Lucene search
+L

341 matches found

exploitpack
exploitpack
•added 2018/05/21 12:00 a.m.•37 views

Teradek Cube 7.3.6 - Cross-Site Request Forgery

Teradek Cube 7.3.6 - Cross-Site Request Forgery input type="submit...

0.6AI score
SaveExploits0
OSV
OSV
•added 2018/04/11 3:29 a.m.•10 views

UBUNTU-CVE-2018-10001

The decodeinit function in libavcodec/utvideodec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service out of array read via an AVI file...

6.5CVSS7AI score0.02298EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
•added 2018/03/06 12:00 a.m.•21 views

Vulnerability of the `ihevcd_allocate_static_bufs` and `ihevcd_create` functions in the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the ihevcdallocatestaticbufs and ihevcdcreate/media/libstagefright/codecs/hevcdec/SoftHEVC.cpp functions in the Android operating system is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code within...

10CVSS8.2AI score0.02352EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2018/03/06 12:00 a.m.•29 views

The vulnerability of the initDecoder function in the Android operating system allows a hacker to execute arbitrary code.

The vulnerability of the initDecoder function /media/libstagefright/codecs/hevcdec/SoftHEVC.cpp in the Android operating system is related to writing data beyond the buffer into memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code within the context of a...

10CVSS8.4AI score0.02352EPSS
SaveExploits0References4Affected Software1
CNVD
CNVD
•added 2017/11/21 12:00 a.m.•14 views

Cisco Meeting Server Denial of Service Vulnerability (CNVD-2017-34912)

Cisco Meeting Server formerly known as Acano Conferencing Server, CMS is the United States Cisco Cisco company's set of audio and video conferencing server software. A denial of service vulnerability exists in the H.26 decoder function in Cisco Meeting Server. A remote attacker can exploit this...

5.8CVSS6.8AI score0.02197EPSS
SaveExploits0References1
OSV
OSV
•added 2017/11/16 7:29 a.m.•21 views

CVE-2017-12311

A vulnerability in the H.264 decoder function of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a Cisco Meeting Server media process to restart unexpectedly when it receives an illegal H.264 frame. The vulnerability is triggered by an H.264 frame that has an invalid...

5.8CVSS5.8AI score0.02197EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2017/08/25 12:00 a.m.•30 views

Vulnerability in the MPEG-2 decoder of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability in the MPEG-2 decoder of the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.3CVSS7.6AI score0.01578EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
•added 2017/08/10 12:00 a.m.•19 views

Android Media framework h264 decoder denial of service vulnerability

Android is a set of Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA for short. media framework h264 decoder is one of the h264 decoder for multimedia development. A denial of service vulnerability exists in Media framework h264 decoder in...

5.5CVSS5.7AI score0.00343EPSS
SaveExploits0References1
CNVD
CNVD
•added 2017/08/10 12:00 a.m.•19 views

Android Media framework mpeg2 decoder remote code execution vulnerability (CNVD-2017-23433)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA.Media framework mpeg2 decoder is one of the mpeg2 decoders for multimedia development. A remote code execution vulnerability exists in Media framework mpeg2 decoder in Android. A...

9.3CVSS8.1AI score0.01578EPSS
SaveExploits0References1
OSV
OSV
•added 2017/08/09 9:29 p.m.•12 views

CVE-2017-0745

A remote code execution vulnerability in the Android media framework avc decoder. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37079296...

7.8CVSS6.3AI score0.01578EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2017/02/21 12:00 a.m.•13 views

The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code

The vulnerability in the H.264 decoder of the Flash Player software platform arises from an operation that occurs outside the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.2AI score0.18219EPSS
SaveExploits0References2Affected Software1
RedHat Linux
RedHat Linux
•added 2017/02/15 10:38 a.m.•12 views

flash-plugin: multiple code execution issues fixed in APSB17-04

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability in the h264 decoder routine. Successful exploitation could lead to arbitrary code execution...

9.3CVSS6.2AI score0.18219EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2016/08/03 12:00 a.m.•22 views

The vulnerability of the Android operating system allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the H.264 decoder in Android media servers relates to initialization errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely or cause a service failure memory corruption by using a specially crafted media file...

7.5CVSS8.2AI score0.01412EPSS
SaveExploits0References4Affected Software1
CNVD
CNVD
•added 2016/07/13 12:00 a.m.•16 views

Android Qualcomm component lifting vulnerability (CNVD-2016-04857)

Android on Nexus 5 and 7 is an open source Linux-based operating system for the Nexus 5 and 7 smartphones developed by Google and the Open Handset Alliance OHA in the U.S. Qualcomm is one of the U.S.-based companies used in the Qualcomm devices. Qualcomm is a Qualcomm device-specific component us...

9.3CVSS7.1AI score0.00571EPSS
SaveExploits0References1
OSV
OSV
•added 2016/07/11 1:59 a.m.•16 views

CVE-2016-3746

Use-after-free vulnerability in the mm-video-v4l2 vdec component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem...

7.8CVSS5.8AI score0.00365EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2016/07/05 12:00 a.m.•21 views

The vulnerability of Google Chrome browser allows a malicious actor to trigger a service failure.

Google Chrome browser contains a vulnerability related to buffer overflow in the dynamic memory of the FFmpegVideoDecoder::GetVideoBuffer function in media/filters/ffmpegvideodecoder.cc. Exploiting this vulnerability allows malicious actors to cause system failures or other adverse effects throug...

7.5CVSS8.1AI score0.0176EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2016/06/13 1:59 a.m.•18 views

CVE-2016-2479

The mm-video-v4l2 vdec component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles a buffer count, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSyste...

7.8CVSS7.6AI score0.00473EPSS
SaveExploits0References2
CNVD
CNVD
•added 2015/03/09 12:00 a.m.•23 views

Google Chrome vpxdecoder Denial of Service Vulnerability

Google Chrome is a web browsing tool developed by Google. A security vulnerability exists in the 'VpxVideoDecoder::VpxDecode' function in the media/filters/vpxvideodecoder.cc file in the vpxdecoder implementation in versions of Google Chrome prior to 41.0.2272.76. ' function in the...

5CVSS6.5AI score0.01818EPSS
SaveExploits0References1
OSV
OSV
•added 2014/06/11 12:00 a.m.•16 views

UBUNTU-CVE-2014-3157

Heap-based buffer overflow in the FFmpegVideoDecoder::GetVideoBuffer function in media/filters/ffmpegvideodecoder.cc in Google Chrome before 35.0.1916.153 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging VideoFrame data structures that a...

7.5CVSS7.6AI score0.0176EPSS
SaveExploits0References6
Saint
Saint
•added 2009/03/25 12:00 a.m.•70 views

ffdshow URL link buffer overflow

Added: 03/25/2009 CVE: CVE-2008-5381 BID: 32438 OSVDB: 50064 Background ffdshow tryouts also known just as ffdshow is an audio and video decoder for Windows. Problem A buffer overflow vulnerability allows command execution when a user opens a media stream with a long, specially crafted URL link...

9.3CVSS7AI score0.04756EPSS
SaveExploits4
Rows per page
Query Builder