CVEs published in April 2021
1,956 vulnerabilities, 217 critical, 16 exploited.
- gstreamer, debian linux, redhat enterprise linux +2 moreGStreamer before 1.18.4 might cause heap corruption when parsing certain malformed Matroska files.7.8 High
- gstreamer, debian linux, redhat enterprise linux +2 moreGStreamer before 1.18.4 might access already-freed memory in error code paths when demuxing...7.8 High
- libtpms project libtpms, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in libtpms in versions before 0.8.0. The TPM 2 implementation returns 2048 bit...5.5 Medium
- gpacIn filters/reframe_latm.c in GPAC 1.0.1 there is a Null Pointer Dereference, when...5.5 Medium
- gpacThere is a integer overflow in media_tools/av_parsers.c in the gf_avc_read_pps_bs_internal in...5.5 Medium
- gpacIn the function gf_hevc_read_pps_bs_internal function in media_tools/av_parsers.c in GPAC 1.0.1...5.5 Medium
- gpacIn the adts_dmx_process function in filters/reframe_adts.c in GPAC 1.0.1, a crafted file may...5.5 Medium
- gpacThere is a Null Pointer Dereference in function filter_core/filter_pck.c...5.5 Medium
- gpacThere is a integer overflow in media_tools/av_parsers.c in the hevc_parse_slice_segment function...5.5 Medium
- gpacThere is a integer overflow in function filter_core/filter_props.c:gf_props_assign_value in GPAC...7.8 High
- grassroot platform, grassrootza grassroot-platform +1 moreMissing validation of JWT signature in `grassrootza/grassroot-platform`7.5 High
- matrix-media-repo project matrix-media-repoDenial of service through memory exhaustion5.7 Medium
- torchbox wagtailImproper validation of URLs ('Cross-site Scripting') in Wagtail rich text fields6.1 Medium
- gpacThe AV1_DuplicateConfig function in GPAC 1.0.1 allows attackers to cause a denial of service ...5.5 Medium
- gpacThe gf_hinter_track_new function in GPAC 1.0.1 allows attackers to read memory via a crafted file...5.5 Medium
- gpacThe MergeTrack function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer...5.5 Medium
- gpacThe gf_isom_cenc_get_default_info_internal function in GPAC 1.0.1 allows attackers to cause a...5.5 Medium
- gpacThe gf_isom_set_extraction_slc function in GPAC 1.0.1 allows attackers to cause a denial of...5.5 Medium
- gpacThe HintFile function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer...5.5 Medium
- gpacMemory leak in the stbl_GetSampleInfos function in MP4Box in GPAC 1.0.1 allows attackers to read...5.5 Medium
- gpacBuffer overflow in the abst_box_read function in MP4Box in GPAC 1.0.1 allows attackers to cause a...7.8 High
- gpacBuffer overflow in the tenc_box_read function in MP4Box in GPAC 1.0.1 allows attackers to cause a...7.8 High
- ibm resilient, resilient onprem +1 moreIBM Resilient SOAR V38.0 could allow a privileged user to create create malicious scripts that...6.0 Medium
- online discussion forum project discussion forumThe messaging subsystem in the Online Discussion Forum 1.0 is vulnerable to XSS in the message...5.4 Medium
- vyperlang vyperVyper before 0.3.0 Memory Corruption via Internal Function Calls in Arrays8.3 High
- vyperlang vyperVyper before 0.2.9 Incorrect RETURNDATASIZE in create_forwarder_to Proxies6.3 Medium
- autodesk fbx reviewA user may be tricked into opening a malicious FBX file which may exploit a use-after-free...7.8 High
- autodesk fbx reviewA user may be tricked into opening a malicious FBX file which may exploit a Directory Traversal...7.8 High
- autodesk fbx reviewThe user may be tricked into opening a malicious FBX file which may exploit a Null Pointer...5.5 Medium
- autodesk fbx reviewA Memory Corruption Vulnerability in Autodesk FBX Review version 1.4.0 may lead to remote code...7.8 High
- autodesk fbx reviewA Out-Of-Bounds Read/Write Vulnerability in Autodesk FBX Review version 1.4.0 may lead to remote...7.8 High
com.vaadin:vaadin-text-field-flowMavenRegular expression denial of service (ReDoS) in EmailField component in Vaadin 14 and 15-177.5 High- flow flow-server, vaadin flow, vaadin +2 moreUnauthorized client-side property update in UIDL request handler in Vaadin 10 and 112.6 Low
- flow flow-server, vaadin flow, vaadin +2 moreReflected cross-site scripting in default RouteNotFoundError view in Vaadin 10 and 11-136.1 Medium
- flow flow-server, vaadin flow, vaadin +2 morePotential sensitive data exposure in applications using Vaadin 153.1 Low
- flow flow-server, vaadin flow, vaadin +2 moreDirectory traversal in development mode handler in Vaadin 14 and 15-175.9 Medium
- flow flow-server, vaadin flow, vaadin +2 moreTiming side channel vulnerability in UIDL request handler in Vaadin 10, 11-14, and 15-184.0 Medium
- vaadin, vaadin vaadin-server +1 moreTiming side channel vulnerability in UIDL request handler in Vaadin 7 and 84.0 Medium
- flow flow-server, vaadin flow, vaadin +2 moreServer classes and resources exposure in OSGi applications using Vaadin 12-14 and 198.6 High
- flow flow-server, vaadin flow, vaadin +2 moreTiming side channel vulnerability in endpoint request handler in Vaadin 15-194.0 Medium
- vaadin, vaadin vaadin-server +1 moreStored cross-site scripting in Grid component in Vaadin 7 and 85.4 Medium
- vaadin, vaadin vaadin-server +1 moreRegular expression Denial of Service (ReDoS) in EmailValidator class in Vaadin 77.5 High
com.vaadin:vaadin-bomMavenUnauthorized client-side property update in UIDL request handler in Vaadin 10 and 112.6 Lowcom.vaadin:vaadin-bomMavenReflected cross-site scripting in default RouteNotFoundError view in Vaadin 10 and 11-136.1 Mediumcom.vaadin:vaadin-bomMavenPotential sensitive data exposure in applications using Vaadin 153.1 Lowcom.vaadin:vaadin-bomMavenDirectory traversal in development mode handler in Vaadin 14 and 15-175.9 Mediumcom.vaadin:vaadin-bomMavenTiming side channel vulnerability in UIDL request handler in Vaadin 10, 11-14, and 15-184.0 Medium- vaadin flow, vaadin, vaadin vaadin-text-field-flow +2 moreRegular expression denial of service (ReDoS) in EmailField component in Vaadin 14 and 15-177.5 High
com.vaadin:vaadin-bomMavenTiming side channel vulnerability in endpoint request handler in Vaadin 15-194.0 Mediumcom.vaadin:vaadin-bomMavenServer classes and resources exposure in OSGi applications using Vaadin 12-14 and 198.6 High- Show moreLoading…