Lucene search
+L

578 matches found

Zero Day Initiative
Zero Day Initiative
added 2024/09/25 12:00 a.m.15 views

Apple macOS AppleVADriver Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing...

4.3CVSS5.8AI score0.00233EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/09/25 12:00 a.m.9 views

Apple macOS AppleVADriver Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of MOV...

8.8CVSS6.7AI score0.00482EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/09/25 12:00 a.m.13 views

Apple macOS VideoToolbox Uninitialized Memory Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing...

4.3CVSS5.9AI score0.00278EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/09/25 12:00 a.m.13 views

Apple macOS AppleVADriver Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing...

4.3CVSS4.9AI score0.00243EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/09/25 12:00 a.m.19 views

Apple macOS AppleVADriver Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing...

4.3CVSS4.9AI score0.00243EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/09/25 12:00 a.m.11 views

Apple macOS AppleGVA Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing...

4.3CVSS5.8AI score0.00259EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/09/25 12:00 a.m.10 views

Apple macOS AppleVADriver Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing...

4.3CVSS4.9AI score0.00243EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/08/08 12:00 a.m.10 views

Apple macOS AppleVADriver Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of MOV...

8.8CVSS7.6AI score0.00632EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/08/08 12:00 a.m.12 views

Apple macOS VideoToolbox Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing...

4.3CVSS7AI score0.00632EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/08/08 12:00 a.m.11 views

Apple macOS VideoToolbox Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing...

3.1CVSS7AI score0.00632EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/07/31 12:00 a.m.9 views

Apple macOS AppleVADriver Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing...

4.3CVSS5.8AI score0.00436EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/07/26 12:00 a.m.38 views

Apple macOS VideoToolbox Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of MOV...

8.8CVSS6.7AI score0.00632EPSS
SaveExploits0References1
OSV
OSV
added 2024/07/12 11:07 a.m.11 views

OESA-2024-1832 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: Integer overflow...

5.5CVSS6.7AI score0.00199EPSS
SaveExploits0References2
OSV
OSV
added 2024/07/12 11:07 a.m.8 views

OESA-2024-1833 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: Integer overflow...

5.5CVSS6.7AI score0.00199EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/04/11 8:10 a.m.26 views

CVE-2024-20771 Bridge 2024 MOV File parsing memory corruption

Bridge versions 13.0.6, 14.0.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...

5.5CVSS6AI score0.00288EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/04/11 8:10 a.m.43 views

CVE-2024-20771 Bridge 2024 MOV File parsing memory corruption

Bridge versions 13.0.6, 14.0.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...

5.5CVSS5.3AI score0.00288EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2023/12/26 12:00 a.m.10 views

The vulnerability of the `av_timecode_make_string` function in the `libavutil/timecode.c` file of the FFmpeg multimedia library allows a hacker to cause a service failure.

The vulnerability of the avtimecodemakestring function in the libavutil/timecode.c file of the FFmpeg multimedia library is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure using a specially created .mov file...

5.5CVSS6.3AI score0.00199EPSS
SaveExploits0References6Affected Software2
Ubuntu
Ubuntu
added 2023/10/12 3:14 p.m.206 views

USN-6430-1: FFmpeg vulnerabilities

It was discovered that FFmpeg did not properly handle certain inputs in vflagfun.c, resulting in a buffer overflow vulnerability. An attacker could possibly use this issue to cause a denial of service via application crash. This issue only affected Ubuntu 20.04 LTS. CVE-2020-22024 It was discover...

6.5CVSS6.8AI score0.01041EPSS
SaveExploits5
Cvelist
Cvelist
added 2023/09/07 1:05 p.m.31 views

CVE-2021-44193 Adobe After Effects MOV File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe After Effects versions 22.0 and earlier and 18.4.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

3.3CVSS4.5AI score0.00303EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/09/07 1:05 p.m.42 views

CVE-2021-44192 Adobe After Effects MOV File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe After Effects versions 22.0 and earlier and 18.4.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

3.3CVSS4.5AI score0.00303EPSS
SaveExploits0References1
Rows per page
Query Builder