scripts or HTML via crafted payload in the Edit Snippets module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-06T22:36:18.000Z
CVE-2020-21356 
An information disclosure vulnerability in upload.php of PopojiCMS 1.2 leads to physical path disclosure of the host when 'name = "file" is deleted during file uploads.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-06T22:36:55.000Z
CVE-2020-21357 
A stored cross site scripting (XSS) vulnerability in /admin.php?mod=user&act=addnew of PopojiCMS 1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the E-Mail field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-06T22:37:16.000Z
CVE-2020-21358 
A cross site request forgery (CSRF) in Wage-CMS 1.5.x-dev allows attackers to arbitrarily add users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-06T22:37:38.000Z
CVE-2020-21359 
An arbitrary file upload vulnerability in the Template Upload function of Maccms10 allows attackers bypass the suffix whitelist verification to execute arbitrary code via adding a character to the end of the uploaded file's name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-11T20:53:54.000Z
CVE-2020-21362 
A cross site scripting (XSS) vulnerability in the background search function of Maccms10 allows attackers to execute arbitrary web scripts or HTML via the 'wd' parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-11T20:53:57.000Z
CVE-2020-21363 
An arbitrary file deletion vulnerability exists within Maccms10.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-11T20:53:58.000Z
CVE-2020-21365 
Directory traversal vulnerability in wkhtmltopdf through 0.12.5 allows remote attackers to read local files and disclose sensitive information via a crafted html file running with the default configurations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-15T00:00:00.000Z
CVE-2020-21366 
Cross Site Request Forgery vulnerability in GreenCMS v.2.3 allows an attacker to gain privileges via the adduser function of index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-06-20T00:00:00.000Z
CVE-2020-21377 
SQL injection vulnerability in yunyecms V2.0.1 via the selcart parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-21T18:50:32.000Z
CVE-2020-21378 
SQL injection vulnerability in SeaCMS 10.1 (2020.02.08) via the id parameter in an edit action to admin_members_group.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-21T18:50:35.000Z
CVE-2020-21386 
A Cross-Site Request Forgery (CSRF) in the component admin.php/admin/type/info.html of Maccms 10 allows attackers to gain administrator privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-04T19:18:54.000Z
CVE-2020-21387 
A cross-site scripting (XSS) vulnerability in the parameter type_en of Maccms 10 allows attackers to obtain the administrator cookie and escalate privileges via a crafted payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-04T19:18:55.000Z
CVE-2020-21394 
SQL Injection vulnerability in Zhong Bang Technology Co., Ltd CRMEB mall system V2.60 and V3.1 via the tablename parameter in SystemDatabackup.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-29T16:56:43.000Z
CVE-2020-21400 
SQL injection vulnerability in gaozhifeng PHPMyWind v.5.6 allows a remote attacker to execute arbitrary code via the id variable in the modify function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-06-20T00:00:00.000Z
CVE-2020-21405 
An issue was discovered in H96 Smart TV Box H96 Pro Plus allows attackers to corrupt files via calls to the saveDeepColorAttr service.unk
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-20T18:45:22.000Z
CVE-2020-21406 
An issue was discovered in RK Smart TV Box MAX and V88 SmartTV box that allows attackers to cause a denial of service via the switchNextDisplayInterface service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-20T18:46:56.000Z
CVE-2020-21426 
Buffer Overflow vulnerability in function C_IStream::read in PluginEXR.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted image file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2020-21427 
Buffer Overflow vulnerability in function LoadPixelDataRLE8 in PluginBMP.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted image file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2020-21428 
Buffer Overflow vulnerability in function LoadRGB in PluginDDS.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted image file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2020-21431 
HongCMS v3.0 contains an arbitrary file read and write vulnerability in the component /admin/index.php/template/edit.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-04T20:20:14.000Z
CVE-2020-21434 
Maccms 10 contains a cross-site scripting (XSS) vulnerability in the Editing function under the Member module. This vulnerability is exploited via a crafted payload in the nickname text field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-04T20:20:15.000Z
CVE-2020-21452 
An issue was discovered in uniview ISC2500-S. This is an upload vulnerability where an attacker can upload malicious code via /Interface/DevManage/EC.php?cmd=upload
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-29T16:21:18.000Z
CVE-2020-21468 
A segmentation fault in the redis-server component of Redis 5.0.7 leads to a denial of service (DOS). NOTE: the vendor cannot reproduce this issue in a released version, such as 5.0.7
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:11:37.000Z
CVE-2020-21469 
An issue was discovered in PostgreSQL 12.2 allows attackers to cause a denial of service via repeatedly sending SIGHUP signals. NOTE: this is disputed by the vendor because untrusted users cannot send SIGHUP signals; they can only be sent by a PostgreSQL superuser, a user with pg_reload_conf access, or a user with sufficient privileges at the OS level (the postgres account or the root account).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2020-21474 
File Upload vulnerability in NucleusCMS v.3.71 allows a remote attacker to execute arbitrary code via the /nucleus/plugins/skinfiles/?dir=rsd parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-06-20T00:00:00.000Z
