rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-23738 
There is a local denial of service vulnerability in Advanced SystemCare 13 PRO 13.5.0.174. Attackers can use a constructed program to cause a computer crash (BSOD)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-03T18:36:40.000Z
CVE-2020-23740 
In DriverGenius 9.61.5480.28 there is a local privilege escalation vulnerability in the driver wizard, attackers can use constructed programs to increase user privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-03T18:16:10.000Z
CVE-2020-23741 
In AnyView (network police) network monitoring software 4.6.0.1, there is a local denial of service vulnerability in AnyView, attackers can use a constructed program to cause a computer crash (BSOD).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-03T18:28:11.000Z
CVE-2020-23754 
Cross Site Scripting (XSS) vulnerability in infusions/member_poll_panel/poll_admin.php in PHP-Fusion 9.03.50, allows attackers to execute arbitrary code, via the polls feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-02T17:45:17.000Z
CVE-2020-23761 
Cross Site Scripting (XSS) vulnerability in subrion CMS Version <= 4.2.1 allows remote attackers to execute arbitrary web script via the "payment gateway" column on transactions tab.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-09T17:49:15.000Z
CVE-2020-23762 
Cross Site Scripting (XSS) vulnerability in the Larsens Calender plugin Version <= 1.2 for WordPress allows remote attackers to execute arbitrary web script via the "titel" column on the "Eintrage hinzufugen" tab.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-09T17:50:11.000Z
CVE-2020-23763 
SQL injection in admin.php in Online Book Store 1.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-09T17:51:37.000Z
CVE-2020-23765 
A file upload vulnerability was discovered in the file path /bl-plugins/backup/plugin.php on Bludit version 3.12.0. If an attacker is able to gain Administrator rights they will be able to use unsafe plugins to upload a backup file and control the server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-21T17:11:40.000Z
CVE-2020-23766 
An arbitrary file deletion vulnerability was discovered on htmly v2.7.5 which allows remote attackers to use any absolute path to delete any file in the server should they gain Administrator privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-21T17:11:44.000Z
CVE-2020-23768 
An information disclosure vulnerability was discovered in alipay_function.php in the log file of Alibaba payment interface on PHPPYUN prior to version 5.0.1. If exploited, this vulnerability will allow attackers to obtain users' personally identifiable information including e-mail address and telephone numbers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-21T17:11:47.000Z
CVE-2020-23774 
A reflected XSS vulnerability exists in tohtml/convert.php of Winmail 6.5, which can cause JavaScript code to be executed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-26T21:02:11.000Z
CVE-2020-23776 
A SSRF vulnerability exists in Winmail 6.5 in app.php in the key parameter when HTTPS is on. An attacker can use this vulnerability to cause the server to send a request to a specific URL. An attacker can modify the request header 'HOST' value to cause the server to send the request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-26T21:02:19.000Z
CVE-2020-23790 
An Arbitrary File Upload vulnerability was discovered in the Golo Laravel theme v 1.1.5.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-12T15:25:44.000Z
CVE-2020-23793 
An issue was discovered in spice-server spice-server-0.14.0-6.el7_6.1.x86_64 of Redhat's VDI product. There is a security vulnerablility that can restart KVMvirtual machine without any authorization. It is not yet known if there will be other other effects.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2020-23804 
Uncontrolled Recursion in pdfinfo, and pdftops in poppler 0.89.0 allows remote attackers to cause a denial of service via crafted input.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2020-23811 
xxl-job 2.2.0 allows Information Disclosure of username, model, and password via job/admin/controller/UserController.java.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-03T16:58:01.000Z
CVE-2020-23814 
Multiple cross-site scripting (XSS) vulnerabilities in xxl-job v2.2.0 allow remote attackers to inject arbitrary web script or HTML via (1) AppName and (2)AddressList parameter in JobGroupController.java file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-03T16:58:11.000Z
CVE-2020-23824 
ArGo Soft Mail Server 1.8.8.9 is affected by Cross Site Request Forgery (CSRF) for perform remote arbitrary code execution. The component is the Administration dashboard. When using admin/user credentials, if the admin/user admin opens a website with the malicious page that will run the CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-11T20:28:37.000Z
