libde265 v1.0.4 contains a heap buffer overflow in the put_weighted_pred_avg_16_fallback function, which can be exploited via a crafted a file.

libde265 v1.0.4 contains a heap buffer overflow in the de265_image::available_zscan function, which can be exploited via a crafted a file.

libde265 v1.0.4 contains a heap buffer overflow in the ff_hevc_put_unweighted_pred_8_sse function, which can be exploited via a crafted a file.

libde265 v1.0.4 contains a heap buffer overflow in the mc_chroma function, which can be exploited via a crafted a file.

libde265 v1.0.4 contains a global buffer overflow in the decode_CABAC_bit function, which can be exploited via a crafted a file.

libde265 v1.0.4 contains a heap buffer overflow in the mc_luma function, which can be exploited via a crafted a file.

libde265 v1.0.4 contains a heap buffer overflow in the put_epel_hv_fallback function, which can be exploited via a crafted a file.

Directory traversal in coreframe/app/template/admin/index.php in WUZHI CMS 4.1.0 allows attackers to list files in arbitrary directories via the dir parameter.

Buffer overflow in Core FTP LE v2.2 allows local attackers to cause a denial or service (crash) via a long string in the Setup->Users->Username editbox.

Vulnerability in emlog v6.0.0 allows user to upload webshells via zip plugin module.

Buffer overflow vulnerability in YotsuyaNight c-http v0.1.0, allows attackers to cause a denial of service via a long url request which is passed to the delimitedread function.

An issue was discoverered in in abhijitnathwani image-processing v0.1.0, allows local attackers to cause a denial of service via a crafted image file.

Buffer overflow vulnerability in function src_parser_trans_stage_1_2_3 trgil gilcc before commit 803969389ca9c06237075a7f8eeb1a19e6651759, allows attackers to cause a denial of service.

An issue was discovered in Pluck CMS 4.7.10-dev2 and 4.7.11. There is a file upload vulnerability that can cause a remote command execution via admin.php?action=files.

A File Deletion vulnerability exists in TinyShop 3.1.1 in the back_list parameter in controllers\admin.php, which could let a malicious user delete any file such as install.lock to reinstall cms.

transfig: segmentation fault in the gencgm_start() in gencgm.c

fig2dev 3.2.7b contains a segmentation fault in the gencgm_start function in gencgm.c.

transfig: global buffer overflow in the get_line() in read.c

fig2dev 3.2.7b contains a global buffer overflow in the get_line function in read.c.

transfig: stack-based buffer overflow in the read_textobject() in read.c

fig2dev 3.2.7b contains a stack buffer overflow in the read_textobject function in read.c.

transfig: global buffer overflow in the setfigfont() in genepic.c

fig2dev 3.2.7b contains a global buffer overflow in the setfigfont function in genepic.c.

transfig: global buffer overflow in conv_pattern_index() in gencgm.c

fig2dev 3.2.7b contains a global buffer overflow in the conv_pattern_index function in gencgm.c.