CVE-2020-21480 
An arbitrary file write vulnerability in RGCMS v1.06 allows attackers to execute arbitrary code via a crafted PHP file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-15T21:43:55.000Z
CVE-2020-21481 
An arbitrary file upload vulnerability in RGCMS v1.06 allows attackers to execute arbitrary code via a crafted .txt file which is later changed to a PHP file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-15T21:43:56.000Z
CVE-2020-21482 
A cross-site scripting (XSS) vulnerability in RGCMS v1.06 allows attackers to obtain the administrator's cookie via a crafted payload in the Name field under the Message Board module
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-15T21:43:57.000Z
CVE-2020-21483 
An arbitrary file upload vulnerability in Jizhicms v1.5 allows attackers to execute arbitrary code via a crafted .jpg file which is later changed to a PHP file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-15T21:43:58.000Z
CVE-2020-21485 
Cross Site Scripting vulnerability in Alluxio v.1.8.1 allows a remote attacker to executea arbitrary code via the path parameter in the browse board component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-06-20T00:00:00.000Z
CVE-2020-21486 
SQL injection vulnerability in PHPOK v.5.4. allows a remote attacker to obtain sensitive information via the _userlist function in framerwork/phpok_call.php file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-06-20T00:00:00.000Z
CVE-2020-21487 
Cross Site Scripting vulnerability found in Netgate pfSense 2.4.4 and ACME package v.0.6.3 allows attackers to execute arbitrary code via the RootFolder field of acme_certificates.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-04-04T00:00:00.000Z
CVE-2020-21489 
File Upload vulnerability in Feehicms v.2.0.8 allows a remote attacker to execute arbitrary code via the /admin/index.php?r=admin-user%2Fupdate-self component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-06-20T00:00:00.000Z
CVE-2020-21490 
An issue was discovered in GNU Binutils 2.34. It is a memory leak when process microblaze-dis.c. This one will consume memory on each insn disassembled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2020-21493 
An issue in the component route\user.php of Xiuno BBS v4.0.4 allows attackers to enumerate usernames.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-04T21:00:35.000Z
CVE-2020-21494 
A cross-site scripting (XSS) vulnerability in the component install\install.sql of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via changing the doctype value to 0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-04T21:00:36.000Z
CVE-2020-21495 
A cross-site scripting (XSS) vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via the sitename parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-04T21:00:36.000Z
CVE-2020-21496 
A cross-site scripting (XSS) vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via the sitebrief parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-04T21:00:37.000Z
CVE-2020-21503 
waimai Super Cms 20150505 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture. By setting the index.php?m=gift&a=addsave credit parameter to -1, the product is sold for free.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-05T21:32:34.000Z
CVE-2020-21504 
waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php?&m=Public&a=login.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-05T21:32:35.000Z
CVE-2020-21505 
waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php/Link/addsave.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-05T21:32:36.000Z
CVE-2020-21506 
waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php?m=Config&a=add.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-05T21:32:37.000Z
CVE-2020-21514 
An issue was discovered in Fluent-ui v.1.2.2 allows attackers to gain escalated privileges and execute arbitrary code due to a default password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-04-04T00:00:00.000Z
CVE-2020-21516 
There is an arbitrary file upload vulnerability in FeehiCMS 2.0.8 at the head image upload, that allows attackers to execute relevant PHP code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-06T18:08:44.000Z
CVE-2020-21517 
Cross Site Scripting (XSS) vulnerability in MetInfo 7.0.0 via the gourl parameter in login.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-21T14:55:02.000Z
CVE-2020-21522 
An issue was discovered in halo V1.1.3. A Zip Slip Directory Traversal Vulnerability in the backend,the attacker can overwrite some files, such as ftl files, .bashrc files in the user directory, and finally get the permissions of the operating system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-30T14:26:14.000Z
CVE-2020-21523 
A Server-Side Freemarker template injection vulnerability in halo CMS v1.1.3 In the Edit Theme File function. The ftl file can be edited. This is the Freemarker template file. This file can cause arbitrary code execution when it is rendered in the background. exp: <#assign test="freemarker.template.utility.Execute"?new()> ${test("touch /tmp/freemarkerPwned")}
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-30T14:29:51.000Z
CVE-2020-21524 
There is a XML external entity (XXE) vulnerability in halo v1.1.3, The function of importing other blogs in the background(/api/admin/migrations/wordpress) needs to parse the xml file, but it is not used for security defense, This vulnerability can detect the intranet, read files, enable ddos attacks, etc. exp:https://github.com/halo-dev/halo/issues/423
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-30T14:34:09.000Z
CVE-2020-21525 
Halo V1.1.3 is affected by: Arbitrary File reading. In an interface that reads files in halo v1.1.3, a directory traversal check is performed on the input path parameter, but the startsWith function can be used to bypass it.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-30T14:38:01.000Z
CVE-2020-21526 
An Arbitrary file writing vulnerability in halo v1.1.3. In an interface to write files in the background, a directory traversal check is performed on the input path parameter, but the startsWith function can be used to bypass it.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-30T14:43:02.000Z