CVE-2020-23826 
The Yale WIPC-303W 2.21 through 2.31 camera is vulnerable to remote command execution (RCE) through command injection via the HTTP API. NOTE: This may be a duplicate of CVE-2020-10176
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-22T19:06:44.000Z
CVE-2020-23828 
A File Upload vulnerability in SourceCodester Online Course Registration v1.0 allows remote attackers to achieve Remote Code Execution (RCE) on the hosting webserver by uploading a crafted PHP web-shell that bypasses the image upload filters. An attack uses /Online%20Course%20Registration/my-profile.php with the POST parameter photo.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-15T21:08:56.000Z
CVE-2020-23829 
interface/new/new_comprehensive_save.php in LibreHealth EHR 2.0.0 suffers from an authenticated file upload vulnerability, allowing remote attackers to achieve remote code execution (RCE) on the hosting webserver by uploading a maliciously crafted image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-01T16:42:44.000Z
CVE-2020-23830 
A Cross-Site Request Forgery (CSRF) vulnerability in changeUsername.php in SourceCodester Stock Management System v1.0 allows remote attackers to deny future logins by changing an authenticated victim's username when they visit a third-party site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-02T16:06:42.000Z
CVE-2020-23831 
A Reflected Cross-Site Scripting (XSS) vulnerability in the index.php login-portal webpage of SourceCodester Stock Management System v1.0 allows remote attackers to harvest login credentials and session cookies when an unauthenticated victim clicks on a malicious URL and enters credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 6.4
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AC:H/AV:N/A:L/C:H/I:L/PR:N/S:U/UI:R
version: 3.1
Published: 2020-09-01T16:42:18.000Z
CVE-2020-23832 
A Persistent Cross-Site Scripting (XSS) vulnerability in message_admin.php in Projectworlds Car Rental Management System v1.0 allows unauthenticated remote attackers to harvest an admin login session cookie and steal an admin session upon an admin login.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-06T12:55:54.000Z
CVE-2020-23833 
Projectworlds House Rental v1.0 suffers from an unauthenticated SQL Injection vulnerability, allowing remote attackers to execute arbitrary code on the hosting webserver via a malicious index.php POST request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-15T21:09:00.000Z
CVE-2020-23834 
Insecure Service File Permissions in the bd service in Real Time Logic BarracudaDrive v6.5 allow local attackers to escalate privileges to admin by replacing the %SYSTEMDRIVE%\bd\bd.exe file. When the computer next starts, the new bd.exe will be run as LocalSystem.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:L/S:C/UI:N
version: 3.1
Published: 2020-09-04T03:38:40.000Z
CVE-2020-23835 
A Reflected Cross-Site Scripting (XSS) vulnerability in the index.php login-portal webpage of SourceCodester Tailor Management System v1.0 allows remote attackers to harvest keys pressed by an unauthenticated victim who clicks on a malicious URL and begins typing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 6.4
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AC:H/AV:N/A:L/C:H/I:L/PR:N/S:U/UI:R
version: 3.1
Published: 2020-09-01T16:40:52.000Z
CVE-2020-23836 
A Cross-Site Request Forgery (CSRF) vulnerability in edit_user.php in OSWAPP Warehouse Inventory System (aka OSWA-INV) through 2020-08-10 allows remote attackers to change the admin's password after an authenticated admin visits a third-party site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-01T16:41:29.000Z
CVE-2020-23837 
A Cross-Site Request Forgery (CSRF) vulnerability in the Multi User plugin 1.8.2 for GetSimple CMS allows remote attackers to add admin (or other) users after an authenticated admin visits a third-party site or clicks on a URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-25T03:53:35.000Z
CVE-2020-23839 
A Reflected Cross-Site Scripting (XSS) vulnerability in GetSimple CMS v3.3.16, in the admin/index.php login portal webpage, allows remote attackers to execute JavaScript code in the client's browser and harvest login credentials after a client clicks a link, enters credentials, and submits the login form.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-01T16:40:11.000Z
CVE-2020-23849 
Stored XSS was discovered in the tree mode of jsoneditor before 9.0.2 through injecting and executing JavaScript.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-11T13:36:14.000Z
CVE-2020-23851 
A stack-based buffer overflow vulnerability exists in ffjpeg through 2020-07-02 in the jfif_decode(void *ctxt, BMP *pb) function at ffjpeg/src/jfif.c:513:28, which could cause a denial of service by submitting a malicious jpeg image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-18T14:03:55.000Z
