CVE-2021-46944

In the Linux kernel, the following vulnerability has been resolved: media: staging/intel-ipu3: Fix memory leak in imufmt We are losing the reference to an allocated memory if try. Change the order of the check to avoid that...

PT-2024-7725

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the Linux kernel's media component, specifically with the bpf attach/detach functionality requiring write permission. Additionally, it requires CAP NET ADMIN. The...

PT-2024-7712

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a memory leak in the irtoy tx function of the Linux kernel's media component. When irtoy command fails, the allocated buf is not freed, resulting in a memory leak...

Neos CMS Cross Site Scripting vulnerability

Cross Site Scripting XSS vulnerability in Neos CMS 8.3.3 allows a remote authenticated attacker to execute arbitrary code via a crafted SVG file uploaded to the neos/management/media component. To make use of this attack vector, the attacker must either be able to upload a maliciously crafted fil...

The vulnerability of the Google Chrome browser’s Media component, which allows a hacker to read and write arbitrary files.

The vulnerability of the Google Chrome browser’s Media component is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to read and write arbitrary files using a specially crafted HTML page...

The vulnerability of the Google Chrome browser’s Media component, which allows a hacker to execute arbitrary code.

The vulnerability of the Google Chrome browser’s Media component is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. in the United States. A security vulnerability exists in Google Chrome prior to version 114.0.5735.198, which stems from a memory reuse after release issue in Media. A remote attacker could exploit this vulnerability to cause heap corruption via...

PT-2023-3385 · Google +3 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 114.0.5735.198 Description: The issue is related to a use after free vulnerability in the Media component of Google Chrome, which can lead to heap corruption. This can potentially allow a remote attacker to...

Arbitrary Code Execution

tcg/voyager is vulnerable to Arbitrary Code Execution. The vulnerability exists due to improper input sanitization which allows an attacker to execute arbitrary codes via a crafted .php file to the media component...

GHSA-2X3R-7JGM-GH8X Remote code execution in Voyager

Insecure Permission vulnerability found in Voyager v.1.4 and before allows a remote attacker to execute arbitrary code via a crafted .php file to the media component...

Remote code execution in Voyager

Insecure Permission vulnerability found in Voyager v.1.4 and before allows a remote attacker to execute arbitrary code via a crafted .php file to the media component...

CVE-2020-36070

Insecure Permission vulnerability found in Yoyager v.1.4 and before allows a remote attacker to execute arbitrary code via a crafted .php file to the media component...

CVE-2020-36070

Insecure Permission vulnerability found in Yoyager v.1.4 and before allows a remote attacker to execute arbitrary code via a crafted .php file to the media component...

Design/Logic Flaw

Insecure Permission vulnerability found in Yoyager v.1.4 and before allows a remote attacker to execute arbitrary code via a crafted .php file to the media component...

CVE-2020-36070

CVE-2020-36070 affects Voyager (Yoyager) versions 1.4 and earlier. The vulnerability is described as an insecure permission issue that allows a remote attacker to execute arbitrary code by supplying a crafted PHP file to the media component. The issue is classified as critical (CVSS v3.1: 9.8, Ne...

CVE-2020-36070

Insecure Permission vulnerability found in Yoyager v.1.4 and before allows a remote attacker to execute arbitrary code via a crafted .php file to the media component...

CVE-2020-36070

Insecure Permission vulnerability found in Yoyager v.1.4 and before allows a remote attacker to execute arbitrary code via a crafted .php file to the media component...

PT-2023-11800 · Voyager · Voyager

Name of the Vulnerable Software and Affected Versions: Voyager versions 1.4 and earlier Description: The issue allows a remote attacker to execute arbitrary code via a crafted .php file to the media component. This is due to an Insecure Permission vulnerability. Recommendations: For Voyager...

PT-2023-34367

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue is related to the s5p-mfc media component in the Linux Kernel, where a clear workbit is not handled properly in an error condition. This could potentially lead to security...

PT-2022-18689 · Joomla · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions 4.0.0 through 4.2.4 Description: An issue was discovered in Joomla! where inadequate filtering of potentially malicious user input leads to reflected XSS vulnerabilities in com media. Recommendations: For Joomla! versions 4.0...