CVE-2019-20460

An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices. POST requests don't require anti-CSRF tokens or other mechanisms for validating that the request is from a legitimate source. In addition, CSRF attacks can be used to send text directly to the RAW printer interface. For...

Epson Express Home XP255 安全漏洞

The Epson Express Home XP255 is a printer from the Japanese company Epson Epson. A security vulnerability exists in the Epson Express Home XP255 version 20.08, which stems from lax management of access rights to the public community for SNMPv1 and the epson community, which allows unauthorized...

Mediainfo Heap Buffer Overflow Vulnerability

MediaInfo is a free, cross-platform, open source program that displays technical information about media files as well as tagging information for many audio and video files. A heap buffer overflow vulnerability exists in versions of Mediainfo prior to 20.08. An attacker can exploit this...

CVE-2020-26797

Mediainfo before version 20.08 has a heap buffer overflow vulnerability via MediaInfoLib::FileGxf::ChooseParserChannelGrouping...

Heap overflow

Mediainfo before version 20.08 has a heap buffer overflow vulnerability via MediaInfoLib::FileGxf::ChooseParserChannelGrouping...

CVE-2020-26797

Mediainfo before version 20.08 has a heap buffer overflow vulnerability via MediaInfoLib::FileGxf::ChooseParserChannelGrouping...

CVE-2020-13531

Pixar OpenUSD 20.08 contains a use-after-free in the processing of reference paths in textual USD files, disclosed via multiple sources including TALOS-2020-1145. The vulnerability stems from stale SdfPath references being reused after freeing memory during validation of layer offsets for referen...

Microsoft Azure Sphere Elevation of Privilege Vulnerability (CNVD-2020-63390)

Azure Sphere is a secure, advanced application platform with built-in communications and security features for connected devices. An elevation of privilege vulnerability exists in Microsoft Azure Sphere versions prior to 20.08. An attacker could exploit this vulnerability to affect confidentialit...

openSUSE Security Update : libmediainfo / mediainfo (openSUSE-2020-1390)

This update for libmediainfo, mediainfo fixes the following issues : libmediainfo was updated to version 20.08 : Added : - MPEG-H 3D Audio full featured support group presets, switch groups, groups, signal groups - MP4/MOV: support of more metadata locations - JSON and XML outputs: authorize...