Ampache Cross-Site Scripting Vulnerability (CNVD-2023-07918)

Ampache is a web-based audio/video application and file manager. cross-site scripting vulnerability exists in versions prior to Ampache 5.5.7, which stems from the fact that a user can insert malicious js in url-specific parameters and send links to other users, leading to a cross-site scripting...

UBUNTU-CVE-2022-47656

GPAC MP4box 2.1-DEV-rev617-g85ce76efd is vulnerable to Buffer Overflow in gfhevcreadspsbsinternal function of mediatools/avparsers.c:8273...

GPAC MP4Box 安全漏洞

GPAC MP4Box is multimedia packager. It is mainly used to work with ISOBMF files e.g. MP4, 3GP, but can also be used to import/export media from container files such as AVI, MPG, MKV, MPEG-2 TS. A security vulnerability exists in GPAC MP4Box version 2.1-DEV-rev644-g5c4df2a67, which stems from a...

HUAWEI EMUI/Magic UI 安全漏洞

Huawei EMUI is a mobile operating system developed based on Android.Huawei HarmonyOS is to provide a full-scenario distributed operating system based on microkernel. A denial of service vulnerability exists in Huawei EMUI and HarmonyOS, which originates from its Bluetooth AVRCP module and can be...

The vulnerability of the client installer for conducting real-time audio and video conferences in Zoom Client for Meetings for macOS, allowing a intruder to escalate their privileges.

The vulnerability of the client installer for conducting real-time audio and video conferences in Zoom Client for Meetings for macOS stems from a state of resource copying competition during the process. Exploiting this vulnerability can allow an intruder to enhance their privileges...

FreeRDP < 2.8.1 Multiple Vulnerabilities

FreeRDP is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Mageia: Security Advisory (MGASA-2022-0437)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2022-17455 · Qualcomm · Snapdragon Wearables +5

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon versions affected versions not specified Description: The issue is related to information disclosure in video due to a buffer over-read while parsing avi files. This affects various Qualcomm Snapdragon products, including...

Denial Of Service (DoS)

nginx is vulnerable to denial of service. The module ngxhttpmp4module allows a local attacker to cause a worker process to crash, trigger a memory disclosure by using a specially crafted audio or video file...

CVE-2022-41741

NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngxhttpmp4module that might allow a local attacker to corrupt NGINX worker memory, resulting in...

ALPINE-CVE-2022-41742

NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngxhttpmp4module that might allow a local attacker to cause a worker process crash, or might...

CVE-2022-41742

NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngxhttpmp4module that might allow a local attacker to cause a worker process crash, or might...

PT-2022-5185

Name of the Vulnerable Software and Affected Versions NGINX Open Source versions 1.23.2 and 1.22.1 and earlier NGINX Open Source Subscription versions R2 P1 and R1 P1 and earlier NGINX Plus versions R27 P1 and R26 P1 and earlier Description The issue is related to a buffer-over-read vulnerability...

ROS-20221017-01

A vulnerability in the FreeRDP remote desktop protocol implementation is related to the disclosure of uninitialized data on unix systems when using the /parallel command line switch. uninitialized data on unix systems when using the /parallel command line switch. Exploitation of the vulnerability...

CVE-2022-28761 Zoom On-Premise Deployments: Improper Access Control

Zoom On-Premise Meeting Connector MMR before version 4.8.20220916.131 contains an improper access control vulnerability. As a result, a malicious actor in a meeting or webinar they are authorized to join could prevent participants from receiving audio and video causing meeting disruptions...

CVE-2022-28759 Zoom On-Premise Deployments: Improper Access Control

Zoom On-Premise Meeting Connector MMR before version 4.8.20220815.130 contains an improper access control vulnerability. As a result, a malicious actor could obtain the audio and video feed of a meeting they were not authorized to join and cause other meeting disruptions...

CVE-2022-28760 Zoom On-Premise Deployments: Improper Access Control

Zoom On-Premise Meeting Connector MMR before version 4.8.20220815.130 contains an improper access control vulnerability. As a result, a malicious actor could obtain the audio and video feed of a meeting they were not authorized to join and cause other meeting disruptions...

PT-2022-19214 · Zoom · Zoom On-Premise Meeting Connector Mmr

Name of the Vulnerable Software and Affected Versions: Zoom On-Premise Meeting Connector MMR versions prior to 4.8.20220815.130 Description: The issue allows a malicious actor to obtain the audio and video feed of a meeting they were not authorized to join and cause other meeting disruptions due ...

PT-2022-19212 · Zoom · Zoom On-Premise Meeting Connector Mmr

Name of the Vulnerable Software and Affected Versions: Zoom On-Premise Meeting Connector MMR versions prior to 4.8.20220815.130 Description: The issue allows a malicious actor to obtain the audio and video feed of a meeting they were not authorized to join and cause other meeting disruptions due ...

CVE-2022-39283

FreeRDP is a free remote desktop protocol library and clients. All FreeRDP based clients when using the /video command line switch might read uninitialized data, decode it as audio/video and display the result. FreeRDP based server implementations are not affected. This issue has been patched in...