DEBIAN-CVE-2016-10171

The unreorderchannels function in cli/wvunpack.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service out-of-bounds read via a crafted WV file...

ALPINE-CVE-2016-10169

The readcode function in readwords.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service out-of-bounds read via a crafted WV file...

UBUNTU-CVE-2017-6837

WAVE.cpp in Audio File Library aka audiofile 0.3.6 allows remote attackers to cause a denial of service crash via vectors related to a large number of coefficients...

UBUNTU-CVE-2017-5839

The gstriffcreateaudiocaps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 does not properly limit recursion, which allows remote attackers to cause a denial of service stack overflow and crash via vectors involving nested WAVEFORMATEX...

Wave SrcStencilList. aspx parameters infoflowId SQL blind injection vulnerability

No description provided by source...

The vulnerability of the libaudiofile library, which allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the msadpcm.c file in the libaudiofile library arises due to an overflow in the buffer in the dynamic memory. Exploiting this vulnerability can allow a local attacker to cause a service failure application termination or execute arbitrary code using a specially crafted WAV fi...

Weblogic Deserialization Command Execution Vulnerability in the Wave Online Office Platform

Wave Online Office Hall takes the online office hall as a carrier, and builds an e-government application platform integrating online disclosure of government information, online approval of investment projects, online handling of social affairs, online interaction of public decision-making and...

SQL Injection Vulnerability in the Type Parameter of NoticeList.aspx Page of Wave e-Procurement Platform

Wave e-procurement platform is a proprietary e-commerce platform for enterprises built using cloud computing and e-commerce technology. A SQL injection vulnerability exists in the Type parameter of the NoticeList.aspx page of the Wave e-Procurement Platform, which can be exploited by an attacker ...

SQL Injection Vulnerability in Shandong Wave Administrative Approval Service System

The Administrative Service System is a comprehensive administrative service system that integrates information and consultation, approval and fee collection, management and coordination, and complaint and supervision. SQL injection vulnerability exists in Shandong Wave Administrative Approval...

SQL Injection Vulnerability in Wave OA Intelligent Office Platform

Longchamp Yunhai OA Intelligent Office Platform is aimed at the private and hybrid cloud market, providing open and secure enterprise-class cloud data center operation and maintenance management capabilities. SQL injection vulnerability exists in the Wave OA Office system, allowing attackers to...

Arbitrary File Read Vulnerability in Latest Version of Zoomla!

Zoomla! Wave CMS is a CMS website core and management system R & D vendors, integrated content management, shopping malls, OA, SNS, project management, collection, e-mail subscription to hundreds of features , based on the . net platform and support cross-platform and mobile. Zoomla! CMS latest...

Arbitrary File Deletion Vulnerability in Zoomla!

Zoomla! Wave CMS is a CMS website core and management system R & D vendors, integrated content management, shopping malls, OA, SNS, project management, collection, e-mail subscription to hundreds of features , based on the . net platform and support cross-platform and mobile. Zoomla! CMS has an...

Stampado Ransomware Sells on Dark Web for $39

Dirt cheap ransomware selling for as little as $39 on the dark web has security experts concerned the low price coupled with its potency could trigger a wave of new infections. The ransomware is called Stampado and besides its hallmark low price, the ransomware is also unique because it threatens...

The vulnerability of the Firefox browser allows a malicious individual to execute arbitrary code, gain access to confidential information, or cause a service failure.

The Mozilla Firefox browser contains a vulnerability related to errors in the implementation of the mozilla::WaveReader::DecodeAudioData function. Exploiting this vulnerability allows malicious actors to gain access to confidential information from the dynamic memory of the process, trigger servi...

The vulnerability of the Thunderbird email client allows attackers to execute arbitrary code, gain access to confidential information, or cause service failures.

Mozilla Thunderbird’s email client contains a vulnerability related to errors in the implementation of the Mozilla::WaveReader::DecodeAudioData function. Exploiting this vulnerability allows malicious actors to gain access to confidential information from the dynamic memory of the process, trigge...

The vulnerability of the Firefox ESR browser allows a malicious individual to execute arbitrary code, gain access to confidential information, or cause a service failure.

Mozilla Firefox ESR browser contains a vulnerability related to errors in the implementation of the Mozilla::WaveReader::DecodeAudioData function. Exploiting this vulnerability allows malicious actors to gain access to confidential information from the dynamic memory of the process, trigger servi...

This Tiny Computer has no Battery, Powered Wirelessly from Radio Waves

No matter how smart and fast your devices would be, the biggest issue is always with the battery technology. Whenever you go to buy any electronic gadget — smartphone, laptop, or any wearable — the most important specification isn’t its processor speed or its camera quality but its Battery Backup...

Grandstream Wave Update Redirection Vulnerability

Grandstream Wave is a suite of free VoIP applications. Grandstream Wave uses an insecure connection to download update information, which can be exploited by an attacker to perform a redirection attack and trick users into downloading a malicious update package...

Grandstream Wave Redirection Vulnerability

Grandstream Wave is a suite of free VoIP applications. Grandstream Wave uses an insecure connection to obtain a configuration file, which allows an attacker to impersonate a configuration server with invalid, mismatched, or expired certificates, redirect phone calls, or cause dialed calls to...

Grandstream Wave Redirection Vulnerability

Grandstream Wave is a free VoIP application from Grandstream. The application supports multiple accounts, simultaneous use of multiple lines, and more. A redirection vulnerability exists in Grandstream Wave version 1.0.1.26, which originates when the program uses an unsecured connection to downlo...