FFmpeg Buffer Overflow Vulnerability (CNVD-2021-74090)

FFmpeg is the FFmpeg team's complete solution for recording, converting, and streaming audio and video. ffmpeg has a security vulnerability that could be exploited by an attacker to cause a denial of service or other unspecified impact...

SELA heap buffer overflow vulnerability

SELA is a lossless audio codec. a heap buffer overflow vulnerability exists in file::WavFile::writeToFile in wavfile.c in SELA 20200412 and earlier versions. No detailed vulnerability details are currently available...

SELA Heap Buffer Overflow Vulnerability (CNVD-2021-73936)

SELA is a lossless audio codec. file::SelaFile::readFromFile in selafile.c in SELA 20200412 and earlier versions is vulnerable to a heap buffer overflow. No detailed vulnerability details are available at this time...

SELA null pointer dereference vulnerability (CNVD-2021-73934)

SELA is a lossless audio codec. A null pointer dereference vulnerability exists in the file::WavFile::WavFile function in wavfile.c in SELA 20200412 and earlier versions. An attacker could exploit this vulnerability to cause a denial of service...

SELA Heap Buffer Overflow Vulnerability (CNVD-2021-73935)

SELA is a lossless audio codec. file::SelaFile::readFromFile in selafile.cpp in SELA 20200412 and earlier versions is vulnerable to a heap buffer overflow. No detailed vulnerability details are currently available...

SELA null pointer dereference vulnerability (CNVD-2021-73930)

SELA is a lossless audio codec. a null pointer dereference vulnerability exists in the rice::RiceDecoder::process function in ricedecoder.c in SELA 20200412 and earlier versions. An attacker can exploit this vulnerability to cause a denial of service...

SELA null pointer dereference vulnerability (CNVD-2021-73933)

SELA is a lossless audio codec. A null pointer dereference vulnerability exists in the frame::FrameDecoder::process function in framedecoder.c in SELA 20200412 and earlier versions. An attacker can exploit this vulnerability to cause a denial of service...

SELA null pointer dereference vulnerability (CNVD-2021-73932)

SELA is a lossless audio codec. lpc::SampleGenerator::process function in samplegenerator.cpp in SELA 20200412 and earlier versions is vulnerable to a null pointer dereference. An attacker could exploit this vulnerability to cause a denial of service...

Faad2 缓冲区错误漏洞

Freeware Advanced Audio Decoder 2 FAAD2 is an open source MPEG-4 and MPEG-2 AAC decoder licensed under the GPLv2 license. a heap buffer overflow vulnerability exists in the stszin function in mp4read.c in FAAD2 version 2.10.0 and earlier. An attacker could exploit this vulnerability to execute co...

Faad2 缓冲区错误漏洞

Freeware Advanced Audio Decoder 2 FAAD2 is an open source MPEG-4 and MPEG-2 AAC decoder licensed under the GPLv2 license. a stack buffer overflow vulnerability exists in the ftypin function in mp4read.c in FAAD2 2.10.0 and earlier versions. An attacker could exploit this vulnerability to execute...

WordPress Html5 Audio Player plugin <= 2.1.2 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability discovered by Michał Lipiński WordPress Html5 Audio Player plugin versions = 2.1.2. Solution Update the WordPress Html5 Audio Player plugin to the latest available version at least 2.1.3...

Sela 缓冲区错误漏洞

Sela is a lossless audio codec. A security vulnerability exists in sela, which stems from a heap-based buffer overflow in file::WavFile::writeToFile in wav file.c. The vulnerability is caused by a heap-based buffer overflow in file::WavFile::writeToFile...

Sela 代码问题漏洞

SELA is a lossless audio codec. A null pointer dereference vulnerability exists in the frame::FrameDecoder::process function in framedecoder.c in SELA 20200412 and earlier versions. An attacker can exploit this vulnerability to cause a denial of service...

Faad2 缓冲区错误漏洞

Freeware Advanced Audio Decoder 2 FAAD2 is an open source MPEG-4 and MPEG-2 AAC decoder licensed under the GPLv2 license. ltprediction function in ltpredict.c in FAAD2 2.10.0 and earlier versions is vulnerable to a heap buffer overflow vulnerability. An attacker could exploit this vulnerability t...

Html5 Audio Player < 2.1.3 - Contributor+ Stored Cross-Site Scripting

The plugin does not sanitise or validate the parameters from its shortcode, allowing users with a role as low as contributor to set Cross-Site Scripting payload in them which will be triggered in the page/s with the embed malicious shortcode Log in as contributor and add the following shortcode i...

Faad2 缓冲区错误漏洞

Freeware Advanced Audio Decoder 2 FAAD2 is an open source MPEG-4 and MPEG-2 AAC decoder licensed under the GPLv2 license. sbrqmfsynthesis64 function in sbrqmf.c in FAAD2 2.10.0 and earlier versions is vulnerable to a heap buffer overflow vulnerability. An attacker could exploit this vulnerability...

Html5 Audio Player < 2.1.3 - Contributor+ Stored Cross-Site Scripting

The plugin does not sanitise or validate the parameters from its shortcode, allowing users with a role as low as contributor to set Cross-Site Scripting payload in them which will be triggered in the page/s with the embed malicious shortcode PoC Log in as contributor and add the following shortco...

Sela 缓冲区错误漏洞

SELA is a lossless audio codec. file::SelaFile::readFromFile in selafile.cpp in SELA 20200412 and earlier versions is vulnerable to a heap buffer overflow. No detailed vulnerability details are currently available...

CVE-2021-40845

The web part of Zenitel AlphaCom XE Audio Server through 11.2.3.10, called AlphaWeb XE, does not restrict file upload in the Custom Scripts section at php/index.php. Neither the content nor extension of the uploaded files is checked, allowing execution of PHP code under the /cmd directory...

Design/Logic Flaw

The web part of Zenitel AlphaCom XE Audio Server through 11.2.3.10, called AlphaWeb XE, does not restrict file upload in the Custom Scripts section at php/index.php. Neither the content nor extension of the uploaded files is checked, allowing execution of PHP code under the /cmd directory...