28096 matches found
ROS-2-2192
2.2192 VLC vulnerabilities with specially designed playlists 1. Vulnerability description: A remote user can create a specially crafted file that can cause various issues. It is possible to trigger remote code execution through a specially created playlist and trick the user into interacting with...
ROS-2-635
2.635 VLC vulnerability CVE-2020-13428 1. Vulnerability description: Vulnerability in VLC 3.0.11 player The vulnerability could cause a buffer overflow in the hxxxAnnexBtoxVC function. The vulnerability potentially allows to organize attacker's code execution when playing specially formatted vide...
The vulnerability of the Flash Player software, which relates to reading data beyond the buffer in memory, allows attackers to disclose protected information.
The vulnerability of the Adobe Flash Player software relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...
Remote code execution
Windows Media MPEG-4 Video Decoder Remote Code Execution Vulnerability...
FV Flowplayer Video Player < 7.5.3.727 - Reflected Cross-Site Scripting
The plugin does not escape or validate the playerid parameter before outputting back in the Stats page in the admin dashboard, leading to a Reflected Cross-Site Scripting issue which will be executed in the context of a logged in administrator...
FV Flowplayer Video Player < 7.5.3.727 - Reflected Cross-Site Scripting
The plugin does not escape or validate the playerid parameter before outputting back in the Stats page in the admin dashboard, leading to a Reflected Cross-Site Scripting issue which will be executed in the context of a logged in administrator PoC...
CVE-2021-21740
There is an information leak vulnerability in the digital media player DMS of ZTE's residential gateway product. The attacker could insert the USB disk with the symbolic link into the residential gateway, and access unauthorized directory information through the symbolic link, causing information...
Information disclosure
There is an information leak vulnerability in the digital media player DMS of ZTE's residential gateway product. The attacker could insert the USB disk with the symbolic link into the residential gateway, and access unauthorized directory information through the symbolic link, causing information...
CVE-2021-21740
There is an information leak vulnerability in the digital media player DMS of ZTE's residential gateway product. The attacker could insert the USB disk with the symbolic link into the residential gateway, and access unauthorized directory information through the symbolic link, causing information...
Debian: Security Advisory (DLA-2728-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DLA-2728-1 : vlc - LTS security update
The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2728 advisory. It was discovered that there were a number of issues in VideoLAN aka 'vlc', a popular video and multimedia player: CVE-2021-25801 A buffer overflow vulnerability i...
Information Disclosure
vlc is vulnerable to information disclosure. The vulnerability exists due to a buffer overflow vulnerability in the vlcinputattachmentNew component of VideoLAN VLC Media Player which allows attackers to cause an out-of-bounds read via a crafted .avi file...
Denial Of Service (DoS)
vlc:sid is vulnerable to denial of service. It is possible due to a buffer overflow occured in the Parseindx component of VideoLAN VLC Media Player, allowing attackers to cause an out-of-bounds read via a crafted .avi file...
VideoLAN VLC Buffer Overflow Vulnerability
VideoLAN VLC is an open source cross-platform multimedia player and framework for playing most multimedia files, as well as DVDs, audio CDs, VCDs and various streaming protocols. vlcinputattachmentNew component in VideoLAN VLC version 3.0.11 is vulnerable to buffer overflow, which can be exploite...
The vulnerability of the Adobe Flash Player, related to a data source validation error, allows for the execution of arbitrary code.
The vulnerability of the Adobe Flash Player is related to a data source validation error. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Adobe Flash Player Desktop Runtime software, as well as FlashPlayer for Google Chrome, and Adobe FlashPlayer for Microsoft Edge and Internet Explorer, relates to the use of memory after it is freed. This allows a malicious actor to execute arbitrary code.
The vulnerability of the Adobe Flash Player Desktop Runtime, FlashPlayer for Google Chrome, as well as Adobe FlashPlayer for Microsoft Edge and Internet Explorer, is related to the use of memory after it is released. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...
VideoLAN VLC Buffer Overflow Vulnerability (CNVD-2021-62884)
VideoLAN VLC is an open source cross-platform multimedia player and framework that can play most multimedia files, as well as DVDs, audio CDs, VCDs, and various streaming protocols. a buffer overflow vulnerability exists in the AVIExtractSubtitle component of VideoLAN VLC version 3.0.11, which ca...
CVE-2015-5119
Use-after-free vulnerability in the ByteArray class in the ActionScript 3 AS3 implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x through 18.0.0.194 on Windows and OS X and 11.x through 11.2.202.468 on Linux allows remote attackers to execute arbitrary code or cause a denial of...
VideoLAN VLC Buffer Overflow Vulnerability (CNVD-2021-62883)
VideoLAN VLC is an open source cross-platform multimedia player and framework that can play most multimedia files, as well as DVDs, audio CDs, VCDs and various streaming protocols.The Parseindx component in VideoLAN VLC version 3.0.11 suffers from a buffer overflow vulnerability that can be...