PT-2019-5481

Name of the Vulnerable Software and Affected Versions GPAC versions 0.7.1 and earlier Description The issue is related to the gf text get utf8 line function in the GPAC multimedia platform, which allows an out-of-bounds write due to missing bounds checking for szLineConv. This can potentially...

PT-2022-18249 · Unknown +1 · Gpac Mp4Box +1

Name of the Vulnerable Software and Affected Versions: GPAC mp4box version 1.1.0-DEV-rev1727-g8be34973d-master Description: The issue is related to a use-after-free vulnerability in the gf node get attribute by tag function. This vulnerability can lead to memory corruption and potentially allow a...

PT-2019-5483

Name of the Vulnerable Software and Affected Versions GPAC versions 0.7.1 and earlier Description The issue is related to a Buffer Overflow in the gf sm load init function in scene manager.c in libgpac static.a. This vulnerability can be exploited to impact the confidentiality, integrity, and...

UBUNTU-CVE-2018-14654

The Gluster file system through version 4.1.4 is vulnerable to abuse of the 'features/index' translator. A remote attacker with access to mount volumes could exploit this via the 'GFXATTROPENTRYINKEY' xattrop to create arbitrary, empty files on the target server...

DEBIAN-CVE-2018-14653

The Gluster file system through versions 4.1.4 and 3.12 is vulnerable to a heap-based buffer overflow in the 'servergetspec' function via the 'gfgetspecreq' RPC message. A remote authenticated attacker could exploit this to cause a denial of service or other potential unspecified impact...

CVE-2007-6475

Multiple directory traversal vulnerabilities in GF-3XPLORER 2.4 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the langsel parameter to 1 updater.php and 2 thumber.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in GF-3XPLORER 2.4 allow remote attackers to inject arbitrary web script or HTML via the newdir parameter to index3x.php, and unspecified other vectors...

Directory traversal

Multiple directory traversal vulnerabilities in GF-3XPLORER 2.4 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the langsel parameter to 1 updater.php and 2 thumber.php...

CVE-2007-6474

Multiple cross-site scripting XSS vulnerabilities in GF-3XPLORER 2.4 allow remote attackers to inject arbitrary web script or HTML via the newdir parameter to index3x.php, and unspecified other vectors...

CVE-2007-6476

GF-3XPLORER 2.4 allows remote attackers to obtain configuration information via a direct request to explorer/phpinfo.php, which calls the phpinfo function...

CVE-2007-6474

Multiple cross-site scripting XSS vulnerabilities in GF-3XPLORER 2.4 allow remote attackers to inject arbitrary web script or HTML via the newdir parameter to index3x.php, and unspecified other vectors...

CVE-2007-6476

GF-3XPLORER 2.4 allows remote attackers to obtain configuration information via a direct request to explorer/phpinfo.php, which calls the phpinfo function...

CVE-2007-6474

GF-3XPLORER 2.4 contains multiple XSS vulnerabilities exploitable via the newdir parameter to index_3x.php (and other vectors). Remote attackers can inject arbitrary web script/HTML. The exact root cause details, affected versions beyond 2.4, exploit status, and remediation steps are not specifie...

CVE-2007-6475

CVE-2007-6475 affects GF-3XPLORER 2.4 with directory traversal in the lang_sel parameter, enabling remote attackers to include and execute arbitrary local files via updater.php and thumber.php. Root cause is traversal via .. in lang_sel; impact is partial confidentiality/integrity exposure (local...

CVE-2007-6475

Multiple directory traversal vulnerabilities in GF-3XPLORER 2.4 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the langsel parameter to 1 updater.php and 2 thumber.php...

CVE-2007-6476

GF-3XPLORER 2.4 allows remote attackers to obtain configuration information via a direct request to explorer/phpinfo.php, which calls the phpinfo function...

CVE-2007-6476: Exposure of Sensitive Information to an Unauthorized Actor

GF-3XPLORER 2.4 allows remote attackers to obtain configuration information via a direct request to explorer/phpinfo.php, which calls the phpinfo function...

CVE-2007-6474: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in GF-3XPLORER 2.4 allow remote attackers to inject arbitrary web script or HTML via the newdir parameter to index3x.php, and unspecified other vectors...

CVE-2007-6475: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in GF-3XPLORER 2.4 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the langsel parameter to 1 updater.php and 2 thumber.php...

GF-3XPLORER 2.4 (XSS/LFI/Etc.) Multiple Remote Vulnerabilities

No description provided by source. --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / / &nb...