2469 matches found
PT-2023-15631 · Unknown · Mp3 Encoder
Name of the Vulnerable Software and Affected Versions: MP3 encoder affected versions not specified Description: The issue is related to a missing bounds check in the MP3 encoder, which could lead to an out of bounds read. This might result in a local denial of service and requires System executio...
UNISOC Chipsets 缓冲区错误漏洞
UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in the UNISOC Chipsets MP3 encoder module, which stems from a lack of boundary checking, resulting in out-of-bounds reads...
PT-2023-15630 · Unknown · Mp3 Encoder
Name of the Vulnerable Software and Affected Versions: MP3 encoder affected versions not specified Description: The issue is related to a missing bounds check in the MP3 encoder, which could lead to a possible out of bounds write. This might result in a local denial of service and requires System...
North Korea's ScarCruft Deploys RokRAT Malware via LNK File Infection Chains
The North Korean threat actor known as ScarCruft started experimenting with oversized LNK files as a delivery route for RokRAT malware as early as July 2022, the same month Microsoft began blocking macros across Office documents by default. "RokRAT has not changed significantly over the years, bu...
CVE-2023-28885
The MyLink infotainment system build 2021.3.26 in General Motors Chevrolet Equinox 2021 vehicles allows attackers to cause a denial of service temporary failure of Media Player functionality via a crafted MP3 file...
CVE-2023-28885
The MyLink infotainment system build 2021.3.26 in General Motors Chevrolet Equinox 2021 vehicles allows attackers to cause a denial of service temporary failure of Media Player functionality via a crafted MP3 file...
Design/Logic Flaw
The MyLink infotainment system build 2021.3.26 in General Motors Chevrolet Equinox 2021 vehicles allows attackers to cause a denial of service temporary failure of Media Player functionality via a crafted MP3 file...
CVE-2023-28885
The MyLink infotainment system build 2021.3.26 in General Motors Chevrolet Equinox 2021 vehicles allows attackers to cause a denial of service temporary failure of Media Player functionality via a crafted MP3 file...
CVE-2023-28885
CVE-2023-28885 affects the MyLink infotainment system in GM Chevrolet Equinox 2021 (build 2021.3.26). The vulnerability allows a crafted MP3 file to trigger a denial of service, causing a temporary failure of Media Player functionality. The issue is driven by the MP3 input handling in the affecte...
CVE-2023-28885
The MyLink infotainment system build 2021.3.26 in General Motors Chevrolet Equinox 2021 vehicles allows attackers to cause a denial of service temporary failure of Media Player functionality via a crafted MP3 file...
[SECURITY] Fedora 38 Update: loudgain-0.6.8-13.fc38
loudgain is a versatile ReplayGain 2.0 loudness normalizer, based on the EBU R128/ITU BS.1770 standard -18 LUFS and supports FLAC/Ogg/MP2/MP3/MP4/M4A/ALAC/Opus/ASF/WMA/WAV/WavPack/AIFF/APE audio files. It uses the well-known mp3gain commandline syntax but will never modify the actual audio data...
Fedora: Security Advisory for loudgain (FEDORA-2023-a5e10b188a)
The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Debian: Security Advisory (DLA-791-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-0069
The WPaudio MP3 Player WordPress plugin through 4.0.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
CVE-2023-0069
The WPaudio MP3 Player WordPress plugin through 4.0.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
CVE-2023-0069
The CVE-2023-0069 entry concerns the WordPress plugin WPaudio MP3 Player up to version 4.0.2 . The issue is a stored cross-site scripting (XSS) vulnerability caused by not validating/escaping certain shortcode attributes before rendering them in posts/pages, enabling users with the contributor ro...
CVE-2023-0069 WPaudio MP3 Player <= 4.0.2 - Contributor+ Stored XSS
The WPaudio MP3 Player WordPress plugin through 4.0.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
WordPress plugin WPaudio MP3 Player 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...
UBUNTU-CVE-2023-0841
A vulnerability, which was classified as critical, has been found in GPAC 2.3-DEV-rev40-g3602a5ded. This issue affects the function mp3dmxprocess of the file filters/reframemp3.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been...
