CVE-2020-7981

sql.rb in Geocoder before 1.6.1 allows Boolean-based SQL injection when withinboundingbox is used in conjunction with untrusted swlat, swlng, nelat, or nelng data...

Geocoder gem for Ruby contains possible SQL injection vulnerability

sql.rb in Geocoder allows Boolean-based SQL injection when withinboundingbox is used in conjunction with untrusted swlat, swlng, nelat, or nelng data...

PT-2020-19896

Name of the Vulnerable Software and Affected Versions Geocoder versions prior to 1.6.1 Description The issue allows Boolean-based SQL injection when the within bounding box function is used with untrusted sw lat, sw lng, ne lat, or ne lng data. This can occur in the sql.rb file of the Geocoder...

DEBIAN-CVE-2014-9627

The MP4ReadBoxString function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before 2.1.6 performs an incorrect cast operation from a 64-bit integer to a 32-bit integer, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large bo...

DEBIAN-CVE-2014-9626

Integer underflow in the MP4ReadBoxString function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before 2.1.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a box size less than 7...

DEBIAN-CVE-2014-9628

The MP4ReadBoxString function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before 2.1.6 allows remote attackers to trigger an unintended zero-size malloc and conduct buffer overflow attacks, and consequently execute arbitrary code, via a box size of 7...

UBUNTU-CVE-2014-9626

Integer underflow in the MP4ReadBoxString function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before 2.1.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a box size less than 7...

CVE-2014-9626

Integer underflow in the MP4ReadBoxString function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before 2.1.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a box size less than 7...

UBUNTU-CVE-2014-9627

The MP4ReadBoxString function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before 2.1.6 performs an incorrect cast operation from a 64-bit integer to a 32-bit integer, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large bo...

UBUNTU-CVE-2014-9628

The MP4ReadBoxString function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before 2.1.6 allows remote attackers to trigger an unintended zero-size malloc and conduct buffer overflow attacks, and consequently execute arbitrary code, via a box size of 7...

CVE-2014-9626

VLC media player before 2.1.6 is affected by CVE-2014-9626 due to an Integer underflow in the MP4_ReadBox_String function within the MP4 demuxer (libmp4.c). An insufficient check on the box length (box size

January 23, 2020—KB4534321 (OS Build 17763.1012)

None None...

Vulnerability Spotlight: Bitdefender BOX 2 bootstrap remote code execution vulnerabilities

Claudio Bozzato, Lilith Wyatt and Dave McDaniel of Cisco Talos discovered these vulnerabilities. Blog by Jon Munshaw. The Bitdefender BOX 2 contains two remote code execution vulnerabilities in its bootstrap stage. The BOX 2 is a device that protects users’ home networks from a variety of threats...

PT-2020-1545

Name of the Vulnerable Software and Affected Versions Bitdefender BOX 2 versions 2.1.47.42 through 2.1.53.45 Description A command injection issue has been found in the bootstrap stage of the affected software. The /api/download image API method unsafely handles the production firmware URL suppli...

Foxit PDF Reader Javascript Field Action Validate Remote Code Execution Vulnerability

Summary An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader version 9.7.0.29435. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to...

jenkins: Stored XSS vulnerability in expandable textbox form control

In Jenkins 2.196 and earlier, LTS 2.176.3 and earlier, the f:expandableTextBox form control interpreted its content as HTML when expanded, resulting in a stored XSS vulnerability exploitable by users with permission to define its contents typically Job/Configure...

DEBIAN-CVE-2019-20208

dimCRead in isomedia/boxcode3gpp.c in GPAC from 0.5.2 to 0.8.0 has a stack-based buffer overflow...

UBUNTU-CVE-2019-20208

dimCRead in isomedia/boxcode3gpp.c in GPAC from 0.5.2 to 0.8.0 has a stack-based buffer overflow...

GPAC buffer overflow vulnerability (CNVD-2020-04701)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A stack buffer overflow vulnerability exists in dimCRead in isomedia/boxcode3gpp.c in GPAC 0.8.0, which can be exploited by an attacker to cause a denial of service via specially crafted input...

PT-2020-10370 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: GPAC version 0.8.0 Description: The issue is related to a stack-based buffer overflow in the dimC Read function, located in the isomedia/box code 3gpp.c file of GPAC. Recommendations: For GPAC version 0.8.0, at the moment, there is no...