CVE-2020-23852 
A heap based buffer overflow vulnerability exists in ffjpeg through 2020-07-02 in the jfif_decode(void *ctxt, BMP *pb) function at ffjpeg/src/jfif.c (line 544 & line 545), which could cause a denial of service by submitting a malicious jpeg image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-18T14:12:26.000Z
CVE-2020-23856 
Use-after-Free vulnerability in cflow 1.6 in the void call(char *name, int line) function at src/parser.c, which could cause a denial of service via the pointer variable caller->callee.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-18T14:41:03.000Z
CVE-2020-23861 
A heap-based buffer overflow vulnerability exists in LibreDWG 0.10.1 via the read_system_page function at libredwg-0.10.1/src/decode_r2007.c:666:5, which causes a denial of service by submitting a dwg file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-18T15:02:32.000Z
CVE-2020-23864 
An issue exits in IOBit Malware Fighter version 8.0.2.547. Local escalation of privileges is possible by dropping a malicious DLL file into the WindowsApps folder.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-27T13:28:02.000Z
CVE-2020-23868 
NeDi 1.9C allows inc/rt-popup.php d XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-02T21:57:29.000Z
CVE-2020-23872 
A NULL pointer dereference in the function TextPage::restoreState of pdf2xml v2.0 allows attackers to cause a denial of service (DoS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-10T21:25:49.000Z
CVE-2020-23873 
pdf2xml v2.0 was discovered to contain a heap-buffer overflow in the function TextPage::dump.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-10T21:25:49.000Z
CVE-2020-23874 
pdf2xml v2.0 was discovered to contain a heap-buffer overflow in the function TextPage::addAttributsNode.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-10T21:25:50.000Z
CVE-2020-23876 
pdf2xml v2.0 was discovered to contain a memory leak in the function TextPage::testLinkedText.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-10T21:25:51.000Z
CVE-2020-23877 
pdf2xml v2.0 was discovered to contain a stack buffer overflow in the component getObjectStream.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-10T21:25:51.000Z
CVE-2020-23878 
pdf2json v0.71 was discovered to contain a stack buffer overflow in the component XRef::fetch.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-10T21:25:52.000Z
CVE-2020-23879 
pdf2json v0.71 was discovered to contain a NULL pointer dereference in the component ObjectStream::getObject.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-10T21:25:53.000Z
CVE-2020-23884 
A buffer overflow in Nomacs v3.15.0 allows attackers to cause a denial of service (DoS) via a crafted MNG file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-10T21:25:54.000Z
CVE-2020-23886 
XnView MP v0.96.4 was discovered to contain a heap overflow which allows attackers to cause a denial of service (DoS) via a crafted pict file. Related to a User Mode Write AV starting at ntdll!RtlpLowFragHeapFree.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-10T21:25:58.000Z
CVE-2020-23887 
XnView MP v0.96.4 was discovered to contain a heap overflow which allows attackers to cause a denial of service (DoS) via a crafted ico file. Related to a Read Access Violation starting at USER32!SmartStretchDIBits+0x33.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-10T21:25:59.000Z
CVE-2020-23888 
A User Mode Write AV in Editor!TMethodImplementationIntercept+0x53f6c3 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted psd file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-10T21:25:59.000Z
CVE-2020-23889 
A User Mode Write AV starting at Editor!TMethodImplementationIntercept+0x4189c6 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted ico file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-10T21:26:00.000Z
CVE-2020-23890 
A buffer overflow in WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted JPG file. Related to Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at JPGCodec+0x753648.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-10T21:26:01.000Z
CVE-2020-23891 
A User Mode Write AV in Editor+0x5cd7 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tiff file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-10T21:26:01.000Z
CVE-2020-23893 
A User Mode Write AV in Editor!TMethodImplementationIntercept+0x3c3682 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tiff file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-10T21:26:02.000Z
CVE-2020-23894 
A User Mode Write AV in ntdll!RtlpCoalesceFreeBlocks+0x268 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tiff file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-10T21:26:03.000Z
CVE-2020-23895 
