11603 matches found
UBUNTU-CVE-2014-125016
A vulnerability was found in FFmpeg 2.0. It has been rated as problematic. This issue affects the function ffinitbufferinfo of the file utils.c. The manipulation leads to memory corruption. The attack may be initiated remotely. It is recommended to apply a patch to fix this issue...
CVE-2014-125010
A vulnerability was found in FFmpeg 2.0. It has been rated as critical. Affected by this issue is the function decodesliceheader of the file libavcodec/h64.c. The manipulation leads to memory corruption. The attack may be launched remotely. It is recommended to apply a patch to fix this issue...
Memory corruption
A vulnerability, which was classified as problematic, was found in FFmpeg 2.0. This affects the function decodevolheader of the file libavcodec/mpeg4videodec.c. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to apply a patch to fix...
UBUNTU-CVE-2014-125005
A vulnerability, which was classified as problematic, was found in FFmpeg 2.0. This affects the function decodevolheader of the file libavcodec/mpeg4videodec.c. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to apply a patch to fix...
CVE-2014-125017
FFmpeg 2.0 contains a memory corruption vulnerability in the rpza_decode_stream function. The flaw can be triggered remotely, leading to potential code execution or crashes. A patch named Fixes Invalid Writes exists; apply it to remediate. No explicit exploit details or affected versions beyond F...
CVE-2014-125014
CVE-2014-125014 affects FFmpeg 2.0, targeting the HEVC Video Decoder. The vulnerability is a memory corruption issue in an unknown decoder functionality, with the potential for remote exploitation. Multiple trusted advisories (Red Hat, Debian, Ubuntu, CNVD, CVE listings) describe the issue and co...
CVE-2014-125013 FFmpeg msrle.c msrle_decode_frame memory corruption
A vulnerability was found in FFmpeg 2.0 and classified as problematic. This issue affects the function msrledecodeframe of the file libavcodec/msrle.c. The manipulation leads to memory corruption. The attack may be initiated remotely. It is recommended to apply a patch to fix this issue...
CVE-2014-125012
CVE-2014-125012 affects FFmpeg 2.0, specifically an issue in libavcodec/dxtroy.c. The vulnerability stems from an integer coercion error in an unknown function, which can be triggered remotely. The description consistently states that the issue allows remote launch of an attack and recommends app...
CVE-2014-125011
CVE-2014-125011 affects FFmpeg 2.0, specifically the decode_frame function in libavcodec/ansi.c, where an integer coercion error can be exploited remotely. Verified sources (NVD entry, Red Hat, Debian, Ubuntu OSV, CVE.org, etc.) consistently describe the vulnerability as a memory corruption/integ...
CVE-2014-125010
CVE-2014-125010 affects FFmpeg 2.0. The vulnerability lies in the function decode_slice_header of libavcodec/h64.c, causing memory corruption. The issue can be triggered remotely and is described as a memory corruption/denial-of-service risk. Multiple sources corroborate the affected component an...
CVE-2014-125006 FFmpeg h264.c output_frame memory corruption
A vulnerability, which was classified as problematic, has been found in FFmpeg 2.0. Affected by this issue is the function outputframe of the file libavcodec/h264.c. The manipulation leads to memory corruption. The attack may be launched remotely. It is recommended to apply a patch to fix this...
CVE-2014-125002
FFmpeg 2.0 contains a memory corruption vulnerability in the function dnxhd_init_rc (libavcodec/dnxhdenc.c). The issue can be triggered remotely and could impact affected FFmpeg builds, implying possible denial-of-service or instability as described for CVE-2014-125002. The available documents id...
EulerOS 2.0 SP5 : java-1.8.0-openjdk (EulerOS-SA-2022-1894)
According to the versions of the java-1.8.0-openjdk packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Utility. Supported versions tha...
EulerOS 2.0 SP5 : openssl (EulerOS-SA-2022-1909)
According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The crehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating...
PT-2022-21905 · Debian +1 · Debian +1
Name of the Vulnerable Software and Affected Versions: Checkmk versions 1.6 through 1.6.9p29 Checkmk versions 2.0 through 2.0.0p26 Checkmk versions 2.1 through 2.1.0p3 Checkmk version 2.2.0i1 Description: A permission issue affects users that deployed the shipped version of the Checkmk Debian...
EulerOS 2.0 SP5 : python (EulerOS-SA-2022-1911)
According to the versions of the python packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in Python, specifically in the FTP File Transfer Protocol client library in PASV passive mode. The issue is how the FTP client...
EulerOS 2.0 SP5 : zlib (EulerOS-SA-2022-1920)
According to the versions of the zlib packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches. CVE-2018-25032 Note that...
EulerOS 2.0 SP5 : libcacard (EulerOS-SA-2022-1897)
According to the versions of the libcacard package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Memory leak in the vcardapdunew function in card7816.c in libcacard before 2.5.3 allows local guest OS users to cause a denial of service host...
Siemens Mendix SAML Module跨站脚本漏洞
The Mendix SAML Module allows authentication of users in cloud applications using SAML. The module can communicate with any identity provider that supports SAML 2.0 or Shibboleth. A cross-site scripting vulnerability exists in Siemens Mendix SAML Module, which can be exploited by attackers to...
ABB Drive Composer 后置链接漏洞
ABB Drive Composer is a 32-bit Windows application from ABB Switzerland. It is used to commission and maintain ABB Common Architecture drives. A security vulnerability exists in ABB Drive Composer that originates from a vulnerability that allows a low-privileged attacker to create and write files...