Microsoft Windows Clip Service 竞争条件问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Clip Service. The following products and versions are affected:Windows Server 2019,Windows Server 2019 Server Cor...

CVE-2023-28273: Sensitive Data Storage in Improperly Locked Memory

Windows Clip Service Elevation of Privilege Vulnerability...

CVE-2022-40515

Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms...

Double free

Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms...

CVE-2022-40515

CVE-2022-40515 corresponds to memory corruption in video due to a double-free when playing 3gp clips with invalid metadata atoms. Connected records confirm impact in Qualcomm closed‑source components (Snapdragon) with a high to critical CVSS profile; exploitation and exact vulnerable versions are...

CVE-2022-40515 Double free in Video

Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms...

CVE-2022-40515 Double free in Video

Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms...

CVE-2022-40515: Double Free

Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms...

SUSE CVE-2007-5087

The ATM module in the Linux kernel before 2.4.35.3, when CLIP support is enabled, allows local users to cause a denial of service kernel panic by reading /proc/net/atm/arp before the CLIP module has been loaded...

SUSE CVE-2015-8051

The Adobe Premiere Clip app before 1.2.1 for iOS mishandles unspecified input, which has unknown impact and attack vectors...

SUSE CVE-2017-5406

A segmentation fault can occur in the Skia graphics library during some canvas operations due to issues with mask/clip intersection and empty masks. This vulnerability affects Firefox 52 and Thunderbird 52...

SUSE CVE-2017-13139

In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, the ReadOneMNGImage function in coders/png.c has an out-of-bounds read with the MNG CLIP chunk...

SUSE CVE-2018-5154

A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.8, Thunderbird ESR 52.8, Firefox 60, and Firefox ESR 52.8...

CVE-2021-37374

Cross Site Scripting XSS vulnerability in Teradek Clip all firmware versions allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. NOTE: Vedor states the product has reached End of Life and will not be receiving any firmware updates to address...

Cross site scripting

UNSUPPORTED WHEN ASSIGNED Cross Site Scripting XSS vulnerability in Teradek Clip all firmware versions allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. NOTE: Vedor states the product has reached End of Life and will not be receiving any...

Teradek Clip 跨站脚本漏洞

Teradek Clip is Teradek's video signal transmitter for drones with encoding and wireless signal transmission. A security vulnerability exists in Teradek Clip. An attacker could use this vulnerability to execute arbitrary code via the Friendly Name field in System Information Settings...

CVE-2021-37374

Cross Site Scripting XSS vulnerability in Teradek Clip all firmware versions allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. NOTE: Vedor states the product has reached End of Life and will not be receiving any firmware updates to address...

CVE-2021-37374: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Teradek Clip all firmware versions allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. NOTE: Vedor states the product has reached End of Life and will not be receiving any firmware updates to address...

CVE-2021-37374

The CVE-2021-37374 issue affects Teradek Clip firmware (all versions) where a Cross Site Scripting (XSS) vulnerability exists in the Friendly Name field within System Information Settings. The root cause is improper handling of input in the Friendly Name field, allowing remote attackers to run ar...

CVE-2021-37374

Cross Site Scripting XSS vulnerability in Teradek Clip all firmware versions allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. NOTE: Vedor states the product has reached End of Life and will not be receiving any firmware updates to address...