28049 matches found
USN-6180-1: VLC media player vulnerabilities
It was discovered that VLC could be made to read out of bounds when decoding image files. If a user were tricked into opening a crafted image file, a remote attacker could possibly use this issue to cause VLC to crash, leading to a denial of service. This issue only affected Ubuntu 16.04 LTS and...
Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM : VLC media player vulnerabilities (USN-6180-1)
The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6180-1 advisory. It was discovered that VLC could be made to read out of bounds when decoding image files. If a user were tricked into...
The vulnerability of Windows Media Player, a component of the Windows operating system, arises from insufficient validation of input data. This allows attackers to execute arbitrary code.
The vulnerability of Windows Media Player, a component of the Windows operating system, is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created file...
The vulnerability of Windows Media Player, a component of the Windows operating system, arises from insufficient validation of input data. This allows attackers to execute arbitrary code.
The vulnerability of Windows Media Player, a component of the Windows operating system, is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created file...
PT-2023-3097 · Microsoft · Windows Media Player +1
Name of the Vulnerable Software and Affected Versions: Windows Media Player affected versions not specified Description: The issue is related to insufficient input validation in Windows Media Player, which can be exploited by an attacker to execute arbitrary code using a specially crafted file...
PT-2023-3098 · Microsoft · Windows Media Player +1
Name of the Vulnerable Software and Affected Versions: Windows Media Player affected versions not specified Description: The issue is related to insufficient input validation in Windows Media Player, allowing an attacker to execute arbitrary code using a specially crafted file. This can enable...
CVE-2023-34407
OfflinePlayerService.exe in Harbinger Offline Player 4.0.6.0.2 allows directory traversal as LocalSystem via ..\ in a URL...
CVE-2023-34407
OfflinePlayerService.exe in Harbinger Offline Player 4.0.6.0.2 allows directory traversal as LocalSystem via ..\ in a URL...
CVE-2023-34407
OfflinePlayerService.exe in Harbinger Offline Player 4.0.6.0.2 allows directory traversal as LocalSystem via ..\ in a URL...
Directory traversal
OfflinePlayerService.exe in Harbinger Offline Player 4.0.6.0.2 allows directory traversal as LocalSystem via ..\ in a URL...
Harbinger Offline Player 路径遍历漏洞
Harbinger Offline Player is Harbinger's seamless and highly secure way to access training content without the need for a constant Internet connection. A security vulnerability exists in Harbinger Offline Player version 4.0.6.0.2, which stems from OfflinePlayerService.exe allowing directory...
PT-2023-24859 · Unknown · Harbinger Offline Player
Name of the Vulnerable Software and Affected Versions: Harbinger Offline Player version 4.0.6.0.2 Description: The issue allows directory traversal as LocalSystem via .. in a URL. This can be exploited in OfflinePlayerService.exe. Recommendations: For Harbinger Offline Player version 4.0.6.0.2,...
CVE-2023-34407
The CVE-2023-34407 entry affects Harbinger Offline Player 4.0.6.0.2, specifically OfflinePlayerService.exe, which allows directory traversal via ..\ in a URL. Reported impact is confidentiality loss (C: High) with no impact to integrity or availability, and CVSSv3.1 base score 7.5 (NETWORK, LOW c...
CVE-2023-34407
OfflinePlayerService.exe in Harbinger Offline Player 4.0.6.0.2 allows directory traversal as LocalSystem via ..\ in a URL...
CVE-2023-34407
OfflinePlayerService.exe in Harbinger Offline Player 4.0.6.0.2 allows directory traversal as LocalSystem via ..\ in a URL...
CVE-2022-36247
Shop Beat Solutions Pty LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to IDOR via controlpanel.shopbeat.co.za...
CVE-2022-36250
Shop Beat Solutions Pty LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Cross Site Request Forgery CSRF...
CVE-2022-36243
Shop Beat Solutions pty LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Directory Traversal via server.shopbeat.co.za. Information Exposure Through Directory Listing vulnerability in "studio" software of Shop Beat. This issue affects: Shop Beat studio studio versions prior to 3.2....
CVE-2022-36244
Shop Beat Solutions Pty LTD Shop Beat Media Player 2.5.95 up to 3.2.57 suffers from Multiple Stored Cross-Site Scripting XSS vulnerabilities via Shop Beat Control Panel found at www.shopbeat.co.za controlpanel.shopbeat.co.za...