Skip to content
OpenAdvisories

Archive

10 January 2022

Vulnerabilities first published on this day (UTC), newest first.

← December 2021 2022 / January /10 February 2022 →
  1. 110
  2. 22
  3. 3104
  4. 456
  5. 535
  6. 658
  7. 7102
  8. 817
  9. 910
  10. 1048
  11. 11135
  12. 1267
  13. 13158
  14. 14148
  15. 1515
  16. 163
  17. 1737
  18. 1885
  19. 19233
  20. 2072
  21. 2183
  22. 224
  23. 234
  24. 2478
  25. 25114
  26. 2652
  27. 2787
  28. 28167
  29. 297
  30. 307
  31. 3128
All Critical High Medium Low Exploited only Public exploit

48 results · Feed

  • Unscored —
    CVE-2021-36408

    An issue was discovered in libde265 v1.0.8.There is a Heap-use-after-free in intrapred.h when decoding file using dec26…

    libde265 libde265 libde265 Debian Ubuntu Alpine
  • Unscored —
    CVE-2021-36409

    There is an Assertion `scaling_list_pred_matrix_id_delta==1' failed at sps.cc:925 in libde265 v1.0.8 when decoding file…

    libde265 libde265 Debian Ubuntu
  • Unscored —
    CVE-2021-36410

    A stack-buffer-overflow exists in libde265 v1.0.8 via fallback-motion.cc in function put_epel_hv_fallback when running …

    libde265 libde265 libde265 Debian Ubuntu Alpine
  • Unscored —
    CVE-2021-36412

    A heap-based buffer overflow vulnerability exists in MP4Box in GPAC 1.0.1 via the gp_rtp_builder_do_mpeg12_video functi…

    gpac gpac Debian Ubuntu
  • Unscored —
    CVE-2021-36414

    A heab-based buffer overflow vulnerability exists in MP4Box in GPAC 1.0.1 via media.c, which allows attackers to cause …

    gpac gpac Debian Ubuntu
  • Unscored —
    CVE-2021-36411

    An issue has been found in libde265 v1.0.8 due to incorrect access control. A SEGV caused by a READ memory access in fu…

    libde265 libde265 libde265 Debian Ubuntu Alpine
  • High 8.8
    CVE-2021-21408

    Access to restricted PHP code by dynamic static class access in smarty

    Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. Prior to versions 3.1.43 and 4.0.3, template authors could run restricted static php methods. Users should upgrade to version 3.1.43 or 4.0.3 t…

    smarty-php smarty smarty3 smarty/smarty Debian Ubuntu Packagist
  • Unscored —
    CVE-2021-25032 Public exploit Scanner template

    PublishPress Capabilities < 2.3.1 - Unauthenticated Arbitrary Options Update to Blog Compromise

    The PublishPress Capabilities WordPress plugin before 2.3.1, PublishPress Capabilities Pro WordPress plugin before 2.3.1 does not have authorisation and CSRF checks when updating the plugin's settings via the init hook, and does not ensure that the options to…

    Web / CMS