34916 matches found
afterburn-5.10.0.git73.b97f772-1.1 on GA media (moderate)
afterburn-5.10.0.git73.b97f772-1.1 on GA media Announcement ID: openSUSE-SU-2026:11255-1 Rating: moderate Cross-References: CVE-2026-25541 CVE-2026-41676 CVE-2026-41677 CVE-2026-41898 CVE-2026-42327 CVE-2026-45784 CVSS scores: CVE-2026-25541 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H...
freetype2-devel-2.14.3-1.1 on GA media (moderate)
freetype2-devel-2.14.3-1.1 on GA media Announcement ID: openSUSE-SU-2026:11257-1 Rating: moderate Cross-References: CVE-2026-50811 CVSS scores: CVE-2026-50811 SUSE : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CVE-2026-50811 SUSE : 6.8...
sdbootutil-1+git20260713.d869cf8-1.1 on GA media (moderate)
sdbootutil-1+git20260713.d869cf8-1.1 on GA media Announcement ID: openSUSE-SU-2026:11262-1 Rating: moderate Cross-References: CVE-2026-41677 CVE-2026-41678 CVE-2026-41681 CVE-2026-41898 CVE-2026-42327 CVE-2026-44662 CVE-2026-45784 CVSS scores: CVE-2026-41677 SUSE : 3.7...
PT-2026-58377
Name of the Vulnerable Software and Affected Versions Windows 11 affected versions not specified Windows Server 2025 affected versions not specified Description A race condition exists in Windows Media, where concurrent execution using a shared resource with improper synchronization allows an...
PT-2026-58318
Name of the Vulnerable Software and Affected Versions Windows Media affected versions not specified Description A heap-based buffer overflow exists in Windows Media, which could allow an authorized attacker with local access to execute arbitrary code locally. A heap-based buffer overflow occurs...
PT-2026-58118
Name of the Vulnerable Software and Affected Versions Windows Media affected versions not specified Description An issue in Windows Media allows an authorized attacker to locally disclose sensitive information to an unauthorized actor. Recommendations At the moment, there is no information about ...
PT-2026-58802
Name of the Vulnerable Software and Affected Versions Media Encoder affected versions not specified Description An out-of-bounds write occurs when a program writes data past the end of a designated memory buffer, which can lead to memory corruption. This issue could result in arbitrary code...
KLA91140 Multiple vulnerabilities in Google Chrome
Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Ozone can be exploited...
PT-2026-60242
These are all security issues fixed in the libeverest-3.6.7-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11263-1 freerdp-3.28.0-1.1 on GA media
These are all security issues fixed in the freerdp-3.28.0-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-58655
Name of the Vulnerable Software and Affected Versions Windows Media affected versions not specified Description A heap-based buffer overflow occurs in Windows Media, which is a memory corruption issue where data exceeds the allocated buffer on the heap. This allows an unauthorized attacker to...
Arbitrary File Upload
Overview Affected versions of this package are vulnerable to Arbitrary File Upload through filename sanitization in File::sanitizeFileName and MediaUploader::useFilename/filename inference in the upload pipeline. An attacker can upload a file named with a double extension such as shell.php.jpg...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal via the sanitizePath function in File.php. An attacker can write uploaded files to arbitrary locations by supplying a crafted directory path to MediaUploader::toDestination that survives the permissive sanitization a...
CVE-2026-15594
CVE-2026-15594 affects waooAI waoowaoo up to 0.4.1, specifically the function stablePublicIdFromStorageKey in the Media Handler’s src/lib/media/hash.ts. The vulnerability arises from manipulating the storageKey, resulting in improper authorization. Reportedly exploitable from remote and requires ...
CVE-2026-49970
Laravel-Mediable before 7.0.0 contains a path traversal vulnerability in the File::sanitizePath function that allows attackers to write uploaded files to arbitrary locations by controlling the directory argument passed to MediaUploader::toDestination. Attackers can exploit the permissive...
CVE-2026-49969
Laravel-Mediable before 7.0.0 contains a server-side request forgery vulnerability that allows remote attackers to issue arbitrary HTTP requests from the server by supplying unvalidated caller-controlled URLs to endpoints backed by MediaUploader::fromSource. Attackers can craft URLs targeting...
PYSEC-2026-2667 motionEye's Absolute Path Traversal in Media File Handlers Allows Arbitrary File Read
Summary mEye contains an absolute path traversal vulnerability in multiple media file handlers that allows an attacker to read arbitrary files from the filesystem. The affected handlers accept a user-controlled filename parameter and construct filesystem paths using os.path.join. When an absolute...
PYSEC-2026-2664 motionEye has an Arbitrary File Read via Path Traversal in Picture/Movie Preview Endpoint
Summary motionEye v0.43.1 latest stable is vulnerable to path traversal in the picture and movie API endpoints, like /picture/id/preview/filename. Neither the API handlers, nor the mediafiles.py functions like getmediapreview check for .. sequences in the filename parameter, except getmediaconten...
CVE-2026-57411
creationtimestamp| type| source ---|---|--- 2026-07-13 12:10:04+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mqjnw7ua252u 2026-07-13 12:10:21+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116912594644386383...