Lucene search
K

3300 matches found

RedhatCVE
RedhatCVE
added 2025/02/07 9:44 a.m.21 views

CVE-2024-45560

Memory corruption while taking a snapshot with hardware encoder due to unvalidated userspace buffer...

7.8CVSS7AI score0.00071EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 5:57 p.m.13 views

CVE-2019-5127

A command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the server. Exploitable unauthenticated command injections exist in YouPHPTube Encoder 2.3 a plugin for providing encoder functionality in YouPHPTube. The parameter base64Url in...

10CVSS7.4AI score0.45302EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 5:57 p.m.7 views

CVE-2019-5129

A command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the server. Exploitable unauthenticated command injections exist in YouPHPTube Encoder 2.3 a plugin for providing encoder functionality in YouPHPTube. The parameter base64Url in...

10CVSS7.4AI score0.33157EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 5:53 p.m.11 views

CVE-2019-5128

A command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the server. Exploitable unauthenticated command injections exist in YouPHPTube Encoder 2.3 a plugin for providing encoder functionality in YouPHPTube. The parameter base64Url in...

10CVSS7.4AI score0.25692EPSS
Exploits1References1
NVD
NVD
added 2025/02/03 5:15 p.m.13 views

CVE-2024-45560

Memory corruption while taking a snapshot with hardware encoder due to unvalidated userspace buffer...

7.8CVSS0.00071EPSS
Exploits0References1
CVE
CVE
added 2025/02/03 4:51 p.m.55 views

CVE-2024-45560

CVE-2024-45560 affects Qualcomm chipsets (Snapdragon) with a hardware encoder when taking a snapshot. The root cause is memory corruption caused by an unvalidated userspace buffer in the snapshot path. The vulnerability is described with local attack vector, high impact to confidentiality, integr...

7.8CVSS7.8AI score0.00071EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2025/02/03 4:51 p.m.24 views

CVE-2024-45560 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera

Memory corruption while taking a snapshot with hardware encoder due to unvalidated userspace buffer...

7.8CVSS0.00071EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/02/03 12:0 a.m.3 views

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm, Inc. A security vulnerability exists in Qualcomm Chipsets that stems from an unverified user space buffer and memory corruption when taking snapshots using a hardware encoder...

7.8CVSS7AI score0.00071EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/02/03 12:0 a.m.2 views

PT-2025-14366

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns out-of-bound accesses in the Linux kernel, specifically in the drm/amd/display component. The problem arises because hpo stream to link encoder mapping has a size of M...

7.1CVSS5.5AI score0.00156EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2025/02/03 12:0 a.m.3 views

PT-2025-2710 · Qualcomm · Snapdragon +34

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption that occurs when taking a snapshot with a hardware encoder. This corruption is caused by an unvalidated userspace...

7.8CVSS7.2AI score0.00071EPSS
Exploits0References4
Fedora
Fedora
added 2025/02/02 1:40 a.m.5 views

[SECURITY] Fedora 41 Update: jpegxl-0.10.4-1.fc41

This package contains a reference implementation of JPEG XL encoder and decoder...

7.3AI score
Exploits0
OSV
OSV
added 2025/01/24 1:41 p.m.4 views

OESA-2025-1079 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: ext4: don't set SBRDONLY after filesystem errors When the filesystem is mounted with errors=remount-ro, we were setting SBRDONLY flag to stop all filesystem...

7.8CVSS5.4AI score0.01254EPSS
Exploits1References72
Positive Technologies
Positive Technologies
added 2025/01/14 12:0 a.m.3 views

PT-2025-7657

Name of the Vulnerable Software and Affected Versions FFmpeg versions up to 7.1 Description A critical vulnerability was found in FFmpeg, affecting the function ff aac search for tns of the file libavcodec/aacenc tns.c of the component AAC Encoder. The manipulation leads to a stack-based buffer...

8.8CVSS6.8AI score0.00534EPSS
Exploits1References44
SUSE CVE
SUSE CVE
added 2025/01/10 12:22 a.m.3 views

SUSE CVE-2024-56608

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix out-of-bounds access in 'dcn21linkencodercreate' An issue was identified in the dcn21linkencodercreate function where an out-of-bounds access could occur when the hpdsource index was used to reference the...

5.5CVSS7.6AI score0.00226EPSS
Exploits0References13
BDU FSTEC
BDU FSTEC
added 2025/01/06 12:0 a.m.2 views

The vulnerability of the Adobe Media Encoder application, related to buffer overflow in dynamic memory, allows an attacker to execute arbitrary code.

The vulnerability of the Adobe Media Encoder application relates to buffer overflow in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially crafted file...

7.8CVSS6.3AI score0.00428EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2025/01/02 12:15 p.m.10 views

CVE-2024-43927

Cross-Site Request Forgery CSRF vulnerability in Till Krüss Email Address Encoder email-address-encoder allows Cross Site Request Forgery.This issue affects Email Address Encoder: from n/a through = 1.0.23...

4.3CVSS0.00217EPSS
Exploits0References1
CVE
CVE
added 2025/01/02 12:1 p.m.46 views

CVE-2024-43927

CVE-2024-43927 describes a Cross-Site Request Forgery (CSRF) vulnerability in the Till Krüss Email Address Encoder WordPress plugin, affecting Email Address Encoder versions from n/a up to 1.0.23. The issue enables CSRF, with no public exploit details provided in the sources. Remediation guidance...

4.3CVSS5.9AI score0.00217EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/01/02 12:1 p.m.13 views

CVE-2024-43927 WordPress Email Address Encoder plugin <= 1.0.23 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Till Krüss Email Address Encoder email-address-encoder allows Cross Site Request Forgery.This issue affects Email Address Encoder: from n/a through = 1.0.23...

4.3CVSS0.00217EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/01/02 12:1 p.m.4 views

CVE-2024-43927 WordPress Email Address Encoder plugin <= 1.0.23 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Till Krüss Email Address Encoder email-address-encoder allows Cross Site Request Forgery.This issue affects Email Address Encoder: from n/a through = 1.0.23...

4.3CVSS5.1AI score0.00217EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/01/02 12:0 a.m.3 views

PT-2025-2671 · Unknown · Till Krüss Email Address Encoder

Name of the Vulnerable Software and Affected Versions: Till Krüss Email Address Encoder versions 1.0.23 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This can be achieved by...

4.3CVSS6.6AI score0.00217EPSS
Exploits0References3
Rows per page
Query Builder