|
248961
|
9.8 |
CRITICAL
Network
|
axiosys
|
bento4
|
An issue has been found in Bento4 1.5.1-624. AP4_Mpeg2TsVideoSampleStream::WriteSample in Core/Ap4Mpeg2Ts.cpp has a heap-based buffer over-read after a call from Mp42Ts.cpp, a related issue to CVE-20…
|
CWE-125
Out-of-bounds Read
|
CVE-2018-13846
|
2024-11-21 12:48 |
2018-07-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248962
|
9.8 |
CRITICAL
Network
|
htslib
|
htslib
|
An issue has been found in HTSlib 1.8. It is a buffer over-read in sam_parse1 in sam.c.
|
CWE-125
Out-of-bounds Read
|
CVE-2018-13845
|
2024-11-21 12:48 |
2018-07-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248963
|
7.5 |
HIGH
Network
|
htslib
|
htslib
|
An issue has been found in HTSlib 1.8. It is a memory leak in fai_read in faidx.c. NOTE: This has been disputed with the assertion that this vulnerability exists in the test harness and HTSlib users …
|
CWE-401
Missing Release of Memory after Effective Lifetime
|
CVE-2018-13844
|
2024-11-21 12:48 |
2018-07-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248964
|
7.5 |
HIGH
Network
|
htslib
|
htslib
|
An issue has been found in HTSlib 1.8. It is a memory leak in bgzf_getline in bgzf.c. NOTE: the software maintainer's position is that the "failure to free memory" can be fixed in applications that u…
|
CWE-772
Missing Release of Resource after Effective Lifetime
|
CVE-2018-13843
|
2024-11-21 12:48 |
2018-07-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248965
|
7.8 |
HIGH
Local
|
cmft_project
|
cmft
|
An issue was discovered in cmft through 2017-09-24. The cmft::rwReadFile function in image.cpp allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash)…
|
CWE-787
Out-of-bounds Write
|
CVE-2018-13833
|
2024-11-21 12:48 |
2018-07-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248966
|
9.8 |
CRITICAL
Network
|
symfony
|
twig
|
Twig before 2.4.4 allows Server-Side Template Injection (SSTI) via the search search_key parameter. NOTE: the vendor points out that Twig itself is not a web application and states that it is the res…
|
CWE-94
Code Injection
|
CVE-2018-13818
|
2024-11-21 12:48 |
2018-07-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248967
|
9.8 |
CRITICAL
Network
|
node-macaddress_project
|
node-macaddress
|
The macaddress module before 0.2.9 for Node.js is prone to an arbitrary command injection flaw, due to allowing unsanitized input to an exec (rather than execFile) call.
|
CWE-78
OS Command
|
CVE-2018-13797
|
2024-11-21 12:48 |
2018-07-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248968
|
7.5 |
HIGH
Network
|
creolabs
|
gravity
|
Gravity before 0.5.1 does not support a maximum recursion depth.
|
CWE-20
Improper Input Validation
|
CVE-2018-13795
|
2024-11-21 12:48 |
2018-07-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248969
|
9.8 |
CRITICAL
Network
|
catimg_project
|
catimg
|
A heap-based buffer overflow exists in stbi__bmp_load_cont in stb_image.h in catimg 2.4.0.
|
CWE-787
Out-of-bounds Write
|
CVE-2018-13794
|
2024-11-21 12:48 |
2018-07-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248970
|
8.8 |
HIGH
Network
|
abbyy
|
flexicapture
|
Multiple Cross Site Request Forgery (CSRF) vulnerabilities in the HTTP API in ABBYY FlexiCapture before 12 Release 1 Update 7 exist in Web Verification, Web Scanning, Web Capture, Monitoring and Admi…
|
CWE-352
Origin Validation Error
|
CVE-2018-13793
|
2024-11-21 12:48 |
2018-07-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|