Lucene search
+L

1210 matches found

Prion
Prion
added 2020/08/11 8:15 p.m.20 views

Design/Logic Flaw

In reset of NuPlayerDriver.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the media server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0...

7.2CVSS8.1AI score0.00244EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2020/08/11 8:15 p.m.17 views

Design/Logic Flaw

In clearPropValue of MediaAnalyticsItem.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the media server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

7.2CVSS8.1AI score0.00153EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/08/11 7:28 p.m.23 views

CVE-2020-0243

In clearPropValue of MediaAnalyticsItem.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the media server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

7.9AI score0.00153EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/08/11 7:27 p.m.45 views

CVE-2020-0242

In reset of NuPlayerDriver.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the media server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0...

7.9AI score0.00244EPSS
SaveExploits0References1
CVE
CVE
added 2020/08/11 7:27 p.m.122 views

CVE-2020-0242

CVE-2020-0242 describes a use-after-free in the Android media framework due to improper locking in NuPlayerDriver.cpp. The effect is local escalation of privilege in the media server with no additional execution privileges required, and exploitation requires local access (no user interaction). Af...

7.8CVSS7.7AI score0.00244EPSS
SaveExploits0References1Affected Software1
GithubExploit
GithubExploit
added 2020/08/04 3:27 a.m.60 views

Exploit for Classic Buffer Overflow in Acti Nvr

cve-2020-15956 ACTi NVR 2.3 Standard/Professional Server and A...

7.5CVSS7.8AI score0.16158EPSS
SaveExploits5
Tenable Nessus
Tenable Nessus
added 2020/07/23 12:00 a.m.17 views

Plex Media Server Installed (Linux)

Binary data plexmediaserverinstalledlinux.nbin...

7.3AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2020/07/23 12:00 a.m.17 views

Plex Media Server Installed (Mac OS X)

Binary data macosxplexmediaserverinstalled.nbin...

7.3AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2020/06/18 12:00 a.m.22 views

Plex Media Server Installed (Windows)

Binary data plexwininstalled.nbin...

7.3AI score
SaveExploits0References1
CNVD
CNVD
added 2020/06/16 12:00 a.m.12 views

Plex Media Server Improper Access Control Vulnerability

Plex Media Server is a set of media player and media server software from the Swiss company Plex. An improper access control vulnerability exists in versions of Plex Media Server prior to 2020-6-15. An attacker could exploit this vulnerability to execute cross-origin application requests via any...

8.8CVSS6.9AI score0.01415EPSS
SaveExploits1References1
OSV
OSV
added 2020/06/15 8:15 p.m.9 views

CVE-2020-5742

Improper Access Control in Plex Media Server prior to June 15, 2020 allows any origin to execute cross-origin application requests...

8.8CVSS7.4AI score0.01415EPSS
SaveExploits1References1
NVD
NVD
added 2020/06/15 8:15 p.m.28 views

CVE-2020-5742

Improper Access Control in Plex Media Server prior to June 15, 2020 allows any origin to execute cross-origin application requests...

8.8CVSS0.01415EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2020/06/15 8:15 p.m.5 views

CVE-2020-5742

Improper Access Control in Plex Media Server prior to June 15, 2020 allows any origin to execute cross-origin application requests...

8.8CVSS8.1AI score0.01415EPSS
SaveExploits1References2
Prion
Prion
added 2020/06/15 8:15 p.m.29 views

Improper access control

Improper Access Control in Plex Media Server prior to June 15, 2020 allows any origin to execute cross-origin application requests...

6.8CVSS8.7AI score0.01415EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2020/06/15 7:26 p.m.34 views

CVE-2020-5742

Improper Access Control in Plex Media Server prior to June 15, 2020 allows any origin to execute cross-origin application requests...

8.8AI score0.01415EPSS
SaveExploits1References1
CVE
CVE
added 2020/06/15 7:26 p.m.302 views

CVE-2020-5742

CVE-2020-5742 : Affected software is Plex Media Server. The vulnerability is due to improper access control, allowing any origin to execute cross-origin application requests prior to 2020-06-15. The root cause is inadequate restriction on cross-origin interactions, enabling potentially unauthoriz...

8.8CVSS8.7AI score0.01415EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2020/06/11 3:15 p.m.4 views

CVE-2020-0200

In ReadLittleEndian of rawbitreader.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure in the media server with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions:...

6.5CVSS7.2AI score
SaveExploits0References1
OSV
OSV
added 2020/06/11 3:15 p.m.8 views

CVE-2020-0205

In the DaalaBitReader constructor of entropydecoder.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure in the media server with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

6.5CVSS7AI score0.00732EPSS
SaveExploits0References1
NVD
NVD
added 2020/06/11 3:15 p.m.22 views

CVE-2020-0200

In ReadLittleEndian of rawbitreader.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure in the media server with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions:...

6.5CVSS0.00732EPSS
SaveExploits0References1
NVD
NVD
added 2020/06/11 3:15 p.m.27 views

CVE-2020-0205

In the DaalaBitReader constructor of entropydecoder.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure in the media server with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

6.5CVSS0.00732EPSS
SaveExploits0References1
Rows per page
Query Builder