AlmaLinux 9 : firefox (ALSA-2025:14416)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:14416 advisory. firefox: thunderbird: Denial-of-service due to out-of-memory in the Graphics: WebRender component CVE-2025-9182 thunderbird: firefox: Sandbox escape due ...

SUSE CVE-2024-47167

Gradio is an open-source Python package designed for quick prototyping. This vulnerability relates to Server-Side Request Forgery SSRF in the /queue/join endpoint. Gradio's asyncsaveurltocache function allows attackers to force the Gradio server to send HTTP requests to user-controlled URLs. This...

Gradio vulnerable to SSRF in the path parameter of /queue/join

Impact What kind of vulnerability is it? Who is impacted? This vulnerability relates to Server-Side Request Forgery SSRF in the /queue/join endpoint. Gradio’s asyncsaveurltocache function allows attackers to force the Gradio server to send HTTP requests to user-controlled URLs. This could enable...

CVE-2024-47167

Gradio is an open-source Python package designed for quick prototyping. This vulnerability relates to Server-Side Request Forgery SSRF in the /queue/join endpoint. Gradio’s asyncsaveurltocache function allows attackers to force the Gradio server to send HTTP requests to user-controlled URLs. This...

CVE-2024-47167: Server-Side Request Forgery (SSRF)

Gradio is an open-source Python package designed for quick prototyping. This vulnerability relates to Server-Side Request Forgery SSRF in the /queue/join endpoint. Gradio’s asyncsaveurltocache function allows attackers to force the Gradio server to send HTTP requests to user-controlled URLs. This...

PT-2024-32450

Name of the Vulnerable Software and Affected Versions Gradio versions prior to 5 Description This issue relates to Server-Side Request Forgery SSRF in the "/queue/join" endpoint. Gradio’s async save url to cache function allows attackers to force the Gradio server to send HTTP requests to...

CVE-2023-50470

A cross-site scripting XSS vulnerability in the component admin Video.php of SeaCMS v12.8 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

PT-2023-31572

Name of the Vulnerable Software and Affected Versions SeaCMS version 12.8 Description A cross-site scripting XSS vulnerability in the component admin Video.php of SeaCMS allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Recommendations For SeaCMS version 12.8,...

CVE-2023-50470

A cross-site scripting XSS vulnerability in the component admin Video.php of SeaCMS v12.8 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

PT-2023-13804 · Qualcomm · Snapdragon +141

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption in a video component due to a double free error that occurs when playing a 3gp clip containing invalid metadata...

SUSE CVE-2023-0930

Heap buffer overflow in Video in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

PT-2023-1515

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 110.0.5481.177 Microsoft Edge affected versions not specified Description The issue is related to a use after free vulnerability in the Video component of Google Chrome and Microsoft Edge browsers. This...

PT-2023-1531

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 110.0.5481.177 Microsoft Edge affected versions not specified Description A heap buffer overflow issue in the Video component of Google Chrome and Microsoft Edge allows a remote attacker to potentially exploit...

PT-2023-33542 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue is related to a use-after-free error in the tegra-video component of the Linux Kernel. This error was introduced in version v5.10 and is fixed in version v6.0.18. The actual impact...

Google Android security vulnerabilities

Google Android is a Linux-based open source operating system from Google Inc. There is a security vulnerability in Unisoc components Video in Google Android 11, there is no information about the vulnerability at the moment, please stay tuned to CNNVD or the manufacturer's announcement...

Simple DirectMedia Layer Integer Overflow

The vulnerability of the video component in the Simple DirectMediaLayer multimedia library’s SDLblitcopy.c file is related to a potential integer overflow. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and even cause service...

PT-2021-7408 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon versions affected versions not specified Description: The issue is related to a buffer over-read when processing avi files, which can lead to information disclosure. This is due to a lack of buffer length checks and...

PT-2021-9194

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon affected versions not specified Description A race condition occurs when calling user space ioctl from two different threads, which can result in a use after free issue in the video component of Snapdragon products, includi...

PT-2020-6527

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 85.0.4183.102 Description The issue is related to a use after free in the video component, which could allow a remote attacker who has compromised the renderer process to potentially perform a sandbox escape. Th...

Qualcomm SM8150 Video Buffer Overflow Vulnerability

The Qualcomm SM8150 is a central processing unit CPU product from Qualcomm Incorporated, U.S.A. Video is one of its video components. A buffer overflow vulnerability exists in Video in the Qualcomm SM8150. A remote attacker could exploit this vulnerability to execute arbitrary code on the system ...