Lucene search
+L

326 matches found

BDU FSTEC
BDU FSTEC
added 2020/05/13 12:00 a.m.11 views

The vulnerability of the microDNS library in the VideoLAN VLC media player software allows a hacker to induce a service failure or execute arbitrary code.

The vulnerability of the microDNS library in the VideoLAN VLC media player lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code through a specially crafted request...

5CVSS8.1AI score0.02457EPSS
SaveExploits1References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/05/13 12:00 a.m.9 views

The vulnerability of the microDNS library in the VideoLAN VLC media player software allows a hacker to induce a service failure or execute arbitrary code.

The vulnerability of the microDNS library in the VideoLAN VLC media player lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code through a specially crafted request...

7.5CVSS8.4AI score0.03727EPSS
SaveExploits1References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/05/13 12:00 a.m.10 views

The vulnerability of the microDNS library in the VideoLAN VLC media player software allows a hacker to induce a service failure or execute arbitrary code.

The vulnerability of the microDNS library in the VideoLAN VLC media player lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code through a specially crafted request...

5.3CVSS8.1AI score0.03086EPSS
SaveExploits1References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/04/14 12:00 a.m.14 views

The vulnerability of the lavc_CopyPicture function in the VideoLAN VLC media player software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the lavcCopyPicture function module/codec/avcodec/video.c in the Media Player VideoLAN VLC application is related to a buffer overflow vulnerability in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...

10CVSS7.5AI score0.036EPSS
SaveExploits1References12Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/04/14 12:00 a.m.8 views

The vulnerability of the xiph_SplitHeaders function in the VideoLAN VLC media player software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the xiphSplitHeaders function in the VideoLAN VLC media player’s modules/demux/xiph.h file relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the...

9.3CVSS7.2AI score0.02333EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/04/14 12:00 a.m.9 views

The vulnerability of the SeekPercent function in the VideoLAN VLC media player’s demux/asf.c file allows a hacker to cause a service failure.

The vulnerability of the SeekPercent function in the VideoLAN VLC media player’s demux/asf.c file is related to pointer arithmetic errors. Exploiting this vulnerability could allow a malicious actor to cause service failure remotely...

7.1CVSS6.5AI score0.02353EPSS
SaveExploits0References7Affected Software4
CNVD
CNVD
added 2020/02/12 12:00 a.m.8 views

VideoLAN VLC Media Player Cross-Site Scripting Vulnerability (CNVD-2020-08120)

VideoLAN VLC media player is a free, open source cross-platform multimedia player also a multimedia framework organized by VideoLAN France. The product supports the playback of a variety of media files, CD-ROMs, etc., a variety of audio and video formats WMV, MP3, etc. and so on. A cross-site...

6.1CVSS6.4AI score0.01583EPSS
SaveExploits1References1
NVD
NVD
added 2020/01/31 10:15 p.m.21 views

CVE-2013-3565

Multiple cross-site scripting XSS vulnerabilities in the HTTP Interface in VideoLAN VLC Media Player before 2.0.7 allow remote attackers to inject arbitrary web script or HTML via the 1 command parameter to requests/vlmcmd.xml, 2 dir parameter to requests/browse.xml, or 3 URI in a request, which ...

6.1CVSS6.3AI score0.01583EPSS
SaveExploits1References4
OSV
OSV
added 2020/01/31 10:15 p.m.10 views

DEBIAN-CVE-2013-3565

Multiple cross-site scripting XSS vulnerabilities in the HTTP Interface in VideoLAN VLC Media Player before 2.0.7 allow remote attackers to inject arbitrary web script or HTML via the 1 command parameter to requests/vlmcmd.xml, 2 dir parameter to requests/browse.xml, or 3 URI in a request, which ...

6.1CVSS6.1AI score0.01583EPSS
SaveExploits1References1
OSV
OSV
added 2020/01/31 10:15 p.m.10 views

CVE-2013-3565

Multiple cross-site scripting XSS vulnerabilities in the HTTP Interface in VideoLAN VLC Media Player before 2.0.7 allow remote attackers to inject arbitrary web script or HTML via the 1 command parameter to requests/vlmcmd.xml, 2 dir parameter to requests/browse.xml, or 3 URI in a request, which ...