A User Mode Write AV in Editor+0x76af of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tiff file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-10T21:26:04.000Z
CVE-2020-23896 
A User Mode Write AV in Editor+0x576b of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tiff file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-10T21:26:05.000Z
CVE-2020-23897 
A User Mode Write AV in Editor!TMethodImplementationIntercept+0x54dcec of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tga file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-10T21:26:06.000Z
CVE-2020-23898 
A User Mode Write AV in Editor+0x5ea2 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tga file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-10T21:26:07.000Z
CVE-2020-23899 
A User Mode Write AV in Editor+0x5f91 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tga file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-10T21:26:08.000Z
CVE-2020-23900 
A buffer overflow in WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tga file. Related to Data from Faulting Address controls Code Flow starting at Editor!TMethodImplementationIntercept+0x57a3b.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-10T21:26:09.000Z
CVE-2020-23901 
A User Mode Write AV in Editor+0x5d15 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tga file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-10T21:26:10.000Z
CVE-2020-23902 
A buffer overflow in WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tga file. Related to Data from Faulting Address may be used as a return value starting at Editor!TMethodImplementationIntercept+0x528a3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-10T21:26:11.000Z
CVE-2020-23903 
A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-10T21:26:12.000Z
CVE-2020-23904 
A stack buffer overflow in speexenc.c of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file. NOTE: the vendor states "I cannot reproduce it" and it "is a demo program.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-10T21:26:13.000Z
CVE-2020-23906 
FFmpeg N-98388-g76a3ee996b allows attackers to cause a denial of service (DoS) via a crafted audio file due to insufficient verification of data authenticity.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-10T21:26:14.000Z
CVE-2020-23907 
An issue was discovered in retdec v3.3. In function canSplitFunctionOn() of ir_modifications.cpp, there is a possible out of bounds read due to a heap buffer overflow. The impact is: Deny of Service, Memory Disclosure, and Possible Code Execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-21T17:41:06.000Z
CVE-2020-23909 
Heap-based buffer over-read in function png_convert_4 in file pngex.cc in AdvanceMAME through 2.1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-07-18T00:00:00.000Z
CVE-2020-23910 
Stack-based buffer overflow vulnerability in asn1c through v0.9.28 via function genhash_get in genhash.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-07-18T00:00:00.000Z
CVE-2020-23911 
An issue was discovered in asn1c through v0.9.28. A NULL pointer dereference exists in the function _default_error_logger() located in asn1fix.c. It allows an attacker to cause Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-07-18T00:00:00.000Z
CVE-2020-23912 
An issue was discovered in Bento4 through v1.6.0-637. A NULL pointer dereference exists in the function AP4_StszAtom::GetSampleSize() located in Ap4StszAtom.cpp. It allows an attacker to cause Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-21T17:41:06.000Z
CVE-2020-23914 
An issue was discovered in cpp-peglib through v0.1.12. A NULL pointer dereference exists in the peg::AstOptimizer::optimize() located in peglib.h. It allows an attacker to cause Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-21T17:41:06.000Z
CVE-2020-23915 
An issue was discovered in cpp-peglib through v0.1.12. peg::resolve_escape_sequence() in peglib.h has a heap-based buffer over-read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-21T17:41:06.000Z
CVE-2020-23921 
An issue was discovered in fast_ber through v0.4. yy::yylex() in asn_compiler.hpp has a heap-based buffer over-read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-21T17:41:06.000Z
CVE-2020-23922 
An issue was discovered in giflib through 5.1.4. DumpScreen2RGB in gif2rgb.c has a heap-based buffer over-read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-21T17:41:06.000Z
CVE-2020-23928 
An issue was discovered in gpac before 1.0.1. The abst_box_read function in box_code_adobe.c has a heap-based buffer over-read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-21T17:41:06.000Z
CVE-2020-23930 
An issue was discovered in gpac through 20200801. A NULL pointer dereference exists in the function nhmldump_send_header located in write_nhml.c. It allows an attacker to cause Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-21T17:41:07.000Z