Lucene search
+L

7737 matches found

NVD
NVD
added 2021/03/30 10:15 p.m.22 views

CVE-2020-24995

Buffer overflow vulnerability in sniffchannelorder function in aacdectemplate.c in ffmpeg 3.1.2, allows attackers to execute arbitrary code local...

7.8CVSS0.00563EPSS
SaveExploits1References4
OSV
OSV
added 2021/03/30 10:15 p.m.12 views

CVE-2020-24995

Buffer overflow vulnerability in sniffchannelorder function in aacdectemplate.c in ffmpeg 3.1.2, allows attackers to execute arbitrary code local...

7.8CVSS8AI score
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2021/03/30 10:15 p.m.39 views

CVE-2020-24995

Buffer overflow vulnerability in sniffchannelorder function in aacdectemplate.c in ffmpeg 3.1.2, allows attackers to execute arbitrary code local...

7.8CVSS7.2AI score0.00563EPSS
SaveExploits1References5
Prion
Prion
added 2021/03/30 10:15 p.m.14 views

Buffer overflow

Buffer overflow vulnerability in sniffchannelorder function in aacdectemplate.c in ffmpeg 3.1.2, allows attackers to execute arbitrary code local...

4.6CVSS8AI score0.00563EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2021/03/30 9:19 p.m.28 views

CVE-2020-24995

Buffer overflow vulnerability in sniffchannelorder function in aacdectemplate.c in ffmpeg 3.1.2, allows attackers to execute arbitrary code local...

8AI score0.00563EPSS
SaveExploits1References4
CVE
CVE
added 2021/03/30 9:19 p.m.77 views

CVE-2020-24995

FFmpeg 3.1.2 is affected by a buffer overflow in the sniff_channel_order function of aacdec_template.c, enabling local arbitrary code execution. The Connected documents confirm the vulnerable component and impact, but no remediation details are provided in the supplied sources; consult linked tic...

7.8CVSS8AI score0.00563EPSS
SaveExploits1References4Affected Software1
Gitee
Gitee
added 2021/03/23 8:57 a.m.4 views

vulhub

This is a collection of vulnerable Docker environments, known as Vulhub. It's an open-source project that provides pre-built vulnerable environments for testing and learning purposes. The project is maintained by phith0n and is available on GitHub. The repository contains a variety of vulnerable...

7.7AI score
SaveExploits0
Gitee
Gitee
added 2021/03/20 3:17 p.m.5 views

Exploit for SQL Injection in Zabbix

This repository is an open-source collection of pre-built vulnerable docker environments, referred to as 'Vulhub'. It is an offensive tool for web application security testing and vulnerability research. The primary purpose of Vulhub is to provide a simple and convenient way to test and demonstra...

9.8CVSS7.1AI score0.83284EPSS
SaveExploits28
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:0 a.m.8 views

The vulnerability of the track_header() function in the libavformat library of the Ffmpeg multimedia environment allows a attacker to cause a service failure.

The vulnerability of the trackheader function in the libavformat library of the Ffmpeg multimedia environment is related to the writing of data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failure...

7.1CVSS7.1AI score0.01527EPSS
SaveExploits1References7Affected Software2
ArchLinux
ArchLinux
added 2021/03/13 12:0 a.m.200 views

[ASA-202103-7] ffmpeg: arbitrary code execution

Arch Linux Security Advisory ASA-202103-7 ========================================= Severity: Medium Date : 2021-03-13 CVE-ID : CVE-2020-35964 Package : ffmpeg Type : arbitrary code execution Remote : No Link : https://security.archlinux.org/AVG-1649 Summary ======= The package ffmpeg before...

6.5CVSS2.5AI score0.01527EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2021/03/01 12:0 a.m.5 views

PT-2021-7978 · FFmpeg +4 · Ffmpeg +4

Name of the Vulnerable Software and Affected Versions: FFmpeg version 4.3.2 Description: The issue is related to an integer overflow vulnerability in the av timecode make string function of the libavutil/timecode.c component in FFmpeg. This vulnerability allows local attackers to cause a denial o...

6.5CVSS5.2AI score0.01041EPSS
SaveExploits5References43
Gitee
Gitee
added 2021/02/22 3:7 p.m.3 views

vulhub

This repository is an open-source collection of pre-built vulnerable Docker environments, known as Vulhub. It is an offensive tool for testing and demonstrating vulnerabilities in various software and systems. The primary vulnerability class targeted by Vulhub is not explicitly stated, but it...

8.6AI score
SaveExploits0
OpenVAS
OpenVAS
added 2021/02/01 12:0 a.m.24 views

Debian: Security Advisory (DLA-2537-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.7AI score0.02263EPSS
SaveExploits1References4
Debian
Debian
added 2021/01/31 5:6 a.m.104 views

[SECURITY] [DLA 2537-1] ffmpeg security update

Debian LTS Advisory DLA-2537-1 [email protected] https://www.debian.org/lts/security/ Roberto C. Sánchez January 31, 2021 https://wiki.debian.org/LTS Package : ffmpeg Version : 7:3.2.15-0+deb9u2 CVE ID : CVE-2019-17539 CVE-2020-35965 Debian Bug : 979999 Two vulnerabilities have been...

9.8CVSS6.7AI score0.02263EPSS
SaveExploits1
OSV
OSV
added 2021/01/31 12:0 a.m.26 views

DLA-2537-1 ffmpeg - security update

Bulletin has no description...

9.8CVSS8.5AI score0.02263EPSS
SaveExploits1
Gitee
Gitee
added 2021/01/29 11:51 a.m.4 views

vulhub

This repository is an open-source collection of pre-built vulnerable docker environments, referred to as 'Vulhub'. It is an offensive tool for web application security testing and vulnerability research. The primary vulnerability targeted by this repository is not explicitly stated, but it contai...

8.1AI score
SaveExploits0
Snyk
Snyk
added 2021/01/26 6:55 a.m.4 views

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection. The injection point is located in line 9 in index.js. PoC var root = require"ffmpeg-sdk"; root.execute"touch JHU"; Remediation There is no fixed version for ffmpeg-sdk. Credit: JHU System Security Lab...

9.8CVSS7.3AI score0.01234EPSS
SaveExploits1References2
Veracode
Veracode
added 2021/01/14 2:15 a.m.37 views

Out-of-Bounds Access

ffmpeg is vulnerable to out-of-bounds write because of errors in calculations of when to perform memset zero operations...

7.5CVSS3.7AI score0.02263EPSS
SaveExploits1References7Affected Software4
Gitee
Gitee
added 2021/01/12 1:54 p.m.2 views

vulhub

It is an offensive tool for Docker environments. The primary CVE ID is not explicitly mentioned, but the tool targets various vulnerable Docker environments, including CouchDB, FFmpeg, Git, InfluxDB, and Oracle Java. The tool is designed to test and demonstrate vulnerabilities in these...

7.7AI score
SaveExploits0
Gitee
Gitee
added 2021/01/12 10:0 a.m.3 views

vulhub

It is an offensive tool for Docker environments. The repository contains a collection of vulnerable Docker environments, including CouchDB, ffmpeg, git, and influxdb, among others. The environments are designed to be used for testing and training purposes, allowing users to practice exploiting...

6.9AI score
SaveExploits0
Rows per page
Query Builder