CVE-2020-21527 
There is an Arbitrary file deletion vulnerability in halo v1.1.3. A backup function in the background allows a user, when deleting their backup files, to delete any files on the system through directory traversal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-30T14:47:24.000Z
CVE-2020-21528 
A Segmentation Fault issue discovered in in ieee_segment function in outieee.c in nasm 2.14.03 and 2.15 allows remote attackers to cause a denial of service via crafted assembly file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2020-21529 
fig2dev 3.2.7b contains a stack buffer overflow in the bezier_spline function in genepic.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-16T00:00:00.000Z
CVE-2020-21530 
fig2dev 3.2.7b contains a segmentation fault in the read_objects function in read.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-16T20:27:54.000Z
CVE-2020-21531 
fig2dev 3.2.7b contains a global buffer overflow in the conv_pattern_index function in gencgm.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-16T00:00:00.000Z
CVE-2020-21532 
fig2dev 3.2.7b contains a global buffer overflow in the setfigfont function in genepic.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-16T00:00:00.000Z
CVE-2020-21533 
fig2dev 3.2.7b contains a stack buffer overflow in the read_textobject function in read.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-16T20:27:57.000Z
CVE-2020-21534 
fig2dev 3.2.7b contains a global buffer overflow in the get_line function in read.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-16T20:27:59.000Z
CVE-2020-21535 
fig2dev 3.2.7b contains a segmentation fault in the gencgm_start function in gencgm.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-16T20:28:00.000Z
CVE-2020-21547 
Libsixel 1.8.2 contains a heap-based buffer overflow in the dither_func_fs function in tosixel.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-17T20:34:24.000Z
CVE-2020-21548 
Libsixel 1.8.3 contains a heap-based buffer overflow in the sixel_encode_highcolor function in tosixel.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-17T20:34:25.000Z
CVE-2020-21554 
A File Deletion vulnerability exists in TinyShop 3.1.1 in the back_list parameter in controllers\admin.php, which could let a malicious user delete any file such as install.lock to reinstall cms.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-25T15:38:58.000Z
CVE-2020-21564 
An issue was discovered in Pluck CMS 4.7.10-dev2 and 4.7.11. There is a file upload vulnerability that can cause a remote command execution via admin.php?action=files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-30T15:39:44.000Z
CVE-2020-21572 
Buffer overflow vulnerability in function src_parser_trans_stage_1_2_3 trgil gilcc before commit 803969389ca9c06237075a7f8eeb1a19e6651759, allows attackers to cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-02T17:45:03.000Z
CVE-2020-21573 
An issue was discoverered in in abhijitnathwani image-processing v0.1.0, allows local attackers to cause a denial of service via a crafted image file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-02T17:45:04.000Z
CVE-2020-21574 
Buffer overflow vulnerability in YotsuyaNight c-http v0.1.0, allows attackers to cause a denial of service via a long url request which is passed to the delimitedread function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-02T17:45:06.000Z
CVE-2020-21583 
An issue was discovered in hwclock.13-v2.27 allows attackers to gain escalated privlidges or execute arbitrary commands via the path parameter when setting the date.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2020-21585 
Vulnerability in emlog v6.0.0 allows user to upload webshells via zip plugin module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-02T19:58:22.000Z
CVE-2020-21588 
Buffer overflow in Core FTP LE v2.2 allows local attackers to cause a denial or service (crash) via a long string in the Setup->Users->Username editbox.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-02T19:58:28.000Z
CVE-2020-21590 
Directory traversal in coreframe/app/template/admin/index.php in WUZHI CMS 4.1.0 allows attackers to list files in arbitrary directories via the dir parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-02T19:58:32.000Z
CVE-2020-21594 
libde265 v1.0.4 contains a heap buffer overflow in the put_epel_hv_fallback function, which can be exploited via a crafted a file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-16T00:00:00.000Z
CVE-2020-21595 
libde265 v1.0.4 contains a heap buffer overflow in the mc_luma function, which can be exploited via a crafted a file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-16T00:00:00.000Z
CVE-2020-21596 
libde265 v1.0.4 contains a global buffer overflow in the decode_CABAC_bit function, which can be exploited via a crafted a file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-16T00:00:00.000Z
CVE-2020-21597 
libde265 v1.0.4 contains a heap buffer overflow in the mc_chroma function, which can be exploited via a crafted a file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-16T00:00:00.000Z
CVE-2020-21598 
libde265 v1.0.4 contains a heap buffer overflow in the ff_hevc_put_unweighted_pred_8_sse function, which can be exploited via a crafted a file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-16T00:00:00.000Z
CVE-2020-21599 
libde265 v1.0.4 contains a heap buffer overflow in the de265_image::available_zscan function, which can be exploited via a crafted a file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-16T00:00:00.000Z
CVE-2020-21600 
libde265 v1.0.4 contains a heap buffer overflow in the put_weighted_pred_avg_16_fallback function, which can be exploited via a crafted a file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-16T00:00:00.000Z
CVE-2020-21601 
libde265 v1.0.4 contains a stack buffer overflow in the put_qpel_fallback function, which can be exploited via a crafted a file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-16T00:00:00.000Z