Adobe Media Encoder MP4 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Media Encoder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

Adobe Media Encoder MP4 File Uninitialized Variable Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Media Encoder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Adobe Media Encoder MP4 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Media Encoder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

VulnCheck KEV: CVE-2019-5128

A command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the server. Exploitable unauthenticated command injections exist in YouPHPTube Encoder 2.3 a plugin for providing encoder functionality in YouPHPTube. The parameter base64Url in...

WordPress Email Encoder Bundle Plugin <= 2.1.8 is vulnerable to Cross Site Scripting (XSS)

Software Email Encoder Bundle Type Plugin Vulnerable versions = 2.1.8 Fixed in 2.1.9 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-47821 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 19415fa8bf01 Credits Ngô Thiên An ancorn from VNPT-VCI...

Adobe Releases Security Updates for Multiple Products

Adobe has released security updates to address vulnerabilities affecting multiple Adobe products. A cyber threat actor could exploit some of these vulnerabilities to take control of affected system. CISA encourages users and administrators to review the following advisories and apply the necessar...

PT-2023-7259

Name of the Vulnerable Software and Affected Versions Adobe Media Encoder versions 24.0.2 and earlier Adobe Media Encoder versions 23.6 and earlier Description The issue is related to an Access of Uninitialized Pointer vulnerability that could lead to disclosure of sensitive memory. An attacker...

Adobe Media Encoder < 23.6.2 / 24.0.0 < 24.0.3 Multiple Vulnerabilities (APSB23-63) (macOS)

The version of Adobe Media Encoder installed on the remote macOS host is prior to 23.6.2, 24.0.3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-63 advisory. - Adobe Media Encoder version 24.0.2 and earlier and 23.6 and earlier are affected by an out-of-bounds...

Adobe Media Encoder < 23.6.2 / 24.0.0 < 24.0.3 Multiple Vulnerabilities (APSB23-63)

The version of Adobe Media Encoder installed on the remote Windows host is prior to 23.6.2, 24.0.3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-63 advisory. - Adobe Media Encoder version 24.0.2 and earlier and 23.6 and earlier are affected by an out-of-bound...

PT-2023-7258 · Adobe · Media Encoder

Name of the Vulnerable Software and Affected Versions: Adobe Media Encoder versions 24.0.2 and earlier Adobe Media Encoder versions 23.6 and earlier Description: The issue is related to a Heap-based Buffer Overflow vulnerability in the Adobe Media Encoder application, which can be exploited to...

VulnCheck KEV: CVE-2019-5129

A command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the server. Exploitable unauthenticated command injections exist in YouPHPTube Encoder 2.3 a plugin for providing encoder functionality in YouPHPTube. The parameter base64Url in...

APSB23-63 : Security update available for Adobe Media Encoder

Adobe has released an update for Adobe Media Encoder. This update resolves critical and moderate vulnerabilities that could lead to arbitrary code execution and memory leak...

PT-2023-7257

Name of the Vulnerable Software and Affected Versions Adobe Media Encoder versions 24.0.2 and earlier Adobe Media Encoder versions 23.6 and earlier Description The issue is related to an out-of-bounds write that could result in arbitrary code execution in the context of the current user...

PT-2023-7256 · Adobe · Media Encoder

Name of the Vulnerable Software and Affected Versions: Adobe Media Encoder versions 24.0.2 and earlier Adobe Media Encoder versions 23.6 and earlier Description: The issue is related to an out-of-bounds read when parsing a crafted file, potentially allowing an attacker to execute code in the...

VulnCheck KEV: CVE-2019-5127

A command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the server. Exploitable unauthenticated command injections exist in YouPHPTube Encoder 2.3 a plugin for providing encoder functionality in YouPHPTube. The parameter base64Url in...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in decode_CABAC_FL_bypass

Detailed Report: https://oss-fuzz.com/testcase?key=4586467904847872 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: decodeCABACFLbypass...

imagemagick:encoder_gif_fuzzer: Use-of-uninitialized-value in cmsMLUsetWide

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=6264339090505728 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodergiffuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...

pocketdivxencoder.net Cross Site Scripting vulnerability OBB-3775684

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

jbig2enc Security Vulnerabilities

jbig2enc is an encoder for JBIG2. A security vulnerability exists in jbig2enc version v0.28, which stems from a memory segment error SEGV problem in the function jbig2addpage. An attacker could exploit this vulnerability to cause a Denial of Service DoS...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in void intra_prediction_angular<unsigned char>

Detailed Report: https://oss-fuzz.com/testcase?key=5577373432807424 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: void intrapredictionangular vo...