28096 matches found
February 9, 2021—KB4601348 (Monthly Rollup)
None None...
Adobe Flash Player End of Life (EOL) Detection
The Adobe Flash Player on the remote host has reached the end of life EOL / is discontinued and should not be used anymore. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Memory Corruption Vulnerability in VLC Player (CNVD-2021-16335)
VLC is a cross-platform multimedia player and framework for playing most multimedia files, as well as DVDs, audio CDs, VCDs and various streaming protocols. VLC Player suffers from a memory corruption vulnerability that can be exploited by attackers to cause a denial of service...
Memory Corruption Vulnerability in VLC Player (CNVD-2021-16334)
VLC is a cross-platform multimedia player and framework for playing most multimedia files, as well as DVDs, audio CDs, VCDs and various streaming protocols. VLC Player suffers from a memory corruption vulnerability that can be exploited by attackers to cause a denial of service...
Memory Corruption Vulnerability in VLC Player
VLC is a cross-platform multimedia player and framework for playing most multimedia files, as well as DVDs, audio CDs, VCDs and various streaming protocols. VLC Player suffers from a memory corruption vulnerability that can be exploited by attackers to cause a denial of service...
VLC < 3.0.12 Buffer Overflow
The version of VLC media player installed on the remote host is prior to 3.0.12. It is, therefore, affected by a heap-based buffer overflow condition. A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player allows attackers to trigger a heap-based buffer overflow via a crafted .m...
VLC: Buffer overflow
Background VLC is a cross-platform media player and streaming server. Description VLC was found to have a buffer overflow when handling crafted MKV files. Impact A remote attacker could entice a user to open a specially crafted MKV file using VLC possibly resulting in execution of arbitrary code...
Binary Vulnerability in Haihaisoft Universal Player
Haihaisoft Universal Player is a universal player. A binary vulnerability exists in Haihaisoft Universal Player. An attacker can exploit this vulnerability to cause the program to crash...
[SECURITY] [DSA 4834-1] vlc security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4834-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 22, 2021 https://www.debian.org/security/faq -...
Vulnerability fixed in VLC
A vulnerability has been fixed in VLC. The vulnerability allows a malicious party capable of causing a denial-of-service and possibly executing arbitrary code under the privileges of the user. To exploit the vulnerability, a user must open a malicious file open. VLC has released updates to fix th...
[ASA-202101-35] vlc: arbitrary code execution
Arch Linux Security Advisory ASA-202101-35 ========================================== Severity: Medium Date : 2021-01-20 CVE-ID : CVE-2020-26664 Package : vlc Type : arbitrary code execution Remote : No Link : https://security.archlinux.org/AVG-1423 Summary ======= The package vlc before version...
Microsoft Windows Media Player suffers from dll hijacking vulnerability
Microsoft Windows Media Player is media player that supports a wide range of media formats. A dll hijacking vulnerability exists in Microsoft Windows Media Player. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...
WordPress FV Flowplayer Video Player plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.FV Flowplayer Video Player is a video player plugin used in it. relevant is a relevant content display plugin used in it. A cross-site...
CVE-2020-35748
Cross-site scripting XSS vulnerability in models/list-table.php in the FV Flowplayer Video Player plugin before 7.4.37.727 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the fvwpfvvideoplayersrc JSON field in the data parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in models/list-table.php in the FV Flowplayer Video Player plugin before 7.4.37.727 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the fvwpfvvideoplayersrc JSON field in the data parameter...
CVE-2020-35748
FV Flowplayer Video Player plugin for WordPress is affected by a cross-site scripting (XSS) vulnerability in models/list-table.php, fixed in versions 7.4.38.727 and later. The issue allows remote authenticated users to inject arbitrary script/HTML via the fv_wp_fvvideoplayer_src field in the data...
CVE-2020-35748
Cross-site scripting XSS vulnerability in models/list-table.php in the FV Flowplayer Video Player plugin before 7.4.37.727 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the fvwpfvvideoplayersrc JSON field in the data parameter...
FV Flowplayer Video Player < 7.4.38.727 - Authenticated Stored Cross-Site Scripting (XSS)
The plugin did not sanitise the fvwpfvvideoplayersrc parameter when creating or editing the video player, which will then be triggered when viewing the table of players in the admin dashboard...
[SECURITY] Fedora 32 Update: adplug-2.3.3-1.fc32
AdPlug is a free software, cross-platform, hardware independent AdLib sound player library, mainly written in C++. AdPlug plays sound data, originally created for the AdLib OPL2/3 audio board, directly from its original format on top of an OPL2/3 emulator or by using the real hardware. No OPL2/3...