Lucene search
K

11 matches found

Tenable Nessus
Tenable Nessus
added 2025/10/08 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2025-59728

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When calculating the content path in handling of MPEG-DASH manifests, there's an out-of-bounds NUL-byte write one byte past the end of the buffer.When we call...

8.7CVSS6AI score0.00019EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2025/10/06 11:23 p.m.3 views

SUSE CVE-2025-59728

When calculating the content path in handling of MPEG-DASH manifests, there's an out-of-bounds NUL-byte write one byte past the end of the buffer.When we call xmlNodeGetContent below 0, it returns a buffer precisely allocated to match the string length, using strdup internally. If this buffer is...

7.3CVSS5.1AI score0.00019EPSS
Exploits0References5
Snyk
Snyk
added 2025/10/06 8:44 a.m.3 views

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write in the resolvecontentpath process. An attacker can cause a write operation to occur one byte past the end of a heap-allocated buffer by crafting a specially designed MPEG-DASH manifest that triggers the appending of ...

8.7CVSS6.8AI score0.00019EPSS
Exploits0References2
OSV
OSV
added 2025/10/06 8:15 a.m.0 views

UBUNTU-CVE-2025-59728

When calculating the content path in handling of MPEG-DASH manifests, there's an out-of-bounds NUL-byte write one byte past the end of the buffer.When we call xmlNodeGetContent below 0, it returns a buffer precisely allocated to match the string length, using strdup internally. If this buffer is...

8.7CVSS6AI score0.00019EPSS
Exploits0References5
CVE
CVE
added 2025/10/06 8:8 a.m.11 views

CVE-2025-59728

CVE-2025-59728 is a FFmpeg memory-handling vulnerability: during dash manifest content path resolution, a heap-buffer-overflow write occurs when appending a trailing '/' in the MDASH resolve_content_path flow, potentially affecting multiple Ubuntu/SUSE advisories referencing FFmpeg. The issue is ...

8.7CVSS6.7AI score0.00019EPSS
Exploits0References1
AlpineLinux
AlpineLinux
added 2025/10/06 8:8 a.m.3 views

CVE-2025-59728

When calculating the content path in handling of MPEG-DASH manifests, there's an out-of-bounds NUL-byte write one byte past the end of the buffer.When we call xmlNodeGetContent below 0, it returns a buffer precisely allocated to match the string length, using strdup internally. If this buffer is...

8.7CVSS7.2AI score0.00019EPSS
Exploits0
Cvelist
Cvelist
added 2025/10/06 8:8 a.m.5 views

CVE-2025-59728 Heap-buffer-overflow write in FFmpeg MDASH resolve_content_path

When calculating the content path in handling of MPEG-DASH manifests, there's an out-of-bounds NUL-byte write one byte past the end of the buffer.When we call xmlNodeGetContent below 0, it returns a buffer precisely allocated to match the string length, using strdup internally. If this buffer is...

8.7CVSS0.00019EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/10/06 8:8 a.m.2 views

CVE-2025-59728 Heap-buffer-overflow write in FFmpeg MDASH resolve_content_path

When calculating the content path in handling of MPEG-DASH manifests, there's an out-of-bounds NUL-byte write one byte past the end of the buffer.When we call xmlNodeGetContent below 0, it returns a buffer precisely allocated to match the string length, using strdup internally. If this buffer is...

8.7CVSS6.7AI score0.00019EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/10/06 12:0 a.m.3 views

FFmpeg 安全漏洞

FFmpeg is a complete solution for recording, converting, and streaming audio and video from the FFmpeg team. A security vulnerability exists in FFmpeg that stems from an out-of-bounds NUL byte write in the content path calculation when processing MPEG-DASH manifests, which could lead to memory...

8.7CVSS4.8AI score0.00019EPSS
Exploits0References2
CVE
CVE
added 2023/06/12 4:30 p.m.78 views

CVE-2023-34105

SRS (Simple Real-time Server) api-server is vulnerable to drive-by command injection on POST /api/v1/snapshots in versions prior to 5.0.157, 5.0-b1, and 6.0.48, potentially leading to Remote Code Execution (RCE). Connected advisories confirm a fix in 5.0.157, 5.0-b1, and 6.0.48. Mitigate by updat...

7.5CVSS8.2AI score0.85502EPSS
In wildExploits1References3Affected Software1
0day.today
0day.today
added 2016/01/18 12:0 a.m.34 views

SeaWell Networks Spectrum - Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: SeaWell Networks Spectrum - Multiple Vulnerabilities Discovered by: Karn Ganeshen Vendor Homepage: http://www.seawellnetworks.com/spectrum/ Versions Reported: Spectrum SDC 02.05.00, Build 02.05.00.0016 CVE-ID: CVE-2015-8282...

7.5CVSS0.2AI score0.2556EPSS
Exploits7
Rows per page
Query Builder