294 matches found
VLC Media Player < 2.2.5 Multiple Denial-of-Service Vulnerabilities - Mac OS X
VLC media player is prone to multiple denial-of-service vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
VLC Media Player < 2.2.5 Multiple Vulnerabilities
The version of VLC media player installed on the remote host is prior to 2.2.5. It is, therefore, affected by the multiple vulnerabilities : - A denial of service vulnerability exists within file plugins\audiofilter\libmpgatofixed32plugin.dll when parsing media files due to improper validation of...
VideoLAN VLC Heap Buffer Overflow Vulnerability
VideoLAN VLC is a free and open source cross-platform multimedia player also a multimedia framework developed by the French organization VideoLAN. It supports playback of multiple media files, CD-ROMs, etc., multiple audio and video formats WMV, MP3, etc., etc. ParseJSS is one of the subtitle fil...
VideoLAN VLC Denial of Service Vulnerability (CNVD-2017-08120)
VideoLAN VLC is a free and open source cross-platform multimedia player also a multimedia framework developed by the French organization VideoLAN. It supports playback of multiple media files, CD-ROMs, etc., multiple audio and video formats WMV, MP3, etc., etc. ParseJSS is one of the subtitle fil...
CVE-2017-8311
Potential heap based buffer overflow in ParseJSS in VideoLAN VLC before 2.2.5 due to skipping NULL terminator in an input string allows attackers to execute arbitrary code via a crafted subtitles file...
Wireshark 'DOF dissector' DoS Vulnerability - Windows
Wireshark is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark";...
Design/Logic Flaw
In Wireshark 2.2.0 to 2.2.5, the DOF dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-dof.c by using a different integer data type and adjusting a return value...
Debian: Security Advisory (DSA-3811-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2017-4205 · Gd +3 · Gd Graphics Library +3
Name of the Vulnerable Software and Affected Versions: GD Graphics Library versions through 2.2.5 Description: The issue is related to a heap-based buffer over-read in the tiffWriter function in gd tiff.c. This can allow a remote attacker to access confidential data and cause a denial of service...
WordPress Landing Pages 2.2.4 Cross Site Scripting
------------------------------------------------------------------------ Cross-Site Scripting in WordPress Landing Pages Plugin ------------------------------------------------------------------------ Burak Kelebek, July 2016 -----------------------------------------------------------------------...
PFSense 2.2.5 Directory Traversal
Title : PFSense 12 1 LFI example Lfi example on step1submitphpaction; /etc/passwd...
Fedora 21 : rubygems-2.2.5-100.fc21 (2015-13157)
Update to RubyGems 2.2.5. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenabl...
Bolt 2.2.4 Shell Upload Vulnerability
Bolt version 2.2.4 suffers from a code execution vulnerability via shell upload. Bolt 2.2.4: Code Execution Security Advisory – Curesec Research Team 1. Introduction Affected Product: Bolt 2.2.4 Fixed in: 2.2.5 Fixed Version Link: http://bolt.cm/distribution/archive/bolt-2.2.5.zip Vendor Contact:...
Bolt 2.2.4 Shell Upload
Bolt 2.2.4: Code Execution Security Advisory – Curesec Research Team 1. Introduction Affected Product: Bolt 2.2.4 Fixed in: 2.2.5 Fixed Version Link: http://bolt.cm/distribution/archive/bolt-2.2.5.zip Vendor Contact: Website: https://bolt.cm Vulnerability Type: Code Execution Remote Exploitable:...
Vulnerabilities of the Red Hat Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the glibc-devel-2.2.5 package of the Red Hat Linux operating system can be exploited, resulting in a violation of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities of the Red Hat Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the glibc-profile-2.2.5 package of the Red Hat Linux operating system can be exploited, leading to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Wordpress MM Forms Community Plugin 2.2.6 - Arbitrary File Upload
No description provided by source. Description : Wordpress Plugins - MM Forms Community Arbitrary File Upload Vulnerability Version : 2.2.5 - 2.2.6 Link : http://wordpress.org/extend/plugins/mm-forms-community/ Plugins : http://downloads.wordpress.org/plugin/mm-forms-community.zip Date : 24-05-20...
Power Phlogger 2.2.x Cross-site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/37150/info Power Phlogger is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. Attackers can exploit this issue to steal cookie-based authentication...
Fedora 18 : php-symfony2-Validator-2.2.5-1.fc18 (2013-14590)
Updated to 2.2.5 CVE-2013-4751 Validation metadata serialization and loss of information Release blog posts : - http://symfony.com/blog/symfony-2-2-4-released - http://symfony.com/blog/security-releases-symfony-2-0- 24-2-1-12-2-2-5-and-2-3-3-released Full change log:...
