Lucene search
+L

10909 matches found

SUSE CVE
SUSE CVE
•added 2024/04/13 2:12 a.m.•9 views

SUSE CVE-2023-49528

Buffer Overflow vulnerability in FFmpeg version n6.1-3-g466799d4f5, allows a local attacker to execute arbitrary code and cause a denial of service DoS via the afdialoguenhance.c:261:5 in the destereo component...

8.2CVSS7.1AI score0.00396EPSS
SaveExploits1References3
Veracode
Veracode
•added 2024/04/12 12:31 p.m.•29 views

Command Injection

github.com/go-skynet/localai is vulnerable to command injection. The vulnerability is due to the lack of sanitization of user-supplied filenames before passing them to ffmpeg via a shell command in the audioToWav function, allowing attackers to execute arbitrary commands on the host system...

9.8CVSS8.3AI score0.02879EPSS
SaveExploits1References3Affected Software1
NVD
NVD
•added 2024/04/12 6:15 a.m.•22 views

CVE-2023-49528

Buffer Overflow vulnerability in FFmpeg version n6.1-3-g466799d4f5, allows a local attacker to execute arbitrary code and cause a denial of service DoS via the afdialoguenhance.c:261:5 in the destereo component...

8CVSS9.2AI score0.00396EPSS
SaveExploits1References7
OSV
OSV
•added 2024/04/12 6:15 a.m.•3 views

DEBIAN-CVE-2023-49528

Buffer Overflow vulnerability in FFmpeg version n6.1-3-g466799d4f5, allows a local attacker to execute arbitrary code and cause a denial of service DoS via the afdialoguenhance.c:261:5 in the destereo component...

8CVSS7.3AI score0.00396EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2024/04/12 6:15 a.m.•24 views

CVE-2023-49528

Buffer Overflow vulnerability in FFmpeg version n6.1-3-g466799d4f5, allows a local attacker to execute arbitrary code and cause a denial of service DoS via the afdialoguenhance.c:261:5 in the destereo component...

8CVSS7.1AI score0.00396EPSS
SaveExploits1References3
OSV
OSV
•added 2024/04/12 6:15 a.m.•19 views

UBUNTU-CVE-2023-49528

Buffer Overflow vulnerability in FFmpeg version n6.1-3-g466799d4f5, allows a local attacker to execute arbitrary code and cause a denial of service DoS via the afdialoguenhance.c:261:5 in the destereo component...

8CVSS7.1AI score0.00396EPSS
SaveExploits1References4
Mend
Mend
•added 2024/04/12 12:00 a.m.•1 views

CVE-2023-49528

Buffer Overflow vulnerability in FFmpeg version n6.1-3-g466799d4f5, allows a local attacker to execute arbitrary code and cause a denial of service DoS via the afdialoguenhance.c:261:5 in the destereo component...

8CVSS0.00396EPSS
SaveExploits1References10
Vulnrichment
Vulnrichment
•added 2024/04/12 12:00 a.m.•18 views

CVE-2023-49528

Buffer Overflow vulnerability in FFmpeg version n6.1-3-g466799d4f5, allows a local attacker to execute arbitrary code and cause a denial of service DoS via the afdialoguenhance.c:261:5 in the destereo component...

7.5AI score0.00396EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2024/04/12 12:00 a.m.•52 views

CVE-2023-49528

Buffer Overflow vulnerability in FFmpeg version n6.1-3-g466799d4f5, allows a local attacker to execute arbitrary code and cause a denial of service DoS via the afdialoguenhance.c:261:5 in the destereo component...

9.3AI score0.00396EPSS
SaveExploits1References4
Debian CVE
Debian CVE
•added 2024/04/12 12:00 a.m.•73 views

CVE-2023-49528

Buffer Overflow vulnerability in FFmpeg version n6.1-3-g466799d4f5, allows a local attacker to execute arbitrary code and cause a denial of service DoS via the afdialoguenhance.c:261:5 in the destereo component...

