GStreamer 输入验证错误漏洞

GStreamer is a set of frameworks for processing streaming media. An input validation error vulnerability exists in GStreamer version 1.16.2, which is caused by an integer overflow when zlib decodes gstmatroskadecompressdata encoded data, and can be exploited by an attacker to cause a system crash...

GStreamer 输入验证错误漏洞

GStreamer is a set of frameworks for processing streaming media. A security vulnerability exists in GStreamer version 1.16.2, which originates from a heap override in gstmatroskademuxaddwvpkheader, and can be exploited by an attacker to cause a system crash...

GStreamer 输入验证错误漏洞

GStreamer is a set of frameworks for processing streaming media. An input validation error vulnerability exists in GStreamer version 1.16.2, which is caused by an integer overflow when zlib decodes gstmatroskadecompressdata encoded data, and can be exploited by an attacker to cause a system crash...

GStreamer 输入验证错误漏洞

GStreamer is a set of frameworks for processing streaming media. An input validation error vulnerability exists in GStreamer version 1.16.2, which stems from an integer overflow in the matroskademux element of the gstmatroskadecompressdata function, which results in a segmentation error that can ...

GStreamer 输入验证错误漏洞

GStreamer is a set of frameworks for handling streaming media. A security vulnerability exists in GStreamer version 1.16.2, which originates from an integer overflow in the qtdemux element of the qtdemuxinflate function, resulting in a segmentation error that can be exploited by an attacker to...

GStreamer 输入验证错误漏洞

GStreamer is a set of frameworks for processing streaming media. A security vulnerability exists in GStreamer version 1.16.2, which stems from an integer overflow in the matroskaparse element of the gstmatroskadecompressdata function, resulting in a heap overflow that can be exploited by an...

Kimai 跨站请求伪造漏洞

Kimai is an open source, web-based multi-user time tracking application. kimai 2 1.16.2 previously contained a cross-site request forgery vulnerability, which stems from the product's failure to verify that requests originate from trusted users. An attacker could send an unintended request to the...

dojox (>=1.16.0, <=1.16.2) potentially affected by CVE-2020-4051 via dijit (>=1.16.0, <=1.16.2)

dijit NPM version =1.16.0, =1.16.0, =1.16.2 Source cves: CVE-2020-4051 Source advisory: OSV:GHSA-CXJC-R2FP-7MQ6...

CVE-2020-5259

In affected versions of dojox NPM package, the jqMix method is vulnerable to Prototype Pollution. Prototype Pollution refers to the ability to inject properties into existing JavaScript language construct prototypes, such as objects. An attacker manipulates these attributes to overwrite, or...

Code injection

In affected versions of dojox NPM package, the jqMix method is vulnerable to Prototype Pollution. Prototype Pollution refers to the ability to inject properties into existing JavaScript language construct prototypes, such as objects. An attacker manipulates these attributes to overwrite, or...

PT-2015-6099 · Open Source +2 · Clutter +2

Name of the Vulnerable Software and Affected Versions: Clutter versions prior to 1.16.2 Description: The issue concerns the gesture handling code, allowing physically proximate attackers to bypass the lock screen via certain mouse or touch gestures. Recommendations: For versions prior to 1.16.2,...

MediaWiki < 1.16.2 'CSS Comments' XSS Vulnerability

MediaWiki is prone to a cross-site scripting XSS vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...