Lucene search
+L

14788 matches found

BDU FSTEC
BDU FSTEC
added 2022/04/14 12:00 a.m.10 views

The vulnerability of the guess_file_type() function in the libsndfile library for reading and writing audio files allows a attacker to execute arbitrary code on the target system.

The vulnerability of the guessfiletype function in the libsndfile library for reading and writing audio files is related to stack buffer overflows. Exploiting this vulnerability could allow a remote attacker to trigger a stack buffer overflow and execute arbitrary code on the target system...

10CVSS6.4AI score
SaveExploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/14 12:00 a.m.12 views

The vulnerability of the flac_buffer_copy() function in the library for reading and writing audio files from libsndfile allows a attacker to execute arbitrary code on the target system.

The vulnerability of the flacbuffercopy function in the library for reading and writing audio files in libsndfile is related to buffer overflows in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code on the target system...

10CVSS6.4AI score
SaveExploits0References4Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/14 12:00 a.m.11 views

The vulnerability of the psf_log_printf() function in the libsndfile library, which is used for reading and writing audio files, allows a hacker to execute arbitrary code on the target system.

The vulnerability of the psflogprintf function in the libsndfile library, which is used for reading and writing audio files, is related to a numerical overflow vulnerability. Exploiting this vulnerability could allow an attacker to execute arbitrary code on the target system...

10CVSS6.1AI score
SaveExploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/14 12:00 a.m.9 views

The vulnerability of the psf_binheader_readf() function in the library for reading and writing audio files libsndfile allows a attacker to execute arbitrary code on the target system.

The vulnerability of the psfbinheaderreadf function in the library for reading and writing audio files, libsndfile, is related to buffer overflows in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code on the target system...

10CVSS6.4AI score
SaveExploits0References5Affected Software3
OSV
OSV
added 2022/04/12 11:04 a.m.7 views

OESA-2022-1611 flac security update

FLAC stands for Free Lossless Audio Codec, an audio format similar to MP3, but lossless, meaning that audio is compressed in FLAC without any loss in quality. Security Fixes: In appendtoverifyfifointerleaved of streamencoder.c, there is a possible out of bounds write due to a missing bounds check...

5.5CVSS5.4AI score0.00465EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2022/04/11 12:00 a.m.11 views

WordPress Woo Audio Preview plugin <= 1.3.0 - Arbitrary Plugin Installation, Activation and Deactivation vulnerability

Arbitrary Plugin Installation, Activation and Deactivation vulnerability discovered by Mary JJ Jay in WordPress Woo Audio Preview plugin versions = 1.3.0. Solution Update the WordPress Woo Audio Preview plugin to the latest available version at least 1.4.0...

3.9AI score
SaveExploits0References2Affected Software1
Citrix
Citrix
added 2022/04/07 12:00 a.m.14 views

Windows 10 Endpoints Are Not Redirecting Input Devices Properly And Output Redirection Works Fine

This Local Policy Settings must be enabled within the VDA and Endpoint: Local Group Policy Editor: "Computer Configuration Administrative Templates Windows Components Remote Desktop Services Remote Desktop Session Host Device and Resource Redirection" Allow Audio And Video Playback Redirection...

7.1AI score
SaveExploits0
Redos
Redos
added 2022/04/07 12:00 a.m.37 views

ROS-20220407-01

Vulnerability of libsndfile audio file reading and writing library is related to memory leak in function cafreadheader. Exploitation of the vulnerability could allow an attacker acting remotely to force an application to incorrectly free memory before deleting the last link and executing an attac...

8.2AI score
SaveExploits0
ThreatPost
ThreatPost
added 2022/04/05 1:30 p.m.192 views

No-Joke Borat RAT Propagates Ransomware, DDoS

Attackers are using a newly released remote access trojan RAT to spread ransomware and distributed denial of service DDoS — in addition to the traditional RAT function of backdooring victims’ systems. Researchers at Cyble Research Labs discovered the RAT, which they dubbed Borat RAT because it us...

