WordPress N-Media File Uploader Plugin <= 1.9 - Arbitrary File Upload

This plugin is prone to an arbitrary file upload vulnerability. Solution Update the plugin...

WordPress Media File Manager Advanced 1.1.5 XSS / SQL Injection

Description "media-file-manager-advanced" suffers from executing administrator actions by any authenticated user due to weak permissions checking. an attacker can delete/update posts, Creating/Removing/Listing Directories, Moving/Renaming/Deleting Files, Blind SQL Injection and Cross-Site...

Media File Manager Advanced <= 1.1.5 - Multiple Vulnerabilites

Media File Manager Advanced suffers from executing administrator actions by any authenticated user due to weak permissions checking. An attacker is able to delete/update posts, Creating/Removing/Listing Directories, Moving/Renaming/Deleting Files, Blind SQL Injection and Cross-Site Scripting. PoC...

WordPress Media File Manager Plugin <= 1.1.5 - Multiple Vulnerabilities

Because of multiple vulnerabilities in this plugin, attackers can delete or update posts, creating, removing, listing directories, moving, renaming or deleting files, blind SQL injection and cross site scripting. Solution There is no fix at this moment...

Media File Manager Advanced <= 1.1.5 - Multiple Vulnerabilites

Media File Manager Advanced suffers from executing administrator actions by any authenticated user due to weak permissions checking. An attacker is able to delete/update posts, Creating/Removing/Listing Directories, Moving/Renaming/Deleting Files, Blind SQL Injection and Cross-Site Scripting. Pos...

Microsoft DirectShow MPEG 3 Channel Mode Memory Corruption - Ver2 (CVE-2010-1882)

A memory corruption vulnerability has been reported in Microsoft Windows XP, Microsoft Windows Server 2003 x64 64-bit and Microsoft Windows Server 2003. An attacker could exploit this vulnerability via an MPEG Layer-3 audio stream in a crafted media file or crafted streaming content. Successful...

CVE-2014-8002

Use-after-free vulnerability in decodeslice.cpp in Cisco OpenH264 1.2.0 and earlier allows remote attackers to execute arbitrary code via an encoded media file...

CVE-2014-8001

Buffer overflow in decode.cpp in Cisco OpenH264 1.2.0 and earlier allows remote attackers to execute arbitrary code via an encoded media file...

Design/Logic Flaw

Use-after-free vulnerability in decodeslice.cpp in Cisco OpenH264 1.2.0 and earlier allows remote attackers to execute arbitrary code via an encoded media file...

Buffer overflow

Buffer overflow in decode.cpp in Cisco OpenH264 1.2.0 and earlier allows remote attackers to execute arbitrary code via an encoded media file...

CVE-2014-8001

Buffer overflow in decode.cpp in Cisco OpenH264 1.2.0 and earlier allows remote attackers to execute arbitrary code via an encoded media file...

CVE-2014-8002

Use-after-free vulnerability in decodeslice.cpp in Cisco OpenH264 1.2.0 and earlier allows remote attackers to execute arbitrary code via an encoded media file...

CVE-2014-8001

CVE-2014-8001: Cisco OpenH264 has a heap/buffer overflow in decode.cpp (decoder logic) affecting OpenH264 ≤ 1.2.0. By feeding malformed H.264 data to the decoder, an unauthenticated remote attacker can cause arbitrary code execution within the targeted application; Cisco released a patch per vend...

CVE-2014-8002

Use-after-free vulnerability in decodeslice.cpp in Cisco OpenH264 1.2.0 and earlier allows remote attackers to execute arbitrary code via an encoded media file...

CVE-2014-8002

Cisco OpenH264 libraries (version 1.2.0 and earlier) contain a use-after-free flaw in decode_slice.cpp that can be triggered by malformed H.264 data, leading to remote code execution. The vulnerability affects applications using the library, with impact to arbitrary code execution in the context ...

GLSA-201411-01 : VLC: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201411-01 VLC: Multiple vulnerabilities Multiple vulnerabilities have been discovered in VLC. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to open a specially craft...

CVE-2014-8761

inc/template.php in DokuWiki before 2014-05-05a only checks for access to the root namespace, which allows remote attackers to access arbitrary images via a media file details ajax call...

CVE-2014-8761

inc/template.php in DokuWiki before 2014-05-05a only checks for access to the root namespace, which allows remote attackers to access arbitrary images via a media file details ajax call...

Code injection

inc/template.php in DokuWiki before 2014-05-05a only checks for access to the root namespace, which allows remote attackers to access arbitrary images via a media file details ajax call...

CVE-2014-8761

inc/template.php in DokuWiki before 2014-05-05a only checks for access to the root namespace, which allows remote attackers to access arbitrary images via a media file details ajax call...