Memory Corruption Vulnerability in QQ Video Player of Shenzhen Tencent Computer System Co.

QQ Video Player is a Tencent relaunched full-format video player software, fully supports 3GP, MKV, MOV, AVI, FLV, MP4 and other common formats of video files, support for MKV embedded subtitles and SRT, SMI plug-in subtitles, while supporting multi-track switching. A memory corruption...

Memory Corruption Vulnerability in QQ Video Player of Shenzhen Tencent Computer System Limited (CNVD-2020-23515)

QQ Video Player is a Tencent relaunched full-format video player software, fully supports 3GP, MKV, MOV, AVI, FLV, MP4 and other common formats of video files, support for MKV embedded subtitles and SRT, SMI plug-in subtitles, while supporting multi-track switching. A memory corruption...

Memory corruption vulnerability in QQ movie player of Shenzhen Tencent Computer System Co. Ltd (CNVD-2020-23516)

QQ Video Player is a Tencent relaunched full-format video player software, fully supports 3GP, MKV, MOV, AVI, FLV, MP4 and other common formats of video files, support for MKV embedded subtitles and SRT, SMI plug-in subtitles, while supporting multi-track switching. A memory corruption...

Shenzhen Tencent Computer System Co., Ltd.'s QQ Video has an Array Out-of-Bounds Read Vulnerability

Q Video Player is a Tencent relaunched full-format video player software, fully supports 3GP, MKV, MOV, AVI, FLV, MP4 and other common formats of video files, support for MKV embedded subtitles and SRT, SMI plug-in subtitles, while supporting multi-track switching. Shenzhen Tencent Computer Syste...

UBUNTU-CVE-2014-9628

The MP4ReadBoxString function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before 2.1.6 allows remote attackers to trigger an unintended zero-size malloc and conduct buffer overflow attacks, and consequently execute arbitrary code, via a box size of 7...

CVE-2014-9629

Integer overflow in the Encode function in modules/codec/schroedinger.c in VideoLAN VLC media player before 2.1.6 and 2.2.x before 2.2.1 allows remote attackers to conduct buffer overflow attacks and execute arbitrary code via a crafted length value...

The vulnerability of the Open function in the VideoLAN VLC media player’s modules/demux/tta.c file allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the Open function in the VideoLAN VLC media player’s modules/demux/tta.c file is related to numerical processing errors. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failures...

Code execution vulnerability in splayer

Shooter Video Player splayer is an open source player project created and maintained by shooter.com with a wide range of users. A code execution vulnerability exists in splayer, which can be exploited by an attacker to load a malicious dll and execute malicious arbitrary code...

DEBIAN-CVE-2019-14970

A vulnerability in mkv::eventthreadt in VideoLAN VLC media player 3.0.7.1 allows remote attackers to trigger a heap-based buffer overflow via a crafted .mkv file...

WordPress FV Flowplayer Video Player Plugin < 7.3.15.727 Information Disclosure Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.113485";...

Format string

The FV Flowplayer Video Player plugin before 7.3.15.727 for WordPress allows guests to obtain the email subscription list in CSV format via the wp-admin/admin-post.php?page=fvplayer&fv-email-export=1 URI...

CVE-2019-14800

The CVE-2019-14800 issue affects the WordPress plugin FV Flowplayer Video Player prior to 7.3.15.727. It enables guests to exfiltrate the email subscription list in CSV format via wp-admin/admin-post.php?page=fvplayer&fv-email-export=1. The vulnerability is an information disclosure with partial ...

Vulnerability of the MP4_EIA608_Convert() function (modules/demux/mp4/mp4.c) of the VideoLAN Media Player, allowing a hacker to cause a service failure

The vulnerability of the MP4EIA608Convert function located in modules/demux/mp4/mp4.c in the VideoLAN Media Player media player is related to a numerical overflow that can lead to buffer overflows based on heap structures. Exploiting this vulnerability could allow an attacker to cause a service...

WordPress FV Flowplayer Video Player SQL Injection Vulnerability (CNVD-2019-27431)

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.FV Flowplayer Video Player is a video player plugin used in it. A SQL injection vulnerability exists in WordPress FV...

CVE-2019-14801

The FV Flowplayer Video Player plugin before 7.3.15.727 for WordPress allows email subscription SQL injection...

CVE-2019-14801

The CVE concerns the FV Flowplayer Video Player WordPress plugin prior to version 7.3.15.727, where an email subscription feature is vulnerable to SQL injection. Affected component: FV Flowplayer Video Player plugin for WordPress; root cause: lack of input validation in SQL statements used during...

CVE-2019-14799

The FV Flowplayer Video Player plugin for WordPress (versions prior to 7.3.14.727) exposes an XSS vulnerability via the unauthenticated AJAX endpoint wp-admin/admin-ajax.php, fv_wp_flowplayer_email_signup. An attacker can submit crafted data to the email parameter (e.g., via list=1 and email fiel...

DEBIAN-CVE-2019-13962

lavcCopyPicture in modules/codec/avcodec/video.c in VideoLAN VLC media player through 3.0.7 has a heap-based buffer over-read because it does not properly validate the width and height...

CVE-2019-13573

A SQL injection vulnerability exists in the FolioVision FV Flowplayer Video Player plugin before 7.3.19.727 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2019-13573

A SQL injection vulnerability exists in the FolioVision FV Flowplayer Video Player plugin before 7.3.19.727 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...