Lucene search
+L

1340 matches found

Positive Technologies
Positive Technologies
added 2025/08/05 12:00 a.m.24 views

PT-2025-31945 · Libav · Libav

Name of the Vulnerable Software and Affected Versions: libav versions up to 12.3 Description: A problematic issue exists in libav due to a null pointer dereference in the av buffer unref function within the libavutil/buffer.c file of the AVI File Parser component. Local access is required for...

4.8CVSS4AI score0.00206EPSS
SaveExploits1References11
CNNVD
CNNVD
added 2025/08/05 12:00 a.m.11 views

libav 安全漏洞

Libav is a cross-platform solution for recording and converting audio and video from the Libav team that includes a libavcodec encoder. A security vulnerability exists in libav 12.3 and earlier versions, which stems from a null pointer dereference in the function avbufferunref in the file...

4.8CVSS4.2AI score0.00206EPSS
SaveExploits1References6
SUSE Linux
SUSE Linux
added 2025/07/17 12:33 p.m.3 views

Security update for ffmpeg

This update for ffmpeg fixes the following issues: CVE-2022-1475: Fixed integer overflow in g729parse in llibavcodec/g729parser.c bsc1198898. CVE-2024-36616: Fixed integer overflow in the component libavformat/westwoodvqa.c bsc1234018. CVE-2024-36617: Fixed integer overflow vulnerability in the...

6.9CVSS6.9AI score0.00921EPSS
SaveExploits1References16
OSV
OSV
added 2025/07/17 12:33 p.m.13 views

SUSE-SU-2025:02352-1 Security update for ffmpeg

This update for ffmpeg fixes the following issues: - CVE-2022-1475: Fixed integer overflow in g729parse in llibavcodec/g729parser.c bsc1198898. - CVE-2024-36616: Fixed integer overflow in the component libavformat/westwoodvqa.c bsc1234018. - CVE-2024-36617: Fixed integer overflow vulnerability in...

6.5CVSS6.5AI score0.00921EPSS
SaveExploits1References9
OSV
OSV
added 2025/07/11 11:08 a.m.6 views

OESA-2025-1772 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: A heap-use-after-free i...

8.8CVSS7.2AI score0.01681EPSS
SaveExploits12References15
BDU FSTEC
BDU FSTEC
added 2025/07/07 12:00 a.m.11 views

The vulnerability of the avidmx_process() function (filters/dmx_avi.c) in the MP4Box utility of the GPAC multimedia platform, which allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the avidmxprocess function filters/dmxavi.c in the MP4Box utility of the GPAC multimedia platform is related to the lack of checks for division by zero when processing the numframes parameter for AVI files. Exploiting this vulnerability could allow an attacker to execute...

5.5CVSS6AI score
SaveExploits0References2Affected Software2
SUSE Linux
SUSE Linux
added 2025/06/24 12:03 p.m.9 views

Security update for gstreamer-plugins-good

This update for gstreamer-plugins-good fixes the following issues: CVE-2024-47540: Fixed an uninitialized stack memory in Matroska/WebM demuxer. boo1234421 CVE-2024-47537: Fixed an out-of-bounds write in isomp4/qtdemux.c. boo1234414 CVE-2024-47543: Fixed an out-of-bounds write in...

7.8CVSS7.7AI score0.01355EPSS
SaveExploits0References76
OSV
OSV
added 2025/06/24 12:03 p.m.6 views

SUSE-SU-2025:00063-1 Security update for gstreamer-plugins-good

This update for gstreamer-plugins-good fixes the following issues: - CVE-2024-47540: Fixed an uninitialized stack memory in Matroska/WebM demuxer. boo1234421 - CVE-2024-47537: Fixed an out-of-bounds write in isomp4/qtdemux.c. boo1234414 - CVE-2024-47543: Fixed an out-of-bounds write in...

9.8CVSS7.3AI score0.01355EPSS
SaveExploits0References39
RedhatCVE
RedhatCVE
added 2025/06/14 10:13 p.m.10 views

CVE-2025-41233

Description: VMware AVI Load Balancer contains an authenticated blind SQL Injection vulnerability. VMware has evaluated the severity of the issue to be in the Moderate severity range https://www.broadcom.com/support/vmware-services/security-response with a maximum CVSSv3 base score of 6.8...