8CVSS7AI score0.00396EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/12 12:00 a.m.•1 views

CVE-2023-49528: Heap-based Buffer Overflow

Buffer Overflow vulnerability in FFmpeg version n6.1-3-g466799d4f5, allows a local attacker to execute arbitrary code and cause a denial of service DoS via the afdialoguenhance.c:261:5 in the destereo component...

8CVSS6.5AI score0.00396EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/04/12 12:00 a.m.•25 views

FFmpeg 安全漏洞

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A buffer overflow vulnerability exists in FFmpeg version n6.1-3-g466799d4f5, which can be exploited by an attacker to execute arbitrary code and cause a denial of service DoS via...

8CVSS7.9AI score0.00396EPSS
SaveExploits1References2
CVE
CVE
•added 2024/04/12 12:00 a.m.•130 views

CVE-2023-49528

A Buffer Overflow vulnerability exists in FFmpeg version n6.1-3-g466799d4f5 within the de_stereo component. The flaw is located in af_dialoguenhance.c:261:5 and allows a local attacker to execute arbitrary code or trigger a Denial of Service (DoS) . Remediation includes updating to the latest pac...

8CVSS7.2AI score0.00396EPSS
SaveExploits1References7Affected Software1
Positive Technologies
Positive Technologies
•added 2024/04/12 12:00 a.m.•14 views

PT-2024-4526

Name of the Vulnerable Software and Affected Versions: FFmpeg version n6.1-3-g466799d4f5 Description: The issue is related to a buffer overflow in the de stereo component of the FFmpeg library, specifically in the af dialoguenhance.c file. This allows a local attacker to execute arbitrary code an...

8CVSS7.3AI score0.01179EPSS
SaveExploits2References56
OSV
OSV
•added 2024/04/12 12:00 a.m.•17 views

CVE-2023-49528

Buffer Overflow vulnerability in FFmpeg version n6.1-3-g466799d4f5, allows a local attacker to execute arbitrary code and cause a denial of service DoS via the afdialoguenhance.c:261:5 in the destereo component...

8CVSS8AI score
SaveExploits0References9
Github Security Blog
Github Security Blog
•added 2024/04/10 6:30 p.m.•47 views

LocalAI Command Injection in audioToWav

A command injection vulnerability exists in the TranscriptEndpoint of mudler/localai, specifically within the audioToWav function used for converting audio files to WAV format for transcription. The vulnerability arises due to the lack of sanitization of user-supplied filenames before passing the...

9.8CVSS8.1AI score0.02879EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2024/04/10 6:30 p.m.•78 views

GHSA-WX43-G55G-2JF4 LocalAI Command Injection in audioToWav

A command injection vulnerability exists in the TranscriptEndpoint of mudler/localai, specifically within the audioToWav function used for converting audio files to WAV format for transcription. The vulnerability arises due to the lack of sanitization of user-supplied filenames before passing the...

9.8CVSS9.8AI score0.02879EPSS
SaveExploits1References4
NVD
NVD
•added 2024/04/10 5:15 p.m.•31 views

CVE-2024-2029

A command injection vulnerability exists in the TranscriptEndpoint of mudler/localai, specifically within the audioToWav function used for converting audio files to WAV format for transcription. The vulnerability arises due to the lack of sanitization of user-supplied filenames before passing the...

9.8CVSS9.8AI score0.02879EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2024/04/10 5:08 p.m.•53 views

CVE-2024-2029 Command Injection in mudler/localai

A command injection vulnerability exists in the TranscriptEndpoint of mudler/localai, specifically within the audioToWav function used for converting audio files to WAV format for transcription. The vulnerability arises due to the lack of sanitization of user-supplied filenames before passing the...

9.8CVSS10AI score0.02879EPSS
SaveExploits1References2
Mend
Mend
•added 2024/04/10 5:08 p.m.•5 views

CVE-2024-2029

A command injection vulnerability exists in the "TranscriptEndpoint" of mudler/localai, specifically within the "audioToWav" function used for converting audio files to WAV format for transcription. The vulnerability arises due to the lack of sanitization of user-supplied filenames before passing...

9.8CVSS0.02879EPSS
SaveExploits1References6
Rows per page
Query Builder