6.1CVSS6.2AI score
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2020/01/31 10:15 p.m.40 views

CVE-2013-3565

Multiple cross-site scripting XSS vulnerabilities in the HTTP Interface in VideoLAN VLC Media Player before 2.0.7 allow remote attackers to inject arbitrary web script or HTML via the 1 command parameter to requests/vlmcmd.xml, 2 dir parameter to requests/browse.xml, or 3 URI in a request, which ...

6.1CVSS6.4AI score0.01583EPSS
SaveExploits1References2
Prion
Prion
added 2020/01/31 10:15 p.m.17 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the HTTP Interface in VideoLAN VLC Media Player before 2.0.7 allow remote attackers to inject arbitrary web script or HTML via the 1 command parameter to requests/vlmcmd.xml, 2 dir parameter to requests/browse.xml, or 3 URI in a request, which ...

4.3CVSS6.2AI score0.01583EPSS
SaveExploits1References4Affected Software2
OSV
OSV
added 2020/01/24 10:15 p.m.9 views

DEBIAN-CVE-2014-9627

The MP4ReadBoxString function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before 2.1.6 performs an incorrect cast operation from a 64-bit integer to a 32-bit integer, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large bo...

7.8CVSS7AI score0.01124EPSS
SaveExploits0References1
OSV
OSV
added 2020/01/24 10:15 p.m.11 views

CVE-2014-9626

Integer underflow in the MP4ReadBoxString function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before 2.1.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a box size less than 7...

7.8CVSS8.1AI score
SaveExploits0References6
OSV
OSV
added 2020/01/24 10:15 p.m.11 views

DEBIAN-CVE-2014-9628

The MP4ReadBoxString function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before 2.1.6 allows remote attackers to trigger an unintended zero-size malloc and conduct buffer overflow attacks, and consequently execute arbitrary code, via a box size of 7...

7.8CVSS7.4AI score0.02162EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2020/01/24 10:15 p.m.30 views

CVE-2014-9625

The GetUpdateFile function in misc/update.c in the Updater in VideoLAN VLC media player before 2.1.6 performs an incorrect cast operation from a 64-bit integer to a 32-bit integer, which allows remote attackers to conduct buffer overflow attacks and execute arbitrary code via a crafted update...

7.8CVSS7.4AI score0.02385EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/11/25 12:00 a.m.9 views

The vulnerability of the ParseJSS component in the VideoLAN VLC media player software allows a hacker to gain unauthorized access to protected information.

The vulnerability of the ParseJSS component in the VideoLAN VLC media player software arises from reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created file...

5.5CVSS6.7AI score0.01513EPSS
SaveExploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/11/11 12:00 a.m.10 views

The vulnerability of the Open function in the modules/demux/wav.c file of the Media Player software VideoLAN VLC allows a hacker to execute arbitrary code.

The vulnerability of the Open function in the VideoLAN VLC media player’s modules/demux/wav.c file is related to numerical processing errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted .WAV file...

9.3CVSS6AI score0.05879EPSS
SaveExploits1References8Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/11/11 12:00 a.m.11 views

The vulnerability of the ASF_ReadObject_file_properties function (module/demux/asf/libasf.c) in the media player software VideoLAN VLC allows a hacker to induce a service failure.

The vulnerability of the ASFReadObjectfileproperties function module/demux/asf/libasf.c in the video player software VideoLAN VLC is related to errors in number processing. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through a specially created ASF...

4.3CVSS7.7AI score0.05213EPSS
SaveExploits4References8Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/11/11 12:00 a.m.16 views

The vulnerability of the MP4 demultiplexer in the VideoLAN VLC media player software allows a hacker to execute arbitrary code or trigger a service denial.

The vulnerability of the MP4 demultiplexer in the VideoLAN VLC media player software is related to errors in checking the length of string containers. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or trigger a service denial-of-service attack using a specially...

10CVSS7.1AI score0.02162EPSS
SaveExploits0References5Affected Software2
Rows per page
Query Builder