CVE-2014-125013 FFmpeg msrle.c msrle_decode_frame memory corruption

A vulnerability was found in FFmpeg 2.0 and classified as problematic. This issue affects the function msrledecodeframe of the file libavcodec/msrle.c. The manipulation leads to memory corruption. The attack may be initiated remotely. It is recommended to apply a patch to fix this issue...

CVE-2014-125012

CVE-2014-125012 affects FFmpeg 2.0, specifically an issue in libavcodec/dxtroy.c. The vulnerability stems from an integer coercion error in an unknown function, which can be triggered remotely. The description consistently states that the issue allows remote launch of an attack and recommends app...

CVE-2014-125011

CVE-2014-125011 affects FFmpeg 2.0, specifically the decode_frame function in libavcodec/ansi.c, where an integer coercion error can be exploited remotely. Verified sources (NVD entry, Red Hat, Debian, Ubuntu OSV, CVE.org, etc.) consistently describe the vulnerability as a memory corruption/integ...

CVE-2014-125010

CVE-2014-125010 affects FFmpeg 2.0. The vulnerability lies in the function decode_slice_header of libavcodec/h64.c, causing memory corruption. The issue can be triggered remotely and is described as a memory corruption/denial-of-service risk. Multiple sources corroborate the affected component an...

CVE-2014-125006 FFmpeg h264.c output_frame memory corruption

A vulnerability, which was classified as problematic, has been found in FFmpeg 2.0. Affected by this issue is the function outputframe of the file libavcodec/h264.c. The manipulation leads to memory corruption. The attack may be launched remotely. It is recommended to apply a patch to fix this...

CVE-2014-125002

FFmpeg 2.0 contains a memory corruption vulnerability in the function dnxhd_init_rc (libavcodec/dnxhdenc.c). The issue can be triggered remotely and could impact affected FFmpeg builds, implying possible denial-of-service or instability as described for CVE-2014-125002. The available documents id...

EulerOS 2.0 SP5 : java-1.8.0-openjdk (EulerOS-SA-2022-1894)

According to the versions of the java-1.8.0-openjdk packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Utility. Supported versions tha...

EulerOS 2.0 SP5 : openssl (EulerOS-SA-2022-1909)

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The crehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating...

PT-2022-21905 · Debian +1 · Debian +1

Name of the Vulnerable Software and Affected Versions: Checkmk versions 1.6 through 1.6.9p29 Checkmk versions 2.0 through 2.0.0p26 Checkmk versions 2.1 through 2.1.0p3 Checkmk version 2.2.0i1 Description: A permission issue affects users that deployed the shipped version of the Checkmk Debian...

EulerOS 2.0 SP5 : libcacard (EulerOS-SA-2022-1897)

According to the versions of the libcacard package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Memory leak in the vcardapdunew function in card7816.c in libcacard before 2.5.3 allows local guest OS users to cause a denial of service host...

EulerOS 2.0 SP5 : zlib (EulerOS-SA-2022-1920)

According to the versions of the zlib packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches. CVE-2018-25032 Note that...

EulerOS 2.0 SP5 : python (EulerOS-SA-2022-1911)

According to the versions of the python packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in Python, specifically in the FTP File Transfer Protocol client library in PASV passive mode. The issue is how the FTP client...

ABB Drive Composer 后置链接漏洞

ABB Drive Composer is a 32-bit Windows application from ABB Switzerland. It is used to commission and maintain ABB Common Architecture drives. A security vulnerability exists in ABB Drive Composer that originates from a vulnerability that allows a low-privileged attacker to create and write files...

Siemens Mendix SAML Module跨站脚本漏洞

The Mendix SAML Module allows authentication of users in cloud applications using SAML. The module can communicate with any identity provider that supports SAML 2.0 or Shibboleth. A cross-site scripting vulnerability exists in Siemens Mendix SAML Module, which can be exploited by attackers to...

Siemens Mendix SAML Module XML External Entity Reference Vulnerability

The Mendix SAML Module allows authentication of users in cloud applications using SAML. The module can communicate with any identity provider that supports SAML 2.0 or Shibboleth. An XML external entity reference vulnerability exists in Siemens Mendix SAML Module, which can be exploited by...

EulerOS 2.0 SP9 : expat (EulerOS-SA-2022-1861)

According to the versions of the expat package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - xmltokimpl.c in Expat aka libexpat before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a...

ABB Drive Composer 后置链接漏洞

ABB Drive Composer is a 32-bit Windows application from ABB Switzerland. It is used to commission and maintain ABB Common Architecture drives. ABB Drive Composer is affected by a security vulnerability that originates from a vulnerability that allows an attacker with low privileges to create and...

EulerOS 2.0 SP9 : polkit (EulerOS-SA-2022-1874)

According to the versions of the polkit packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - There is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to process file descriptor exhaustion. The highest...

EulerOS 2.0 SP9 : nss (EulerOS-SA-2022-1871)

According to the versions of the nss packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Improper refcounting of soft token session objects could cause a use-after-free and crash likely limited to a denial of service. This vulnerability...

EulerOS 2.0 SP9 : bluez (EulerOS-SA-2022-1858)

According to the versions of the bluez package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could pass specially crafted fil...