CVE-2024-10490

The CVE-2024-10490 issue affects B&R mapp Cockpit, View, Services, Motion, and Vision prior to version 6.0, due to an Authentication Bypass in the OPC UA Server configuration. The root cause is an authentication bypass that can be triggered by an unauthenticated network-based attacker, potentiall...

PT-2024-16313 · B&R · B&R Mapp Vision +5

Name of the Vulnerable Software and Affected Versions: B&R mapp Cockpit versions prior to 6.0 B&R mapp View versions prior to 6.0 B&R mapp Services versions prior to 6.0 B&R mapp Motion versions prior to 6.0 B&R mapp Vision versions prior to 6.0 Description: An "Authentication Bypass Using an...

CVE-2024-52420

Cross-Site Request Forgery CSRF vulnerability in Themeisle Disable Admin Notices individually disable-admin-notices allows Cross Site Request Forgery.This issue affects Disable Admin Notices individually: from n/a through = 1.4.0...

CVE-2024-52420

CVE-2024-52420 concerns a Cross-Site Request Forgery in the WordPress plugin Disable Admin Notices individually. The initial record specifies that the issue affects plugin versions up to 1.3.5, and multiple connected sources corroborate a CSRF vulnerability in this plugin. Patchstack and related ...

imagemagick:encoder_heic_fuzzer: Index-out-of-bounds in derive_collocated_motion_vectors

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=6713319420919808 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type: Index-out-of-bounds Crash...

tsMuxer 安全漏洞

tsMuxer is a transport stream multiplexer for remixing/multiplexing elementary streams by Dan's personal developer. A security vulnerability exists in version tsMuxer nightly-2024-05-12-02-01-18, which stems from the presence of a buffer overflow that allows an attacker to cause a denial of servi...

CVE-2024-38719

CVE-2024-38719 is a real, publicly documented vulnerability affecting the WordPress plugin Creative Motion Auto Featured Image (Auto Post Thumbnail) up to version 4.1.2 . The root cause is a Missing/Incorrectly Configured Authorization that allows exploitation of access control weaknesses in the ...

CVE-2024-43122 WordPress Robin image optimizer plugin <= 1.6.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in Creative Motion Robin image optimizer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Robin image optimizer: from n/a through 1.6.9...

CVE-2024-43122

CVE-2024-43122 describes a Missing Authorization (Broken/Incorrect Access Control) vulnerability in the Robin image optimizer WordPress plugin, affecting version 1.6.9 and earlier. The CVE notes that exploitation requires Network access with Low attack complexity and Low privileges, with potentia...

CVE-2024-43260

CVE-2024-43260 refers to a Missing Authorization vulnerability in the WordPress plugin Clearfy Cache. Public sources indicate affected versions up to 2.2.4 and describe an incorrectly configured access control that could enable unauthorized access. The provided connected documents do not specify ...

PT-2024-28213 · Creative Motion · Creativemotion Titan Anti-Spam & Security

Name of the Vulnerable Software and Affected Versions: CreativeMotion Titan Anti-spam & Security versions n/a through 7.3.6 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: F...

PT-2024-30310 · Unknown · Creative Motion Robin

Name of the Vulnerable Software and Affected Versions: Creative Motion Robin image optimizer versions 1.6.9 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For...

CVE-2024-43260: Missing Authorization

Missing Authorization vulnerability in Creative Motion Clearfy Cache allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clearfy Cache: from n/a through 2.2.4...

CVE-2024-38719: Missing Authorization

Missing Authorization vulnerability in Creative Motion Auto Featured Image Auto Post Thumbnail allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Auto Featured Image Auto Post Thumbnail: from n/a through 4.1.2...

PT-2024-28164 · Creative Motion · Creative Motion Auto Featured Image

Name of the Vulnerable Software and Affected Versions: Creative Motion Auto Featured Image Auto Post Thumbnail versions 4.1.2 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploitation of incorrectly configured access control security levels...

CVE-2024-43122: Missing Authorization

Missing Authorization vulnerability in Creative Motion Robin image optimizer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Robin image optimizer: from n/a through 1.6.9...

mpv:fuzzer_loadfile_mkv: Heap-buffer-overflow in put_no_rnd_pixels16_8_c

Project: https://github.com/mpv-player/mpv.git Detailed Report: https://oss-fuzz.com/testcase?key=6694107390476288 Project: mpv Fuzzing Engine: libFuzzer Fuzz Target: fuzzerloadfilemkv Job Type: libfuzzerasanmpv Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

Motion Spell GPAC Null Pointer Dereference Vulnerability

Motion Spell GPAC contains a null pointer dereference vulnerability that could allow a local attacker to cause a denial-of-service DoS condition...

The vulnerability of the `mc_chroma` function in the `motion.cc` component of the h.265 Libde265 video codec implementation, related to writing beyond buffer boundaries, allows a hacker to cause a service failure.

The vulnerability of the mcchroma function in the motion.cc component of the H.265 Libde265 video codec implementation is related to writing beyond buffer boundaries. Exploiting this vulnerability can allow a malicious actor to cause service failures using a specially created video file...

OSV-2024-925 Index-out-of-bounds in derive_collocated_motion_vectors

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42537038 Crash type: Index-out-of-bounds Crash state: derivecollocatedmotionvectors derivetemporallumavectorprediction getmergecandidatelistwithoutstep9...