GPAC 代码问题漏洞

GPAC is an open source multimedia framework. gfdashsegmenterprobeinput function in GPAC version 0.8 has a null pointer dereference vulnerability that can be exploited by attackers to cause a denial of service via a specially crafted file in the MP4Box command...

AZL-6566 CVE-2021-34556 affecting package kernel for versions less than 5.10.78.1-1

In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because the protection mechanism neglects the possibility of uninitialized memory locations on the BPF stack...

SUSE: Security Advisory (SUSE-SU-2020:3480-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Telegram 缓冲区错误漏洞

Telegram is an instant messaging mobile application. A heap buffer overflow vulnerability exists in the custom derived LottieParserImpl :: parseDashProperty function of the rlottie library in Telegram for Android prior to version 7.1.0 2090, iOS prior to version 7.1, and macOS prior to version 7....

MGASA-2021-0006 Updated dash packages fix a security vulnerability

Code was executed even if noexec "-n" was specified. bdo58288 / bsc1178978...

Updated dash packages fix a security vulnerability

Code was executed even if noexec "-n" was specified. bdo58288 / bsc1178978...

chewb-server (>=0.0.1 <=0.0.20), video-dash-uploader (>=0.0.1 <=0.0.4) +1 more potentially affected by CVE-2020-28436 via google-cloudstorage-commands (=0.0.1)

google-cloudstorage-commands NPM version =0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on google-cloudstorage-commands and may be impacted: - chewb-server =0.0.1, =0.0.1, =0.0.1, =0.0.2 Source cves: CVE-2020-28436 Source advisory:...

CVE-2020-35650

Multiple cross-site scripting XSS vulnerabilities in Uncanny Groups for LearnDash before v3.7 allow authenticated remote attackers to inject arbitrary JavaScript or HTML via the ulgmcoderedeem POST Parameter in user-code-redemption.php, the ulgmuserfirst POST Parameter in...

Uncanny Owl Groups for LearnDash Cross-Site Scripting Vulnerability

Uncanny Owl Groups for LearnDash is a plugin from Uncanny Owl Canada that provides the ability to sell courses for LearnDash in Wordpress. A cross-site scripting vulnerability exists in Uncanny Groups for LearnDash versions prior to v3.7, which allows an authenticated, remote attacker to inject...

curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead too overwriting a local file when the -J flag is used.

...

SUSE SLED15 / SLES15 Security Update : dash (SUSE-SU-2020:3480-1)

This update for dash fixes the following issues : Fixed an issue where code was executed even if noexec '-n' was specified bsc1178978. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically...

openSUSE Security Update : dash (openSUSE-2020-2065)

This update for dash fixes the following issues : - Fixed an issue where code was executed even if noexec '-n' was specified bsc1178978. This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin wer...

openSUSE Security Update : dash (openSUSE-2020-2046)

This update for dash fixes the following issues : - Fixed an issue where code was executed even if noexec '-n' was specified bsc1178978. This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin wer...

OPENSUSE-SU-2020:2065-1 Security update for dash

This update for dash fixes the following issues: - Fixed an issue where code was executed even if noexec '-n' was specified bsc1178978. This update was imported from the SUSE:SLE-15:Update update project...

Security update for dash (moderate)

openSUSE Security Update: Security update for dash Announcement ID: openSUSE-SU-2020:2065-1 Rating: moderate References: 1178978 Affected Products: openSUSE Leap 15.2 An update that contains security fixes can now be installed. Description: This update for dash fixes the following issues: - Fixed...

OPENSUSE-SU-2020:2046-1 Security update for dash

This update for dash fixes the following issues: - Fixed an issue where code was executed even if noexec '-n' was specified bsc1178978. This update was imported from the SUSE:SLE-15:Update update project...

Security update for dash (moderate)

openSUSE Security Update: Security update for dash Announcement ID: openSUSE-SU-2020:2046-1 Rating: moderate References: 1178978 Affected Products: openSUSE Leap 15.1 An update that contains security fixes can now be installed. Description: This update for dash fixes the following issues: - Fixed...

SUSE-SU-2020:3480-1 Security update for dash

This update for dash fixes the following issues: - Fixed an issue where code was executed even if noexec '-n' was specified bsc1178978...

Making the Edge Come Alive

In April 2019, Netflix viewers streamed 164 million hours of on-demand content per day. Fast forward a year. In April 2020, Twitch streamed 55 million hours per day. The vast majority of that was live. We have seen the future of video. It is live. But live workflows have challenges and requiremen...

Configuration Issues

webkitgtk4 has configuration issues. The vulnerability exists as it failed to properly apply configured HTTP proxy settings when downloading livestream video of HLS, DASH, or Smooth Streaming...