20 matches found
CVE-2021-28300
NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial-of-Service DoS by uploading a malicious MP4 file...
Linux Distros Unpatched Vulnerability : CVE-2021-28300
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NULL Pointer Dereference in the isomedia/track.c module's MergeTrack function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a...
CVE-2022-28300
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation 10.16.02.034 CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2023-28300
creationtimestamp| type| source ---|---|--- 2023-04-12 00:29:56+00:00| seen| https://t.me/cibsecurity/61952...
CVE-2023-28300
Azure Service Connector Security Feature Bypass Vulnerability...
CVE-2023-28300
CVE-2023-28300: Azure Service Connector Security Feature Bypass Vulnerability. Affected component: Azure Service Connector in Microsoft Azure. Root cause: security feature bypass enabling bypass of security restrictions when the Azure CLI updates are not in place; exploitation context noted as re...
CVE-2023-28300 Azure Service Connector Security Feature Bypass Vulnerability
...
CVE-2022-28300
Bentley MicroStation CONNECT (10.16.02.034) is affected by CVE-2022-28300 due to an out-of-bounds write in the JP2 image parser. Crafted JP2 data can trigger a write past the end of an allocated buffer, enabling code execution in the context of the current process. User interaction is required (v...
CVE-2022-28300
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation 10.16.02.034 CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2021-28300
NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial-of-Service DoS by uploading a malicious MP4 file...
CVE-2021-28300
NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial-of-Service DoS by uploading a malicious MP4 file...
UBUNTU-CVE-2021-28300
NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial-of-Service DoS by uploading a malicious MP4 file...
CVE-2021-28300
NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial-of-Service DoS by uploading a malicious MP4 file...
CVE-2021-28300
GPAC v0.5.2 contains a NULL Pointer Dereference in isomedia/track.c MergeTrack() that can be triggered by uploading a malicious MP4, allowing remote attackers to execute arbitrary code or cause a Denial-of-Service. This is reflected across multiple sources (CVE-2021-28300, Red Hat, Debian OSV, CN...
CVE-2020-28300
CVE-2020-28300 entry is rejected/not used; does not represent an active vulnerability entry.
spywords.ru XSS vulnerability
Vulnerable URL: http://spywords.ru/createaccount.php?action=process Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 28300 VIP website status:| Yes Check spywords.ru SSL connection:| Grade: F Coordinated Disclosur...
axis.com Open Redirect vulnerability
Vulnerable URL: http://www.axis.com/redir/index.php?goto=https://www.xssposed.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 28300 Google Pagerank| 6 VIP website...
MaxDB WebDBM Database Parameter Overflow
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'MaxDB WebDBM...
MySQL MaxDB WebDBM database name buffer overflow
Added: 09/06/2006 CVE: CVE-2006-4305 BID: 19660 OSVDB: 28300 Background MaxDB is a SAP-certified open-source database developed by MySQL. Problem A buffer overflow in MaxDB allows remote attackers to execute arbitrary commands by sending a long database name from a WebDBM client. Resolution Upgra...