14702 matches found
PT-2024-14050 · Nagios Xi · Nagios Xi
Name of the Vulnerable Software and Affected Versions: Nagios XI versions up to and including 2024R1 Description: A stored cross-site scripting XSS vulnerability in the NOC component allows low-privileged users to execute malicious HTML or JavaScript code via the audio file upload functionality...
CVE-2023-51072
Nagios XI vulnerability CVE-2023-51072: a stored XSS in the NOC component affecting Nagios XI versions up to 2024R1 via the audio file upload in Operation Center. The issue allows low-privileged, authenticated users to inject arbitrary HTML/JavaScript, potentially executing code in other users’ b...
CVE-2023-51072
A stored cross-site scripting XSS vulnerability in the NOC component of Nagios XI version up to and including 2024R1 allows low-privileged users to execute malicious HTML or JavaScript code via the audio file upload functionality from the Operation Center section. This allows any authenticated us...
FreeBSD : electron{26,27,28} -- Use after free in Web Audio (13a8c4bf-cb2b-48ec-b49c-a3875c72b3e8)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 13a8c4bf-cb2b-48ec-b49c-a3875c72b3e8 advisory. - Use after free in Web Audio in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to...
The vulnerability of the Web Audio component in Microsoft Edge and Google Chrome allows a hacker to execute arbitrary code.
The vulnerability of the Web Audio component in Microsoft Edge and Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
electron{26,27,28} -- Use after free in Web Audio
Electron developers reports: This update fixes the following vulnerability: Security: backported fix for CVE-2024-0807...
Fedora: Security Advisory for vorbis-tools (FEDORA-2024-5f8da7c1f1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 38 Update: vorbis-tools-1.4.2-9.fc38
Ogg Vorbis is a fully open, non-proprietary, patent- and royalty-free, general-purpose compressed audio format for audio and music at fixed and variable bitrates from 16 to 128 kbps/channel. The vorbis package contains an encoder, a decoder, a playback tool, and a comment editor...
[SECURITY] Fedora 39 Update: vorbis-tools-1.4.2-10.fc39
Ogg Vorbis is a fully open, non-proprietary, patent- and royalty-free, general-purpose compressed audio format for audio and music at fixed and variable bitrates from 16 to 128 kbps/channel. The vorbis package contains an encoder, a decoder, a playback tool, and a comment editor...
Fedora: Security Advisory (FEDORA-2024-faff3dd9d6)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Google Chrome Web Audio Module Memory Misreference Vulnerability
Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in the Google Chrome Web Audio module, which stems from a confusion in the instructions responsible for freeing memory in the Web Audio module. An attacker can exploit this vulnerability to...
CVE-2024-0886
A vulnerability classified as problematic was found in Poikosoft EZ CD Audio Converter 8.0.7. Affected by this vulnerability is an unknown functionality of the component Activation Handler. The manipulation of the argument Key leads to denial of service. Local access is required to approach this...
Design/Logic Flaw
A vulnerability classified as problematic was found in Poikosoft EZ CD Audio Converter 8.0.7. Affected by this vulnerability is an unknown functionality of the component Activation Handler. The manipulation of the argument Key leads to denial of service. Local access is required to approach this...
CVE-2024-0886 Poikosoft EZ CD Audio Converter Activation denial of service
A vulnerability classified as problematic was found in Poikosoft EZ CD Audio Converter 8.0.7. Affected by this vulnerability is an unknown functionality of the component Activation Handler. The manipulation of the argument Key leads to denial of service. Local access is required to approach this...
CVE-2024-0886
Poikosoft EZ CD Audio Converter 8.0.7 contains a vulnerability in the Activation Handler where manipulating the Key argument can cause a denial of service. Local access is required. Multiple sources confirm the vulnerability and public disclosure of the exploit (VDB-252037). Incident impact is fo...
SUSE CVE-2022-4964
Ubuntu's pipewire-pulse in snap grants microphone access even when the snap interface for audio-record is not set...
SUSE CVE-2024-0807
Use after free in Web Audio in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
PT-2024-15891 · Poikosoft · Poikosoft Ez Cd Audio Converter
Name of the Vulnerable Software and Affected Versions: Poikosoft EZ CD Audio Converter version 8.0.7 Description: A problematic vulnerability was found in the Activation Handler component. The manipulation of the Key argument leads to denial of service. Local access is required to approach this...
