Vulnerabilities (CVE)

Total 354702 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-18831 2024-11-21 N/A 7.8 HIGH
Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecified impacts via use of crafted file.
CVE-2020-18781 2024-11-21 N/A 5.5 MEDIUM
Heap buffer overflow vulnerability in FilePOSIX::read in File.cpp in audiofile 0.3.6 may cause denial-of-service via a crafted wav file, this bug can be triggered by the executable sfconvert.
CVE-2020-18780 2024-11-21 N/A 5.5 MEDIUM
A Use After Free vulnerability in function new_Token in asm/preproc.c in nasm 2.14.02 allows attackers to cause a denial of service via crafted nasm command.
CVE-2020-18778 1 Libav 1 Libav 2024-11-21 4.3 MEDIUM 6.5 MEDIUM
In Libav 12.3, there is a heap-based buffer over-read in vc1_decode_p_mb_intfi in vc1_block.c that allows an attacker to cause denial-of-service via a crafted file.
CVE-2020-18776 1 Libav 1 Libav 2024-11-21 4.3 MEDIUM 6.5 MEDIUM
In Libav 12.3, there is a segmentation fault in vc1_decode_b_mb_intfr in vc1_block.c that allows an attacker to cause denial-of-service via a crafted file.
CVE-2020-18775 1 Libav 1 Libav 2024-11-21 4.3 MEDIUM 6.5 MEDIUM
In Libav 12.3, there is a heap-based buffer over-read in vc1_decode_b_mb_intfi in vc1_block.c that allows an attacker to cause denial-of-service via a crafted file.
CVE-2020-18774 1 Exiv2 1 Exiv2 2024-11-21 4.3 MEDIUM 6.5 MEDIUM
A float point exception in the printLong function in tags_int.cpp of Exiv2 0.27.99.0 allows attackers to cause a denial of service (DOS) via a crafted tif file.
CVE-2020-18773 1 Exiv2 1 Exiv2 2024-11-21 4.3 MEDIUM 6.5 MEDIUM
An invalid memory access in the decode function in iptc.cpp of Exiv2 0.27.99.0 allows attackers to cause a denial of service (DOS) via a crafted tif file.
CVE-2020-18771 2 Debian, Exiv2 2 Debian Linux, Exiv2 2024-11-21 5.8 MEDIUM 8.1 HIGH
Exiv2 0.27.99.0 has a global buffer over-read in Exiv2::Internal::Nikon1MakerNote::print0x0088 in nikonmn_int.cpp which can result in an information leak.
CVE-2020-18768 2024-11-21 N/A 5.5 MEDIUM
There exists one heap buffer overflow in _TIFFmemcpy in tif_unix.c in libtiff 4.0.10, which allows an attacker to cause a denial-of-service through a crafted tiff file.
CVE-2020-18766 1 Antsword Project 1 Antsword 2024-11-21 6.8 MEDIUM 9.6 CRITICAL
A cross-site scripting (XSS) vulnerability AntSword v2.0.7 can remotely execute system commands.
CVE-2020-18759 1 Dcce 2 Mac1100 Plc, Mac1100 Plc Firmware 2024-11-21 5.0 MEDIUM 7.5 HIGH
An information disclosure vulnerability exists in the EPA protocol of Dut Computer Control Engineering Co.'s PLC MAC1100.
CVE-2020-18758 1 Dcce 2 Mac1100 Plc, Mac1100 Plc Firmware 2024-11-21 10.0 HIGH 9.8 CRITICAL
An issue in Dut Computer Control Engineering Co.'s PLC MAC1100 allows attackers to execute arbitrary code.
CVE-2020-18757 1 Dcce 2 Mac1100 Plc, Mac1100 Plc Firmware 2024-11-21 7.8 HIGH 7.5 HIGH
An issue in Dut Computer Control Engineering Co.'s PLC MAC1100 allows attackers to cause persistent denial of service (DOS) via a crafted packet.
CVE-2020-18756 1 Dcce 2 Mac1100 Plc, Mac1100 Plc Firmware 2024-11-21 5.0 MEDIUM 7.5 HIGH
An arbitrary memory access vulnerability in the EPA protocol of Dut Computer Control Engineering Co.'s PLC MAC1100 allows attackers to read the contents of any variable area.
CVE-2020-18754 1 Dcce 2 Mac1100 Plc, Mac1100 Plc Firmware 2024-11-21 5.0 MEDIUM 7.5 HIGH
An information disclosure vulnerability exists within Dut Computer Control Engineering Co.'s PLC MAC1100.
CVE-2020-18753 1 Dcce 2 Mac1100 Plc, Mac1100 Plc Firmware 2024-11-21 7.5 HIGH 9.8 CRITICAL
An issue in Dut Computer Control Engineering Co.'s PLC MAC1100 allows attackers to gain access to the system and escalate privileges via a crafted packet.
CVE-2020-18750 1 Flowpaper 1 Pdf2json 2024-11-21 4.6 MEDIUM 7.8 HIGH
Buffer overflow in pdf2json 0.69 allows local users to execute arbitrary code by converting a crafted PDF file.
CVE-2020-18748 1 Typora 1 Typora 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
Cross Site Scripting (XSS) in Typora v0.9.65 allows attackers to execute arbitrary code via mathjax syntax due to a mathjax configuration error in the mathematical formula blocks. This is a different vulnerability from CVE-2020-18221.
CVE-2020-18746 1 Aitecms 1 Aitecms 2024-11-21 6.5 MEDIUM 7.2 HIGH
SQL Injection in AiteCMS v1.0 allows remote attackers to execute arbitrary code via the component "aitecms/login/diy_list.php".