8.8AI score
SaveExploits0References7
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:00 a.m.11 views

The vulnerability of the get_sample() function in the output.c component of the Freeware Advanced Audio Decoder 2 (FAAD2) allows a hacker to trigger a service failure.

The vulnerability of the getsample function in the output.c component of the Freeware Advanced Audio Decoder 2 FAAD2 audio decoder is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to cause a service failure...

7.1CVSS6.6AI score0.00885EPSS
SaveExploits1References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:00 a.m.12 views

The vulnerability of the stszin function in the mp4read.c component of the Freeware Advanced Audio Decoder 2 (FAAD2) allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the stszin function in the mp4read.c component of the Freeware Advanced Audio Decoder 2 FAAD2 audio decoder is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service...

9.3CVSS7.5AI score0.01282EPSS
SaveExploits1References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:00 a.m.15 views

The vulnerability of the sbr_qmf_synthesis_64 function in the sbr_qmf.c component of the Freeware Advanced Audio Decoder 2 (FAAD2) allows a hacker to gain access to confidential data, compromise its integrity, and cause service failure.

The vulnerability of the sbrqmfsynthesis64 function in the sbrqmf.c component of the Freeware Advanced Audio Decoder 2 FAAD2 audio decoder is related to buffer-overflow situations. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and...

9.3CVSS7.2AI score0.01289EPSS
SaveExploits1References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/01 12:00 a.m.15 views

The vulnerability of the ftypin function in the mp4read.c component of the Freeware Advanced Audio Decoder 2 (FAAD2) allows a hacker to gain access to confidential data, compromise its integrity, and cause service failure.

The vulnerability of the ftypin function in the mp4read.c component of the Freeware Advanced Audio Decoder 2 FAAD2 audio decoder is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service...

8.8CVSS7.5AI score0.0115EPSS
SaveExploits1References5Affected Software2
ATTACKERKB
ATTACKERKB
added 2022/03/30 4:15 p.m.7 views

CVE-2021-39772

In Bluetooth, there is a possible way to access the a2dp audio control switch due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

8.8CVSS7.4AI score0.00205EPSS
SaveExploits0References2
NVD
NVD
added 2022/03/28 1:15 a.m.36 views

CVE-2021-44209

OX App Suite through 7.10.5 allows XSS via an HTML 5 element such as AUDIO...

6.1CVSS0.00903EPSS
SaveExploits2References2
OSV
OSV
added 2022/03/28 1:15 a.m.21 views

CVE-2021-44209

OX App Suite through 7.10.5 allows XSS via an HTML 5 element such as AUDIO...

6.1CVSS5.7AI score
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/03/28 1:15 a.m.5 views

CVE-2021-44209

OX App Suite through 7.10.5 allows XSS via an HTML 5 element such as AUDIO...

6.1CVSS6.3AI score0.00903EPSS
SaveExploits2References3
Prion
Prion
added 2022/03/28 1:15 a.m.36 views

Cross site scripting

OX App Suite through 7.10.5 allows XSS via an HTML 5 element such as AUDIO...

4.3CVSS5.9AI score0.00903EPSS
SaveExploits2References2Affected Software1
CVE
CVE
added 2022/03/28 12:57 a.m.101 views

CVE-2021-44209

OX App Suite up to version 7.10.5 contains a Cross-Site Scripting (XSS) vulnerability that can be triggered via an HTML5 AUDIO element. The issue affects the frontend of OX App Suite (notably the 7.10.5 release and earlier) and is tied to insufficient escaping within the user-facing components (e...

6.1CVSS5.9AI score0.00903EPSS
SaveExploits2References2Affected Software1
Cvelist
Cvelist
added 2022/03/28 12:57 a.m.37 views

CVE-2021-44209

OX App Suite through 7.10.5 allows XSS via an HTML 5 element such as AUDIO...

6.1AI score0.00903EPSS
SaveExploits2References2
Rows per page
Query Builder