Lucene search
K

783 matches found

Cvelist
Cvelist
added 2015/08/17 3:0 p.m.24 views

CVE-2014-9743

Cross-site scripting XSS vulnerability in the httpdHtmlError function in network/httpd.c in the web interface in VideoLAN VLC Media Player before 2.2.0 allows remote attackers to inject arbitrary web script or HTML via the path info...

5.3AI score0.01906EPSS
Exploits1References4
CVE
CVE
added 2015/08/17 3:0 p.m.56 views

CVE-2014-9743

CVE-2014-9743 is a cross-site scripting (XSS) vulnerability in VideoLAN VLC Media Player prior to 2.2.0. The flaw is in the web interface’s httpd_HtmlError function (network/httpd.c) and allows remote attackers to inject arbitrary web script or HTML via the path info. Impact is remote code execut...

4.3CVSS5.7AI score0.01906EPSS
Exploits1References4Affected Software1
Debian CVE
Debian CVE
added 2015/08/17 3:0 p.m.24 views

CVE-2014-9743

Cross-site scripting XSS vulnerability in the httpdHtmlError function in network/httpd.c in the web interface in VideoLAN VLC Media Player before 2.2.0 allows remote attackers to inject arbitrary web script or HTML via the path info...

4.3CVSS4.3AI score0.01906EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2015/07/07 12:0 a.m.17 views

VideoLAN VLC Media Player Installed (Mac OS X)

Binary data macosxvlcinstalled.nbin...

7.3AI score
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2015/07/07 12:0 a.m.17 views

VideoLAN VLC for OS X Web Plugin Installed (Mac OS X)

Binary data macosxvlcplugininstalled.nbin...

7.3AI score
Exploits0References2
CNVD
CNVD
added 2015/02/26 12:0 a.m.1 views

VideoLAN libbluray Directory Traversal Vulnerability

VideoLAN VLC media player is the multimedia player of VideoLAN program. A directory traversal vulnerability exists in VideoLAN libbluray due to the program failing to adequately filter user-supplied input. A remote attacker could use a directory traversal sequence of specially crafted requests '...

7.1AI score
Exploits0References1
OpenVAS
OpenVAS
added 2015/01/27 12:0 a.m.36 views

VLC Media Player Multiple Vulnerabilities -02 (Jan 2015) - Linux

VLC Media player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:videolan:vlcmediaplayer";...

6.8CVSS9.5AI score0.0663EPSS
Exploits4References4
Exploit DB
Exploit DB
added 2015/01/26 12:0 a.m.52 views

VideoLAN VLC Media Player 2.1.5 - DEP Access Violation

Title : VLC Player 2.1.5 DEP Access Violation Vulnerability Discoverer: Veysel HATAS @muh4f1z Web page : www.binarysniper.net Vendor : VideoLAN VLC Project Test: Windows XP SP3 Status: Fixed Severity : High CVE ID : CVE-2014-9597 NIST: ​https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-95...

6.8CVSS7.5AI score0.0663EPSS
Exploits2
NVD
NVD
added 2015/01/21 3:17 p.m.25 views

CVE-2014-9597

The picturepoolDelete function in misc/picturepool.c in VideoLAN VLC media player 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service DEP violation and application crash via a crafted FLV file...

6.8CVSS7.8AI score0.0663EPSS
Exploits2References5
Prion
Prion
added 2015/01/21 3:17 p.m.22 views

Code injection

The picturepoolDelete function in misc/picturepool.c in VideoLAN VLC media player 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service DEP violation and application crash via a crafted FLV file...

6.8CVSS8.1AI score0.0663EPSS
Exploits2References5Affected Software1
UbuntuCve
UbuntuCve
added 2015/01/21 3:17 p.m.30 views

CVE-2014-9597

The picturepoolDelete function in misc/picturepool.c in VideoLAN VLC media player 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service DEP violation and application crash via a crafted FLV file...

6.8CVSS7.2AI score0.0663EPSS
Exploits2References3
OSV
OSV
added 2015/01/21 3:17 p.m.2 views

UBUNTU-CVE-2014-9597

The picturepoolDelete function in misc/picturepool.c in VideoLAN VLC media player 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service DEP violation and application crash via a crafted FLV file...

6.8CVSS7.2AI score0.0663EPSS
Exploits2References4
Cvelist
Cvelist
added 2015/01/21 11:0 a.m.35 views

CVE-2014-9597

The picturepoolDelete function in misc/picturepool.c in VideoLAN VLC media player 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service DEP violation and application crash via a crafted FLV file...

7.8AI score0.0663EPSS
Exploits2References5
CVE
CVE
added 2015/01/21 11:0 a.m.77 views

CVE-2014-9597

The CVE-2014-9597 entry refers to VideoLAN VLC media player 2.1.5, where the flaw is in the picture_pool_Delete function (misc/picture_pool.c). A crafted FLV file can lead to remote code execution or a denial of service (DEP violation and crash) on affected versions. The connected Nessus/OpenVAS ...

6.8CVSS7.7AI score0.0663EPSS
Exploits2References5Affected Software1
ThreatPost
ThreatPost
added 2015/01/19 9:6 a.m.12 views

Memory Corruption Bugs Found in VLC Media Player

There are two memory corruption vulnerabilities in some versions of the VLC open-source media player that can allow an attacker to run arbitrary code on vulnerable machines. Neither one of the vulnerabilities has been fixed by VideoLAN, the organization that maintains VLC. Security researcher...

2.3AI score
Exploits0References2
OpenVAS
OpenVAS
added 2015/01/05 12:0 a.m.20 views

VLC Media Player 'real_get_rdt_chunk' BOF Vulnerability-02 (Jan 2015) - Linux

VLC media player is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.5CVSS6.7AI score0.04397EPSS
Exploits1References3
OpenVAS
OpenVAS
added 2015/01/05 12:0 a.m.16 views

VLC Media Player Multiple Buffer Overflow Vulnerabilities-01 (Jan 2015) - Linux

VLC media player is prone to multiple buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.5CVSS6.9AI score0.04335EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2015/01/05 12:0 a.m.20 views

VLC Media Player Multiple Buffer Overflow Vulnerabilities-01 (Jan 2015) - Windows

VLC media player is prone to multiple buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.5CVSS6.9AI score0.04335EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2015/01/05 12:0 a.m.22 views

VLC Media Player Multiple Buffer Overflow Vulnerabilities-01 (Jan 2015) - Mac OS X

VLC media player is prone to multiple buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.5CVSS6.9AI score0.04335EPSS
Exploits0References2
CNVD
CNVD
added 2015/01/04 12:0 a.m.5 views

VideoLAN VLC media player denial of service vulnerability (CNVD-2015-00046)

VideoLAN VLC media player is the multimedia player of VideoLAN program. A denial of service vulnerability exists in versions of VideoLAN VLC media player prior to 1.0.6, which allows remote attackers to launch a denial of service attack via an empty location of an element in an XML shareable...

5CVSS6.8AI score0.02448EPSS
Exploits0References1
Rows per page
Query Builder