gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with uncompressed video

A heap-buffer overflow flaw was found in the MXF file demuxer in the GStreamer Plugins Bad when handling malformed files with an uncompressed video. This issue requires user interaction with the library, and could allow a malicious user to cause an integer overflow before allocating the buffer,...

Arris VAP2500 安全漏洞

The Arris VAP2500 is a wireless video access point device from Arris USA. A security vulnerability exists in the Arris VAP2500 version 08.50, which stems from an action on the parameter cmbheader/txtcommand in the file /toolscommand.php that can result in command injection...

The vulnerability of the Video Station photo album creation application, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary code.

The vulnerability of the Video Station photo album creation application is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Video Station photo album creation application lies in its failure to address the issue of eliminating special elements used in the operating system’s command set. This allows attackers to execute arbitrary commands.

The vulnerability of the Video Station photo album creation application relates to the failure to take measures to neutralize special elements used in the operating system. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

Moderate: gstreamer1-plugins-bad-free security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer. Security Fixes: gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with...

DEBIAN-CVE-2023-52825

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix a race condition of vram buffer unref in svm code prange-svmbo unref can happen in both mmu callback and a callback after migrate to system ram. Both are async call in different tasks. Sync svmbo unref operation t...

DEBIAN-CVE-2021-47338

In the Linux kernel, the following vulnerability has been resolved: fbmem: Do not delete the mode that is still in use The execution of fbdeletevideomode is not based on the result of the previous fbconmodedeleted. As a result, the mode is directly deleted, regardless of whether it is still in us...

UBUNTU-CVE-2021-47338

In the Linux kernel, the following vulnerability has been resolved: fbmem: Do not delete the mode that is still in use The execution of fbdeletevideomode is not based on the result of the previous fbconmodedeleted. As a result, the mode is directly deleted, regardless of whether it is still in us...

CVE-2024-3268

The YouTube Video Gallery by YouTube Showcase – Video Gallery Plugin for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the emdformbuilderlitesubmitform function in all versions up to, and including, 3.3.6. This makes it...

CVE-2024-3268

CVE-2024-3268 : The WordPress plugin “YouTube Video Gallery by YouTube Showcase – Video Gallery” is vulnerable to unauthorized modification of data due to a missing capability check in emd_form_builder_lite_submit_form. The issue affects all versions up to 3.3.6, enabling unauthenticated attacker...

CVE-2024-3268 YouTube Video Gallery by YouTube Showcase – Video Gallery Plugin for WordPress <= 3.3.6 - Missing Authorization to Arbitrary Post/Page Creation

The YouTube Video Gallery by YouTube Showcase – Video Gallery Plugin for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the emdformbuilderlitesubmitform function in all versions up to, and including, 3.3.6. This makes it...

SUSE CVE-2023-52693

In the Linux kernel, the following vulnerability has been resolved: ACPI: video: check for error while searching for backlight device parent If acpigetparent called in acpivideodevregisterbacklight fails, for example, because acpiutacquiremutex fails inside acpigetparent, this can lead to incorre...

SUSE CVE-2024-35830

In the Linux kernel, the following vulnerability has been resolved: media: tc358743: register v4l2 async device only after successful setup Ensure the device has been setup correctly before registering the v4l2 async device, thus allowing userspace to access...

SUSE CVE-2024-35922

In the Linux kernel, the following vulnerability has been resolved: fbmon: prevent division by zero in fbvideomodefromvideomode The expression htotal vtotal can have a zero value on overflow. It is necessary to prevent division by zero like in fbvartovideomode. Found by Linux Verification Center...

SUSE CVE-2024-35942

In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx8mp-blk-ctrl: imx8mpblk: Add fdcc clock to hdmimix domain According to i.MX8MP RM and HDMI ADD, the fdcc clock is part of hdmi rx verification IP that should not enable for HDMI TX. But actually if the clock is...

WordPress Video Gallery & Management Plugin <= 3.3.6 is vulnerable to Broken Access Control

Software Video Gallery & Management Type Plugin Vulnerable versions = 3.3.6 Fixed in 3.4.0 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-3268 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 78d2197c53cc Credits Lucio Sá Required...

PT-2024-33723 · Transsion · Com.Transsion.Videocallenhancer

Name of the Vulnerable Software and Affected Versions: com.transsion.videocallenhancer version 1.1.9.973 Description: The mobile application interface has improper permission control, which can lead to the risk of private file leakage. This issue can result in unauthorized access to private files...

TECNO com.transsion.videocallenhancer 安全漏洞

TECNO com.transsion.videocallenhancer is a cell phone component from TECNO China. A security vulnerability exists in TECNO com.transsion.videocallenhancer version 1.1.9.973, which originates from improper control of interface privileges, resulting in a risk of private file disclosure...

PT-2024-24765 · WordPress · The Youtube Video Gallery By Youtube Showcase

Name of the Vulnerable Software and Affected Versions: The YouTube Video Gallery by YouTube Showcase – Video Gallery Plugin for WordPress versions up to, and including, 3.3.6 Description: The issue allows unauthorized modification of data due to a missing capability check on the emd form builder...

DEBIAN-CVE-2024-35919

In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: adding lock to protect encoder context list Add a lock for the ctxlist, to avoid accessing a NULL pointer within the 'vpuencipihandler' function when the ctxlist has been deleted due to an unexpected...