6.8CVSS7.3AI score0.00277EPSS
SaveExploits0References1
NVD
NVD
added 2025/06/12 10:15 p.m.15 views

CVE-2025-41233

Description: VMware AVI Load Balancer contains an authenticated blind SQL Injection vulnerability. VMware has evaluated the severity of the issue to be in the Moderate severity range https://www.broadcom.com/support/vmware-services/security-response with a maximum CVSSv3 base score of 6.8...

6.8CVSS0.00277EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/06/12 9:39 p.m.3 views

CVE-2025-41233

Description: VMware AVI Load Balancer contains an authenticated blind SQL Injection vulnerability. VMware has evaluated the severity of the issue to be in the Moderate severity range https://www.broadcom.com/support/vmware-services/security-response with a maximum CVSSv3 base score of 6.8...

6.8CVSS8.6AI score0.00277EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/06/12 9:39 p.m.31 views

CVE-2025-41233

Description: VMware AVI Load Balancer contains an authenticated blind SQL Injection vulnerability. VMware has evaluated the severity of the issue to be in the Moderate severity range https://www.broadcom.com/support/vmware-services/security-response with a maximum CVSSv3 base score of 6.8...

6.8CVSS0.00277EPSS
SaveExploits0References1
CVE
CVE
added 2025/06/12 9:39 p.m.56 views

CVE-2025-41233

CVE-2025-41233 affects VMware Avi Load Balancer. An authenticated attacker can trigger blind SQL injection in versions 30.1.1, 30.1.2, 30.2.1, and 30.2.2 due to improper input validation, enabling unauthorized DB access. Impact described as moderate (CVSSv3 base score up to 6.8). Remediation requ...

6.8CVSS7.2AI score0.00277EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/06/12 12:00 a.m.9 views

VMware AVI Load Balancer 安全漏洞

VMware Avi Load Balancer is a load balancing platform from VMware. VMware Avi Load Balancer suffers from a SQL injection vulnerability that stems from the application's lack of validation of externally entered SQL statements. An attacker can exploit this vulnerability to execute illegal SQL...

6.8CVSS8AI score0.00277EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/05/26 12:00 a.m.12 views

The vulnerability of software for managing traffic in hybrid and multi-cloud environments, such as VMware Avi Load Balancer, stems from insufficient measures taken to protect the SQL query structure. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the software for managing traffic in hybrid and multi-cloud environments of VMware Avi Load Balancer is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized acce...

6.8CVSS5.6AI score0.00277EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2025/05/23 12:01 p.m.27 views

CLSA-2025-1748001706 gstreamer1-plugins-good: Fix of CVE-2024-47774

CVE-2024-47774: fix an integer overflow in the AVI subtitle parser that can lead to out-of-bounds reads and can cause crashes for certain input files...

9.1CVSS6.8AI score0.00823EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 8:53 a.m.8 views

CVE-2024-41200

A segmentation fault in KMPlayer v4.2.2.65 allows attackers to cause a Denial of Service DoS via a crafted AVI file...

5.5CVSS6.7AI score0.00158EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 8:16 a.m.6 views

CVE-2024-36618

FFmpeg n6.1.1 has a vulnerability in the AVI demuxer of the libavformat library which allows for an integer overflow, potentially resulting in a denial-of-service DoS condition...

6.2CVSS6.8AI score0.00244EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:33 p.m.19 views

CVE-2022-25676

Information disclosure in video due to buffer over-read while parsing avi files in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

6.8CVSS7.3AI score0.00114EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:26 p.m.12 views

CVE-2021-25802

A buffer overflow vulnerability in the AVIExtractSubtitle component of VideoLAN VLC Media Player 3.0.11 allows attackers to cause an out-of-bounds read via a crafted .avi file...

7.1CVSS6.9AI score0.00741EPSS
SaveExploits0References1
Rows per page
Query Builder