CVE-2021-35504

CVE-2021-35504 affects Afian FileRun 2021.03.26 and enables Remote Code Execution (RCE) via the Check Path value used for the ffmpeg binary. The Red Hat and CVE/NVD entries confirm the vulnerability exists in that FileRun release and describe the root cause as improper handling of the ffmpeg bina...

CVE-2021-35504

Afian FileRun 2021.03.26 allows Remote Code Execution by administrators via the Check Path value for the ffmpeg binary...

Afian FileRun 注入漏洞

Afian FileRun is a full-featured web-based file manager. A security vulnerability exists in Afian FileRun 2021.03.26 that allows remote code execution via the Check Path value of ffmpeg binaries...

PT-2021-20944

Name of the Vulnerable Software and Affected Versions: Afian FileRun version 2021.03.26 Description: The issue allows Remote Code Execution by administrators through the Check Path value for the ffmpeg binary. Recommendations: For Afian FileRun version 2021.03.26, consider restricting access to t...

CVE-2021-35504: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Afian FileRun 2021.03.26 allows Remote Code Execution by administrators via the Check Path value for the ffmpeg binary...

ffmpeg:ffmpeg_AV_CODEC_ID_XMA2_fuzzer: Heap-buffer-overflow in xma_decode_packet

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4678745030524928 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegAVCODECIDXMA2fuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

Exploit for Improper Encoding or Escaping of Output in F5 Nginx

This is an offensive tool for web application security training. It is a collection of vulnerable web applications, each with its own set of vulnerabilities, designed to help users learn and practice web application security testing. The repository contains a variety of web applications, includin...

openSUSE 15 Security Update : ffmpeg (openSUSE-SU-2021:3193-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:3193-1 advisory. - adtsdecodeextradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the initgetbits return value, which is a necessary step because the seco...

SUSE SLES15: libavcodec-devel / libavcodec57 / libavcodec57-32bit / etc (SUSE-SU-2021:3212-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:3212-1 advisory. - CVE-2021-38171: Fixed adtsdecodeextradata in libavformat/adtsenc.c to check the initgetbits return value bsc1189724. Tenable has extracted...

openSUSE: Security Advisory for ffmpeg (openSUSE-SU-2021:3193-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE: Security Advisory (SUSE-SU-2021:3212-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Denial Of Service (DoS)

ffmpeg is vulnerable to denial of service. The vulnerability exists due a division by zero in function filterframe in libavfilter/vflenscorrection.c in Ffmpeg...

SUSE-SU-2021:3212-1 Security update for ffmpeg

This update for ffmpeg fixes the following issues: - CVE-2021-38171: Fixed adtsdecodeextradata in libavformat/adtsenc.c to check the initgetbits return value bsc1189724...

OPENSUSE-SU-2021:3193-1 Security update for ffmpeg

This update for ffmpeg fixes the following issues: - CVE-2021-38171: Fixed adtsdecodeextradata in libavformat/adtsenc.c to check the initgetbits return value bsc1189724...

SUSE-SU-2021:3193-1 Security update for ffmpeg

This update for ffmpeg fixes the following issues: - CVE-2021-38171: Fixed adtsdecodeextradata in libavformat/adtsenc.c to check the initgetbits return value bsc1189724...

FFmpeg Buffer Overflow Vulnerability (CNVD-2021-74090)

FFmpeg is the FFmpeg team's complete solution for recording, converting, and streaming audio and video. ffmpeg has a security vulnerability that could be exploited by an attacker to cause a denial of service or other unspecified impact...

Ffmpeg Buffer Overflow Vulnerability (CNVD-2021-74087)

FFmpeg is the FFmpeg team's complete solution for recording, converting, and streaming audio and video. a security vulnerability exists in Ffmpeg that could be exploited by an attacker to cause a denial of service or other unspecified impact...

FFmpeg integer overflow vulnerability (CNVD-2021-80288)

FFmpeg is the FFmpeg team's complete solution for recording, converting, and streaming audio and video. ffmpeg suffers from an integer overflow vulnerability that could be exploited by an attacker to cause a denial of service or other unspecified impact...

FFmpeg integer overflow vulnerability (CNVD-2021-80287)

FFmpeg is the FFmpeg team's complete solution for recording, converting, and streaming audio and video. FFmpeg suffers from an integer overflow vulnerability that could be exploited by an attacker to cause a denial of service or other unspecified impact...

FFmpeg buffer overflow vulnerability (CNVD-2021-74089)

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in Ffmpeg that can be exploited by attackers to cause a denial of service or other unspecified impact...