139 matches found
Design/Logic Flaw
Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 does not encrypt HTTP sessions from operator workstations, which allows remote attacker...
CVE-2010-0595
Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 has a default password for the administrative user account and unspecified other...
CVE-2010-0596
CVE-2010-0596 affects Cisco Network Building Mediator (NBM) and legacy Richards‑Zeta Mediator 2500 environments running Mediator Framework releases prior to 3.1.1. Affects NBM-2400/NBM-4800 and Mediator Framework components; described vulnerability allows remote authenticated users to read or mod...
CVE-2010-0597
CVE-2010-0597 affects Cisco Network Building Mediator (NBM) products via the Mediator Framework. Vulnerable are Cisco NBM-2400/4800 and Richards‑Zeta Mediator 2500 firmware releases: Mediator Framework 1.5.x before 1.5.1.build.14-eng, 2.2.x before 2.2.1.dev.1, and 3.0.x before 3.0.9.release.1. An...
CVE-2010-0598
CVE-2010-0598 affects the Cisco Network Building Mediator (NBM-2400/NBM-4800) and the Richards-Zeta Mediator 2500, where HTTP sessions from operator workstations are not encrypted, allowing a remote attacker to sniff credentials of administrators. The vulnerability is one of multiple related issu...
CVE-2009-4800
The CVE-2009-4800 entry describes a directory traversal vulnerability in Sysax Multi Server versions 4.3 and 4.5 . It allows remote authenticated users to delete arbitrary files via a “..//” sequence in a DELE command, indicating a flaw in path handling during FTP-like file operations. The availa...
CVE-2008-4800
The CVE-2008-4800 entry concerns the DebugDiag ActiveX control in CrashHangExt.dll (Microsoft Debug Diagnostic Tool, version possibly 1.0). The vulnerability occurs when a large negative integer is provided to GetEntryPointForThread, which can trigger a NULL pointer dereference and cause a denial...
CVE-2008-4800
creationtimestamp| type| source ---|---|--- 2008-10-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32550...
Gentoo Security Advisory GLSA 200609-09 (ffmpeg)
The remote host is missing updates announced in advisory GLSA 200609-09. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 1215-1 (xine-lib)
The remote host is missing an update to xine-lib announced via advisory DSA 1215-1. Several remote vulnerabilities have been discovered in the Xine multimedia library, which may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following...
SuSE 10 Security Update : xine-lib (ZYPP Patch Number 2307)
Multiple buffer overflows were fixed in the XINE decoder libraries, which could be used by attackers to crash players or potentially execute code. - Buffer overflow in ffmpeg for xine-lib before 1.1.2 might allow context-dependent attackers to execute arbitrary code via a crafted AVI file and 'ba...
Ubuntu 5.04 / 5.10 / 6.06 LTS : ffmpeg, xine-lib vulnerabilities (USN-358-1)
XFOCUS Security Team discovered that the AVI decoder used in xine-lib did not correctly validate certain headers. By tricking a user into playing an AVI with malicious headers, an attacker could execute arbitrary code with the target user's privileges. CVE-2006-4799 Multiple integer overflows wer...
[SECURITY] [DSA 1215-1] New xine-lib packages fix execution of arbitrary code
-------------------------------------------------------------------------- Debian Security Advisory DSA 1215-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 20th, 2006 http://www.debian.org/security/faq -...
DSA-1215 xine-lib
Bulletin has no description...
USN-358-1: ffmpeg, xine-lib vulnerabilities
XFOCUS Security Team discovered that the AVI decoder used in xine-lib did not correctly validate certain headers. By tricking a user into playing an AVI with malicious headers, an attacker could execute arbitrary code with the target user's privileges. CVE-2006-4799 Multiple integer overflows wer...
CVE-2006-4800
CVE-2006-4800 impacts ffmpeg’s libavcodec prior to version 0.4.9_p20060530, causing multiple buffer overflows in components such as dtsdec.c, vorbis.c, rm.c, sierravmd.c, smacker.c, tta.c, 4xm.c, alac.c, cook.c, shorten.c, snow.c and others. The vulnerability permits remote denial of service and ...
CVE-2005-4800
The CVE-2005-4800 entry affects Yet Another PHP Image Gallery (YaPIG) versions 0.95b and earlier. The vulnerability is a direct static code injection where remote authenticated administrators can inject arbitrary PHP code via the TestGallery parameter in a mod_info action of modify_gallery.php, w...
