21380 matches found
WordPress plugin Colibri Page Builder security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
The vulnerability of the MMS processor in the VideoLAN VLC media player software allows a hacker to influence the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the MMS processor in the VideoLAN VLC media player lies in the possibility of buffer overflow attacks. Exploiting this vulnerability allows a malicious actor to influence the confidentiality, integrity, and accessibility of the protected information by downloading specially...
WordPress Media Slider – Photo Sleder, Video Slider, Link Slider, Carousal Slideshow Plugin <= 1.3.9 is vulnerable to Broken Access Control
Software Media Slider – Photo Sleder, Video Slider, Link Slider, Carousal Slideshow Type Plugin Vulnerable versions = 1.3.9 Fixed in 1.4.0 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-35717 Patch priority Low CVSS severity Low 4.3 Developer Claim...
Exploit for Path Traversal in Oracle Weblogic_Server
Badges !MIT Licensehttps://img.shields.io/badge/Licens...
kernel: media: dvbdev: Fix memory leak in dvb_media_device_free()
A flaw was found in the Linux kernel. A missing memory release in the dvbmediadevicefree function in the drivers/media/dvb-core/dvbdev.c file can result in a memory leak...
SUSE CVE-2024-4253
A command injection vulnerability exists in the gradio-app/gradio repository, specifically within the 'test-functional.yml' workflow. The vulnerability arises due to improper neutralization of special elements used in a command, allowing for unauthorized modification of the base repository or...
[SECURITY] Fedora 40 Update: qt5-qtmultimedia-5.15.14-1.fc40
The Qt Multimedia module provides a rich feature set that enables you to easily take advantage of a platforms multimedia capabilites and hardware. This ranges from the playback and recording of audio and video content to the use of available devices like cameras and radios...
libaom security breach
libaom is a software application. A reference codec for the AOMedia Video 1 format. A security vulnerability exists in libaom that stems from an integer overflow in the imgallochelper function of the libaom library...
GStreamer AV1 Video Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the parsing of tile lis...
SUSE CVE-2020-14331
A flaw was found in the Linux kernel's implementation of the invert video code on VGA consoles when a local attacker attempts to resize the console, calling an ioctl VTRESIZE, which causes an out-of-bounds write to occur. This flaw allows a local user with access to the VGA console to crash the...
PYSEC-2024-321
A command injection vulnerability exists in the gradio-app/gradio repository, specifically within the 'test-functional.yml' workflow. The vulnerability arises due to improper neutralization of special elements used in a command, allowing for unauthorized modification of the base repository or...
Uniview NVR301-04S2-P4 (Update A)
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 5.1 ATTENTION : Exploitable remotely/low attack complexity/public exploits available Vendor : Uniview Equipment : NVR301-04S2-P4 Vulnerability : Cross-site Scripting 2. RISK EVALUATION An attacker could send a user a URL that if clicked on could execute...
CVE-2024-35631
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Foliovision FV Flowplayer Video Player allows Reflected XSS.This issue affects FV Flowplayer Video Player: from n/a through 7.5.45.7212...
CVE-2024-35631 WordPress FV Flowplayer Video Player plugin <= 7.5.45.7212 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Foliovision FV Flowplayer Video Player allows Reflected XSS.This issue affects FV Flowplayer Video Player: from n/a through 7.5.45.7212...
CVE-2023-43555 Buffer Over-read in Video
Information disclosure in Video while parsing mp2 clip with invalid section length...
CVE-2023-43555 Buffer Over-read in Video
Information disclosure in Video while parsing mp2 clip with invalid section length...
Exploit for CVE-2024-4956
Badges !MIT Licensehttps://img.shields.io/badge/Licens...
PT-2024-32144
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to overmapping the identity VRAM mapping in the Linux kernel, which triggers hardware bugs on certain platforms. To resolve this, 2M pages are used for the last...
Friday Squid Blogging: Baby Colossal Squid
This video might be a juvenile colossal squid. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blog posting guidelines here...