Lucene search
+L

2469 matches found

Openbugbounty
Openbugbounty
added 2018/02/02 8:16 p.m.8 views

musik-mp3.info XSS vulnerability

Open Bug Bounty ID: OBB-551907 Description| Value ---|--- Affected Website:| musik-mp3.info Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.3AI score
SaveExploits0
OSV
OSV
added 2017/12/01 11:13 p.m.18 views

MGASA-2017-0434 Updated lame packages fix security vulnerabilities

LAME 3.100 has been released including fixes to security vulnerabilities. Note the MP3 patents have expired...

9.8CVSS6.4AI score0.0979EPSS
SaveExploits7References3
Mageia
Mageia
added 2017/12/01 11:13 p.m.56 views

Updated lame packages fix security vulnerabilities

LAME 3.100 has been released including fixes to security vulnerabilities. Note the MP3 patents have expired...

9.8CVSS2.1AI score0.0979EPSS
SaveExploits7References2
CNVD
CNVD
added 2017/11/21 12:00 a.m.9 views

Libming Buffer Overflow Vulnerability

libming is a Flash SWF output library for PHP, Perl, Ruby, Python, C, C ++, Java, and more. A buffer overflow vulnerability exists in the printMP3Headers function in util/listmp3.c in libming 0.4.8 and earlier. An attacker can exploit this vulnerability via specially crafted files to cause a deni...

5.5CVSS7.2AI score0.00817EPSS
SaveExploits0References1
Fedora
Fedora
added 2017/11/15 10:30 p.m.76 views

[SECURITY] Fedora 25 Update: lame-3.100-1.fc25

LAME is an open source MP3 encoder whose quality and speed matches commercial encoders. LAME handles MPEG1,2 and 2.5 layer III encoding with both constant and variable bitrates...

9.8CVSS2.6AI score0.03966EPSS
SaveExploits10
Openbugbounty
Openbugbounty
added 2017/11/12 2:26 p.m.18 views

tollysong.in XSS vulnerability

Open Bug Bounty ID: OBB-411220 Description| Value ---|--- Affected Website:| tollysong.in Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...

6.4AI score
SaveExploits0
Fedora
Fedora
added 2017/11/11 1:48 p.m.81 views

[SECURITY] Fedora 27 Update: lame-3.100-1.fc27

LAME is an open source MP3 encoder whose quality and speed matches commercial encoders. LAME handles MPEG1,2 and 2.5 layer III encoding with both constant and variable bitrates...

9.8CVSS2.6AI score0.03966EPSS
SaveExploits10
Fedora
Fedora
added 2017/11/11 1:41 p.m.38 views

[SECURITY] Fedora 27 Update: mingw-taglib-1.11.1-4.fc27

TagLib is a library for reading and editing the meta-data of several popular audio formats. Currently it supports both ID3v1 and ID3v2 for MP3 files, Ogg Vorbis comments and ID3 tags and Vorbis comments in FLAC, MPC, Speex, WavPack, TrueAudio files, as well as APE Tags...

8.8CVSS1.9AI score0.02207EPSS
SaveExploits0
Fedora
Fedora
added 2017/11/11 3:23 a.m.32 views

[SECURITY] Fedora 27 Update: mingw-taglib-1.11.1-4.fc27

TagLib is a library for reading and editing the meta-data of several popular audio formats. Currently it supports both ID3v1 and ID3v2 for MP3 files, Ogg Vorbis comments and ID3 tags and Vorbis comments in FLAC, MPC, Speex, WavPack, TrueAudio files, as well as APE Tags...

8.8CVSS1.9AI score0.02207EPSS
SaveExploits0
Openbugbounty
Openbugbounty
added 2017/11/09 11:11 p.m.13 views

backingtracks-mp3.com XSS vulnerability

Vulnerable URL: http://backingtracks-mp3.com/?text=" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 144155 VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability...

6.3AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2017/11/09 11:06 a.m.14 views

mp3-search.link XSS vulnerability

Open Bug Bounty ID: OBB-403291 Description| Value ---|--- Affected Website:| mp3-search.link Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

6.3AI score
SaveExploits0
Fedora
Fedora
added 2017/11/01 12:13 a.m.54 views

[SECURITY] Fedora 26 Update: lame-3.100-1.fc26

LAME is an open source MP3 encoder whose quality and speed matches commercial encoders. LAME handles MPEG1,2 and 2.5 layer III encoding with both constant and variable bitrates...

9.8CVSS2.6AI score0.03966EPSS
SaveExploits10
Github Security Blog
Github Security Blog
added 2017/10/24 6:33 p.m.31 views

ldoce Gem Arbitrary Command Execution

lib/ldoce/word.rb in the ldoce 0.0.2 gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in 1 an mp3 URL or 2 file name...

6.8CVSS7.3AI score0.01959EPSS
SaveExploits1References10Affected Software1
OSV
OSV
added 2017/10/24 6:33 p.m.16 views

GHSA-G266-3CRH-H7GJ ldoce Gem Arbitrary Command Execution

lib/ldoce/word.rb in the ldoce 0.0.2 gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in 1 an mp3 URL or 2 file name...

6.8CVSS7.5AI score0.01959EPSS
SaveExploits1References10
CNVD
CNVD
added 2017/10/20 12:00 a.m.6 views

ASX to MP3 Converter Buffer Error Vulnerability

ASX to MP3 Converter is a set of conversion tools capable of converting music in ASX, ASF, WMA and WMV formats to MP3 format. A buffer overflow vulnerability exists in ASX to MP3 Converter version 3.1.3.7.2010.11.05. An attacker can exploit this vulnerability to cause a denial of service or execu...

7.8CVSS7.9AI score0.05457EPSS
SaveExploits8References1
Openbugbounty
Openbugbounty
added 2017/10/18 10:13 a.m.22 views

youtubeplaylist-mp3.com XSS vulnerability

Vulnerable URL: http://youtubeplaylist-mp3.com/?v=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 16.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 72001 VIP website status:| No Coordinated Disclosure Timeline: Description| Value...

6.3AI score
SaveExploits0
NVD
NVD
added 2017/10/16 6:29 p.m.30 views

CVE-2017-15221

ASX to MP3 converter 3.1.3.7.2010.11.05 has a buffer overflow via a crafted M3U file, a related issue to CVE-2009-1324...

7.8CVSS7.8AI score0.05457EPSS
SaveExploits8References3
Prion
Prion
added 2017/10/16 6:29 p.m.20 views

Buffer overflow

ASX to MP3 converter 3.1.3.7.2010.11.05 has a buffer overflow via a crafted M3U file, a related issue to CVE-2009-1324...

6.8CVSS7.7AI score0.16506EPSS
SaveExploits16References3Affected Software1
Cvelist
Cvelist
added 2017/10/16 6:00 p.m.37 views

CVE-2017-15221

ASX to MP3 converter 3.1.3.7.2010.11.05 has a buffer overflow via a crafted M3U file, a related issue to CVE-2009-1324...

7.7AI score0.05457EPSS
SaveExploits8References3
CVE
CVE
added 2017/10/16 6:00 p.m.89 views

CVE-2017-15221

CVE-2017-15221 affects ASX to MP3 converter 3.1.3.7.2010.11.05, where a crafted M3U file triggers a buffer overflow in the ASX to MP3 conversion process. Public materials in connected docs describe a stack-based overflow enabling potential arbitrary code execution or denial of service, with explo...

7.8CVSS7.6AI score0.05457EPSS
SaveExploits8References3Affected Software1
Rows per page
Query Builder