Lucene search
+L

2256 matches found

wpexploit
wpexploit
added 2021/07/19 12:0 a.m.706 views

Wonder Video Embed < 1.8 - Contributor+ Stored XSS

The plugin does not escape parameters of its wonderpluginvideo shortcode, which could allow users with a role as low as Contributor to perform Stored XSS attacks. wonderpluginvideo iframe='youtube.com?v=dQw4w9WgXcQ" onload="alert1' videocss='animation-name:twentytwentyone-close-button-transition"...

3.5CVSS2.1AI score0.00624EPSS
SaveExploits2
CNVD
CNVD
added 2021/07/15 12:0 a.m.31 views

Bento4 Denial of Service Vulnerability (CNVD-2023-00388)

Bento4 is an open source C library for reading and writing MP4 files. Bento4 version 1.5.1-628 suffers from a denial of service vulnerability that stems from an unhandled memory allocation failure in Core/Ap48bdlAtom.cpp, resulting in a NULL pointer dereference, which could be exploited by an...

6.5CVSS4.3AI score0.00976EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
added 2021/07/15 12:0 a.m.62 views

Adobe Bridge MP4 File Parsing Uninitialized Variable Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

3.3CVSS4.1AI score0.01805EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/07/13 12:0 a.m.10 views

Bento4 代码问题漏洞

Bento4 is an open source C library for reading and writing MP4 files. Bento4 version 1.5.1-628 suffers from a denial of service vulnerability that stems from an unhandled memory allocation failure in Core/Ap48bdlAtom.cpp, resulting in a NULL pointer dereference, which could be exploited by an...

6.5CVSS5.7AI score0.00976EPSS
SaveExploits1References2
Veracode
Veracode
added 2021/05/26 2:10 a.m.18 views

Denial Of Service (DoS)

gpac:sid is vulnerable to denial of service. NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack" function allows attackers to execute arbitrary code or cause a Denial-of-Service DoS by uploading a malicious MP4 file...

9.8CVSS7.2AI score0.02082EPSS
SaveExploits1References2Affected Software2
CNVD
CNVD
added 2021/04/20 12:0 a.m.33 views

GPAC Null Pointer Dereference Vulnerability (CNVD-2021-30187)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A null pointer dereference vulnerability exists in GPAC version 1.0.1 in filters/reframelatm.c when calling gffilterpckgetdata. An attacker could exploit this vulnerability via a specially crafted mp4 file to...

5.5CVSS6.5AI score0.00868EPSS
SaveExploits1References1
OSV
OSV
added 2021/04/19 8:15 p.m.14 views

CVE-2021-30199

In filters/reframelatm.c in GPAC 1.0.1 there is a Null Pointer Dereference, when gffilterpckgetdata is called. The first arg pck may be null with a crafted mp4 file,which results in a crash...

5.5CVSS6.7AI score
SaveExploits0References2
NVD
NVD
added 2021/04/19 8:15 p.m.20 views

CVE-2021-30199

In filters/reframelatm.c in GPAC 1.0.1 there is a Null Pointer Dereference, when gffilterpckgetdata is called. The first arg pck may be null with a crafted mp4 file,which results in a crash...

5.5CVSS0.00868EPSS
SaveExploits1References2
OSV
OSV
added 2021/04/19 8:15 p.m.5 views

DEBIAN-CVE-2021-30199

In filters/reframelatm.c in GPAC 1.0.1 there is a Null Pointer Dereference, when gffilterpckgetdata is called. The first arg pck may be null with a crafted mp4 file,which results in a crash...

5.5CVSS6.4AI score0.00868EPSS
SaveExploits1References1
Prion
Prion
added 2021/04/19 8:15 p.m.17 views

Null pointer dereference

In filters/reframelatm.c in GPAC 1.0.1 there is a Null Pointer Dereference, when gffilterpckgetdata is called. The first arg pck may be null with a crafted mp4 file,which results in a crash...

4.3CVSS5.4AI score0.00868EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2021/04/19 8:15 p.m.4 views

UBUNTU-CVE-2021-30199

In filters/reframelatm.c in GPAC 1.0.1 there is a Null Pointer Dereference, when gffilterpckgetdata is called. The first arg pck may be null with a crafted mp4 file,which results in a crash...

5.5CVSS7.2AI score0.00868EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
added 2021/04/19 8:15 p.m.24 views

CVE-2021-30199

In filters/reframelatm.c in GPAC 1.0.1 there is a Null Pointer Dereference, when gffilterpckgetdata is called. The first arg pck may be null with a crafted mp4 file,which results in a crash...

5.5CVSS6.8AI score0.00868EPSS
SaveExploits1References3
Debian CVE
Debian CVE
added 2021/04/19 7:34 p.m.40 views

CVE-2021-30199

In filters/reframelatm.c in GPAC 1.0.1 there is a Null Pointer Dereference, when gffilterpckgetdata is called. The first arg pck may be null with a crafted mp4 file,which results in a crash...

5.5CVSS5.7AI score0.00868EPSS
SaveExploits1
Cvelist
Cvelist
added 2021/04/19 7:34 p.m.24 views

CVE-2021-30199

In filters/reframelatm.c in GPAC 1.0.1 there is a Null Pointer Dereference, when gffilterpckgetdata is called. The first arg pck may be null with a crafted mp4 file,which results in a crash...

5.7AI score0.00868EPSS
SaveExploits1References2
OSV
OSV
added 2021/04/19 7:15 p.m.5 views

DEBIAN-CVE-2021-31255

Buffer overflow in the abstboxread function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file...

7.8CVSS8.1AI score0.0146EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2021/04/19 7:15 p.m.7 views

CVE-2021-31256

Memory leak in the stblGetSampleInfos function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file...

5.5CVSS6.7AI score0.01061EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2021/04/19 12:0 a.m.6 views

GPAC 缓冲区错误漏洞

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A buffer overflow vulnerability exists in the abstboxread function in MP4Box in GPAC version 1.0.1. An attacker could exploit this vulnerability via specially crafted files to cause a denial of service or execut...

7.8CVSS6.4AI score0.0146EPSS
SaveExploits1References3
CNVD
CNVD
added 2021/04/15 12:0 a.m.45 views

GPAC Null Pointer Dereference Vulnerability (CNVD-2021-30188)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A null pointer dereference vulnerability exists in the MergeTrack function of the isomedia/track.c module in GPAC v0.5.2. An attacker can exploit this vulnerability by uploading a malicious MP4 file to execute...

9.8CVSS7.7AI score0.02082EPSS
SaveExploits1References1
OSV
OSV
added 2021/04/14 2:15 p.m.7 views

DEBIAN-CVE-2021-28300

NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial-of-Service DoS by uploading a malicious MP4 file...

9.8CVSS9.1AI score0.02082EPSS
SaveExploits1References1
NVD
NVD
added 2021/04/14 2:15 p.m.29 views

CVE-2021-28300

NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial-of-Service DoS by uploading a malicious MP4 file...

9.8CVSS0.02082EPSS
SaveExploits1References1
Rows per page
Query Builder