Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Update Mozilla Thunderbird to version 140.5 bsc1253188 CVE-2025-13012: Race condition in the Graphics component. CVE-2025-13016: Incorrect boundary conditions in the JavaScript: WebAssembly component. CVE-2025-13017: Same-origin polic...

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 140.5.0 ESR bsc1253188 CVE-2025-13012: Race condition in the Graphics component. CVE-2025-13016: Incorrect boundary conditions in the JavaScript: WebAssembly component. CVE-2025-13017: Same-origi...

Mozilla Thunderbird < 140.5

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 140.5. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-91 advisory. - Use-after-free in the WebRTC: Audio/Video component. This vulnerability affects Firefox 145, Firefox ESR...

ROS-20251113-01

A vulnerability in the Omnibox component of the Google Chrome and Microsoft Edge browsers is related to writing outside the boundaries of the buffer. Exploitation of the vulnerability could allow an attacker acting remotely to escalate their privileges A vulnerability in the Safe Browsing compone...

EUVD-2019-11894

Malware in sbrugna...

EUVD-2019-15021

Malware in sbrugna...

EUVD-2020-9060

Malware in sbrugna...

EUVD-2023-35238

Malicious code in bioql PyPI...

Chromium: CVE-2025-11206 Heap buffer overflow in Video

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2025-27033

CVE-2025-27033 is described as an information-disclosure issue related to video processing on Qualcomm chipsets under rogue firmware. Connected sources (Pixel Watch bulletin) classify it under Qualcomm components with a moderate severity and identify Video as the affected subcomponent. The vulner...

Linux Distros Unpatched Vulnerability : CVE-2021-21838

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A...

Linux Distros Unpatched Vulnerability : CVE-2020-13696

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in LinuxTV xawtv before 3.107. The function devopen in v4l-conf.c does not perform sufficient checks to prevent an unprivileged caller o...

Directory Traversal

Overview MoneyPrinterTurbo is a Simply provide a topic or keyword for a video, and it will automatically generate the video copy, video materials, video subtitles, and video background music before synthesizing a high-definition short video.. Affected versions of this package are vulnerable to...

CVE-2023-30899

A vulnerability has been identified in Siveillance Video 2020 R2 All versions V20.2 HotfixRev14, Siveillance Video 2020 R3 All versions V20.3 HotfixRev12, Siveillance Video 2021 R1 All versions V21.1 HotfixRev12, Siveillance Video 2021 R2 All versions V21.2 HotfixRev8, Siveillance Video 2022 R1 A...

CVE-2025-31233

The issue was addressed with improved input sanitization. This issue is fixed in watchOS 11.5, macOS Sonoma 14.7.6, tvOS 18.5, iPadOS 17.7.7, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, macOS Ventura 13.7.6. Processing a maliciously crafted video file may lead to unexpected app...

CVE-2023-52693

In the Linux kernel, the following vulnerability has been resolved: ACPI: video: check for error while searching for backlight device parent If acpigetparent called in acpivideodevregisterbacklight fails, for example, because acpiutacquiremutex fails inside acpigetparent, this can lead to incorre...

CVE-2023-52693

In the Linux kernel, the following vulnerability has been resolved: ACPI: video: check for error while searching for backlight device parent If acpigetparent called in acpivideodevregisterbacklight fails, for example, because acpiutacquiremutex fails inside acpigetparent, this can lead to incorre...

PT-2024-13100 · Video · Video

Name of the Vulnerable Software and Affected Versions: Video affected versions not specified Description: The issue is related to information disclosure while parsing the dts header atom in Video. There is no information about the estimated number of potentially affected devices worldwide or...

Voovi SQL Injection Vulnerability

Voovi is an open source social networking script from Sourceforge. Voovi version 1.0 suffers from a SQL injection vulnerability, which stems from a SQL injection vulnerability in videos.php...

Google Chrome 缓冲区错误漏洞

Google Chrome is a web browser from Google, Inc. in the United States. A security vulnerability exists in versions prior to Google Chrome 111.0.5563.110 that stems from an out-of-bounds read in the Chrome GPU Video, allowing remote attackers to potentially exploit heap corruption via a crafted HT...