|
247411
|
5.3 |
MEDIUM
Network
|
znc debian
|
znc debian_linux
|
ZNC before 1.7.1-rc1 is prone to a path traversal flaw via ../ in a web skin name to access files outside of the intended skins directories.
|
CWE-22
Path Traversal
|
CVE-2018-14056
|
2024-11-21 12:48 |
2018-07-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247412
|
6.5 |
MEDIUM
Network
|
znc debian
|
znc debian_linux
|
ZNC before 1.7.1-rc1 does not properly validate untrusted lines coming from the network, allowing a non-admin user to escalate his privilege and inject rogue values into znc.conf.
|
CWE-20
Improper Input Validation
|
CVE-2018-14055
|
2024-11-21 12:48 |
2018-07-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247413
|
9.8 |
CRITICAL
Network
|
techsmith
|
mp4v2
|
A double free exists in the MP4StringProperty class in mp4property.cpp in MP4v2 2.0.0. A dangling pointer is freed again in the destructor once an exception is triggered.
|
CWE-415
Double Free
|
CVE-2018-14054
|
2024-11-21 12:48 |
2018-07-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247414
|
6.5 |
MEDIUM
Network
|
libwav_project
|
libwav
|
An issue has been found in libwav through 2017-04-20. It is a SEGV in the function apply_gain in wav_gain/wav_gain.c.
|
NVD-CWE-noinfo
|
CVE-2018-14052
|
2024-11-21 12:48 |
2018-07-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247415
|
7.5 |
HIGH
Network
|
libwav_project
|
libwav
|
The function wav_read in libwav.c in libwav through 2017-04-20 has an infinite loop.
|
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')
|
CVE-2018-14051
|
2024-11-21 12:48 |
2018-07-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247416
|
6.5 |
MEDIUM
Network
|
libwav_project
|
libwav
|
An issue has been found in libwav through 2017-04-20. It is a SEGV in the function wav_free in libwav.c.
|
NVD-CWE-noinfo
|
CVE-2018-14050
|
2024-11-21 12:48 |
2018-07-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247417
|
6.5 |
MEDIUM
Network
|
libwav_project
|
libwav
|
An issue has been found in libwav through 2017-04-20. It is a SEGV in the function print_info in wav_info/wav_info.c.
|
NVD-CWE-noinfo
|
CVE-2018-14049
|
2024-11-21 12:48 |
2018-07-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247418
|
6.5 |
MEDIUM
Network
|
libpng oracle
|
libpng jdk jre
|
An issue has been found in libpng 1.6.34. It is a SEGV in the function png_free_data in png.c, related to the recommended error handling for png_read_image.
|
NVD-CWE-noinfo
|
CVE-2018-14048
|
2024-11-21 12:48 |
2018-07-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247419
|
5.5 |
MEDIUM
Local
|
pngwriter_project
|
pngwriter
|
An issue has been found in PNGwriter 0.7.0. It is a SEGV in pngwriter::readfromfile in pngwriter.cc. NOTE: there is a "Warning: PNGwriter was never designed for reading untrusted files with it. Do NO…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2018-14047
|
2024-11-21 12:48 |
2018-07-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247420
|
8.8 |
HIGH
Network
|
exiv2
|
exiv2
|
Exiv2 0.26 has a heap-based buffer over-read in WebPImage::decodeChunks in webpimage.cpp.
|
CWE-125
Out-of-bounds Read
|
CVE-2018-14046
|
2024-11-21 12:48 |
2018-07-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|