CVE-2015-4364

Multiple cross-site request forgery CSRF vulnerabilities in includes/campaignmonitorlists.admin.inc in the Campaign Monitor module 7.x-1.0 for Drupal allow remote attackers to hijack the authentication of users for requests that 1 enable list subscriptions via a request to...

CVE-2015-4364

CVE-2015-4364 covers CSRF flaws in the Drupal Campaign Monitor module (7.x-1.0)—specifically in includes/campaignmonitor_lists.admin.inc—that allow remote attackers to hijack a user’s authentication to enable or disable list subscriptions via URLs like /admin/config/services/campaignmonitor/lists...

SA-CONTRIB-2015-068 - Campaign Monitor - Cross Site Request Forgery (CSRF)

Campaign Monitor module integrates the Campaign Monitor API into Drupal. The module doesn't sufficiently protect some URLs against CSRF. A malicious user can cause another user to enable and disable list subscriptions by getting their browser to make a request to a specially-crafted URL. CVE...

CVE-2014-4364

CVE-2014-4364 affects the 802.1X subsystem in Apple iOS before 8 and Apple TV before 7. An attacker can remotely trigger credentials exfiltration by offering LEAP authentication from a crafted Wi‑Fi AP, then perform a cryptographic attack against the MS-CHAPv1 hash to derive credentials. Public r...

PT-2015-4364 · Qemu +3 · Qemu +3

Content removed...

CVE-2011-4364

Buffer overflow in the Sierra VMD decoder in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9 and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6, 0.6.x before 0.6.4, and 0.7.x before 0.7.3 allows remote attackers to cause a denial of service crash and possibly...

CVE-2011-4364

Buffer overflow in the Sierra VMD decoder in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9 and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6, 0.6.x before 0.6.4, and 0.7.x before 0.7.3 allows remote attackers to cause a denial of service crash and possibly...

CVE-2011-4364

CVE-2011-4364 : A vulnerability in the Sierra VMD decoder within FFmpeg/libavcodec and Libav allows a crafted VMD file to cause a denial of service and potentially execute arbitrary code via a buffer overflow. Affected products/versions include FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x...

Mandriva Linux Security Advisory : ffmpeg (MDVSA-2012:075)

Multiple vulnerabilities has been found and corrected in ffmpeg : The Matroska format decoder in FFmpeg does not properly allocate memory, which allows remote attackers to execute arbitrary code via a crafted file CVE-2011-3362, CVE-2011-3504. cavsdec.c in libavcodec in FFmpeg allows remote...

Debian Security Advisory DSA 2378-1 (ffmpeg)

The remote host is missing an update to ffmpeg announced via advisory DSA 2378-1. OpenVAS Vulnerability Test $Id: deb23781.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2378-1 ffmpeg Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Ubuntu Update for libav USN-1333-1

Ubuntu Update for Linux kernel vulnerabilities USN-1333-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN13331.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for libav USN-1333-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

Ubuntu: Security Advisory (USN-1333-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 11.04 / 11.10 : libav vulnerabilities (USN-1333-1)

Steve Manzuik discovered that Libav incorrectly handled certain malformed Matroska files. If a user were tricked into opening a crafted Matroska file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the...

USN-1333-1: Libav vulnerabilities

Steve Manzuik discovered that Libav incorrectly handled certain malformed Matroska files. If a user were tricked into opening a crafted Matroska file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the...

FreeBSD : ffmpeg -- multiple vulnerabilities (ea2ddc49-3e8e-11e1-8095-5404a67eef98)

Ubuntu Security Notice USN-1320-1 reports : Phillip Langlois discovered that FFmpeg incorrectly handled certain malformed QDM2 streams. If a user were tricked into opening a crafted QDM2 stream file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary...

[SECURITY] [DSA 2378-1] ffmpeg security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2378-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 03, 2012 http://www.debian.org/security/faq -...

CVE-2010-4364

DaDaBIK 4.3 beta3 is affected when run in a case-sensitive environment where the htmLawed library is not included. This root cause (missing htmLawed) enables cross-site scripting (XSS) by manipulating (1) HTML content and (2) rich_editor fields, and it can bypass the protection mechanism tied to ...

CVE-2009-4364

CVE-2009-4364 describes a Cross-site Scripting (XSS) vulnerability in the ScriptsEz Ez Blog, affecting the application’s index.php where the cname parameter can inject arbitrary web script/HTML (related to the act and id parameters). The root cause is insufficient input validation on cname. Impac...

CVE-2009-4364

creationtimestamp| type| source ---|---|--- 2009-12-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10458 2009-12-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10461...

CVE-2008-4364

SQL injection vulnerability in default.aspx in ParsaGostar ParsaWeb CMS allows remote attackers to execute arbitrary SQL commands via the 1 id parameter in the "page" page and 2 txtSearch parameter in the "Search" page...