BIT-NGINX-INGRESS-CONTROLLER-2022-41743

NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngxhttphlsmodule that might allow a local attacker to corrupt NGINX worker memory, resulting in its crash or potential other impact using a specially crafted audio or video file. The issue affects only NGINX Plus when...

CVE-2023-45069 WordPress Video Gallery – YouTube Gallery Plugin <= 2.1.3 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Video Gallery by Total-Soft Video Gallery – Best WordPress YouTube Gallery Plugin allows SQL Injection.This issue affects Video Gallery – Best WordPress YouTube Gallery Plugin: from n/a through 2.1...

CVE-2023-45069

CVE-2023-45069 affects Video Gallery – Best WordPress YouTube Gallery Plugin. It is an SQL Injection vulnerability caused by improper neutralization of input elements in the plugin’s SQL command path. Affected versions are reported from n/a through 2.1.3 (per NVD/Red Hat entries). The CVE has a h...

CVE-2023-32837

In video, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08235273; Issue ID: ALPS08250357...

CVE-2023-32837

In video, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08235273; Issue ID: ALPS08250357...

CVE-2023-32832

In video, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08235273; Issue ID: ALPS08235273...

CVE-2023-32832

In video, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08235273; Issue ID: ALPS08235273...

CVE-2023-32818

In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08163896 & ALPS08013430; Issue ID: ALPS07867715...

Out-of-bounds

In video, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08235273; Issue ID: ALPS08250357...

CVE-2023-32837

In video, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08235273; Issue ID: ALPS08250357...

CVE-2023-32837

CVE-2023-32837 is a MediaTek JPEG decoding accelerator vulnerability in the mtk_jpeg driver exposed to unprivileged userland on devices like Xiaomi 11T and Asus ROG 6D. The flaw is an out-of-bounds read/write in an array of structs, caused by a race between the JPEG_DEC_IOCTL_HYBRID_START path (w...

CVE-2023-32832

In video, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08235273; Issue ID: ALPS08235273...

CVE-2023-32832

CVE-2023-32832 describes a local race condition in the Mediatek mtk_jpeg (MediaTek JPEG decoding) driver used on MTK-based Android devices (e.g., Xiaomi 11T and Asus ROG 6D). The vulnerability arises during memory/ DMA buffer handling in the JPEG hybrid decoding path, enabling a race between jpeg...

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips due to a lack of boundary checking in the video module, which may result in out-of-bounds writes...

PT-2023-24066 · Mediatek +1 · Mt6883 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a possible out of bounds write due to a missing bounds check in video processing. This could lead to local escalation of privile...

PT-2023-29388 · WordPress · The Video Gallery – Best Wordpress Youtube Gallery Plugin

Name of the Vulnerable Software and Affected Versions: Video Gallery – Best WordPress YouTube Gallery Plugin versions prior to 2.1.4 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL...

WordPress Plugin Video Gallery SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Video Gallery - Best...

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips that stems from a competitive condition in the video module, which may result in memory corruption...

PT-2023-24062 · Video · Video

Name of the Vulnerable Software and Affected Versions: In video affected versions not specified Description: The issue is related to a possible memory corruption due to a race condition in video. This could lead to local escalation of privilege with no additional execution privileges needed. User...

Fedora: Security Advisory (FEDORA-2023-ea65146fd4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...