139 matches found
PT-2023-13229
Name of the Vulnerable Software and Affected Versions Libsndfile affected versions not specified Description The issue is related to multiple signed integers overflow in the au read header function in src/au.c and in the mat4 open and mat4 read header functions in src/mat4.c of Libsndfile. This...
Design/Logic Flaw
Ingeteam INGEPAC DA AU AUC1.13.0.28 and before web application allows access to a certain path that contains sensitive information that could be used by an attacker to execute more sophisticated attacks. An unauthenticated remote attacker with access to the device´s web service could exploit this...
CVE-2017-20007: Exposure of Sensitive Information to an Unauthorized Actor
Ingeteam INGEPAC DA AU AUC1.13.0.28 and before web application allows access to a certain path that contains sensitive information that could be used by an attacker to execute more sophisticated attacks. An unauthenticated remote attacker with access to the device´s web service could exploit this...
Fedora: Security Advisory for libsndfile (FEDORA-2021-e2dc109b4c)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
All Vulnerabilities for helms.ozford.edu.au Patched via Open Bug Bounty
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| helms.ozford.edu.au ---|--- Open Bug...
[SECURITY] Fedora 33 Update: mediainfo-21.03-1.fc33
MediaInfo CLI Command Line Interface. What information can I get from MediaInfo? General: title, author, director, album, track number, date, duration... Video: codec, aspect, fps, bitrate... Audio: codec, sample rate, channels, language, bitrate... Text: language of subtitle Chapters: number of...
Command execution vulnerability in vaeThink backend Au***.php file
vaeThink is a PHP content management framework built on Layui and tp5. A command execution vulnerability exists in the vaeThink backend Au.php file. An attacker can exploit this vulnerability to gain server privileges...
festival-au-desert.org Cross Site Scripting vulnerability OBB-1473981
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
au-millimetre.com Cross Site Scripting vulnerability OBB-1439202
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
AU Optronics Solar Data Recorder Cross-Site Scripting Vulnerability
AU Optronics Solar Data Recorder is a photovoltaic data recorder from AU Optronics, Taiwan, China. A cross-site scripting vulnerability exists in AU Optronics Solar Data Recorder versions prior to 1.3.0. The vulnerability stems from the lack of proper validation of client-side data by the web...
[SECURITY] Fedora 30 Update: libmediainfo-19.04-1.fc30
This package contains the shared library for MediaInfo. MediaInfo supplies technical and tag information about a video or audio file. What information can I get from MediaInfo? General: title, author, director, album, track number, date, duration... Video: codec, aspect, fps, bitrate... Audio:...
AllPlayer 7.4 SEH Buffer Overflow
!/usr/bin/python -w Exploit Author: Chris Au Exploit Title: AllPlayer V7.4 - Local Buffer Overflow SEH Unicode Date: 07-04-2019 Vulnerable Software: AllPlayer V7.4 Vendor Homepage: https://www.allplayer.org/ Version: 7.4 Software Link: http://allplayer.org/Download/ALLPlayerEN.exe Tested Windows...
au-petit-manoir.fr XSS vulnerability
Open Bug Bounty ID: OBB-635412 Description| Value ---|--- Affected Website:| au-petit-manoir.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2017-16951
Winamp Pro 5.66 Build 3512 allows remote attackers to cause a denial of service via a crafted WAV, WMV, AU, ASF, AIFF, or AIF file...
Code injection
Winamp Pro 5.66 Build 3512 allows remote attackers to cause a denial of service via a crafted WAV, WMV, AU, ASF, AIFF, or AIF file...
CVE-2017-16951
CVE-2017-16951 affects Winamp Pro 5.66 Build 3512. A crafted WAV/WMV/AU/ASF/AIFF/AIF file can cause a denial of service, per multiple sources linked to the CVE. The vulnerability is triggered by processing these media formats, with exploitation details visible in publicly available exploit materi...
CVE-2017-16951: Improper Input Validation
Winamp Pro 5.66 Build 3512 allows remote attackers to cause a denial of service via a crafted WAV, WMV, AU, ASF, AIFF, or AIF file...
Winamp Pro 5.66.Build.3512 - Denial of Service
Winamp Pro 5.66.Build.3512 - Denial of Service ! /usr/bin/perl Exploit Title: Winamp Pro .wav|.wmv|.au|.asf|.aiff|.aif Denial of Service Date: 2017-11-22 Exploit Author: R.Yavari Version: v5.66.Build.3512 Tested on: Windows 10 , Windows 7 other version should be affected CVE-2017-16951...
CVE-2016-4838
The Android Apps Money Forward prior to v7.18.0, Money Forward for The Gunma Bank prior to v1.2.0, Money Forward for SHIGA BANK prior to v1.2.0, Money Forward for SHIZUOKA BANK prior to v1.4.0, Money Forward for SBI Sumishin Net Bank prior to v1.6.0, Money Forward for Tokai Tokyo Securities prior...
lumieres-mise-au-point.fr XSS vulnerability
Vulnerable URL: http://www.lumieres-mise-au-point.fr/article.php?id=15%22%27--!%3E%3CScript%20/K/%3EconfirmOPENBUGBOUNTY%3C/Script%20/K/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...