21314 matches found
The vulnerability of Zoom’s video conferencing software, related to buffer overflows, allows attackers to trigger a service failure.
The vulnerability of Zoom’s video conferencing software is related to buffer overflow attacks. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
CVE-2025-24987
Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack...
CVE-2025-24055
Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to disclose information with a physical attack...
CVE-2025-24988
Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack...
Out-of-bounds read in QuickTimeVideo::NikonTagsDecoder in Exiv2
...
Exiv2 has an out-of-bounds read in AsfVideo::streamProperties
...
CVE-2025-0955
The VidoRev Extensions plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'vidorevimportsinglevideo' AJAX action in all versions up to, and including, 2.9.9.9.9.9.5. This makes it possible for unauthenticated attackers to import arbitrary youtube...
CVE-2025-0955 VidoRev Extensions <= 2.9.9.9.9.9.5 - Missing Authorization to Unauthenticated Youtube Video Import
The VidoRev Extensions plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'vidorevimportsinglevideo' AJAX action in all versions up to, and including, 2.9.9.9.9.9.5. This makes it possible for unauthenticated attackers to import arbitrary youtube...
CVE-2025-0955 VidoRev Extensions <= 2.9.9.9.9.9.5 - Missing Authorization to Unauthenticated Youtube Video Import
The VidoRev Extensions plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'vidorevimportsinglevideo' AJAX action in all versions up to, and including, 2.9.9.9.9.9.5. This makes it possible for unauthenticated attackers to import arbitrary youtube...
CVE-2025-0955
CVE-2025-0955 affects the VidoRev Extensions WordPress plugin. A missing capability check on AJAX action vidorev_import_single_video allows unauthenticated users to import arbitrary YouTube videos. Status: patched in Wordfence/patchstack records; remediation is to update to a version with the fix...
MAL-2025-2428 Malicious code in twilio-live-interactive-video (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb819962cfddb983c485e717fc3534c75a8456d54560370076ca75474df33cc6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in twilio-live-interactive-video (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb819962cfddb983c485e717fc3534c75a8456d54560370076ca75474df33cc6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
WordPress VidoRev Extensions plugin <= 2.9.9.9.9.9.5 - Missing Authorization to Unauthenticated Youtube Video Import vulnerability
Missing Authorization to Unauthenticated Youtube Video Import vulnerability discovered by Lucio Sá in WordPress Plugin VidoRev Extensions versions = 2.9.9.9.9.9.5...
The vulnerability of Zoom’s video conferencing software is related to the overflowing of buffers in dynamic memory, allowing attackers to exploit their privileges.
The vulnerability of Zoom’s video conferencing software is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...
The vulnerability of the Windows USB Video Class System Driver for operating systems allows a hacker to elevate their privileges to a system-level level.
The vulnerability of the Windows USB Video Class System Driver for Windows operating systems is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to elevate their privileges to a system-level level...
The vulnerability of Zoom’s software for conducting video conferences on the MacOS operating system, related to link handling errors, allows attackers to exploit their privileges.
The vulnerability of Zoom’s software for conducting video conferences on the MacOS operating system is related to errors in link handling. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...
The vulnerability of the Windows USB Video Class System Driver for operating systems allows a hacker to elevate their privileges to a system-level level.
The vulnerability of the Windows USB Video Class System Driver for Windows operating systems is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to elevate their privileges to a system-level level...
WordPress Video Share VOD plugin <= 2.7.9 - Reflected Cross-Site Scripting vulnerability
Reflected Cross-Site Scripting vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Video Share VOD versions = 2.7.9...
Vulnerabilities fixed in Microsoft Windows
Microsoft has fixed vulnerabilities in Windows. A malicious party can exploit the vulnerabilities to carry out attacks that can lead to the following categories of damage: - Denial-of-Service DoS - Circumvention of security measure - Execution of arbitrary code root/admin privileges - Execution o...