Lucene search
+L

1709 matches found

SUSE CVE
SUSE CVE
•added 2023/02/15 3:38 a.m.•10 views

SUSE CVE-2021-38381

Live555 through 1.08 does not handle MPEG-1 or 2 files properly. Sending two successive RTSP SETUP commands for the same track causes a Use-After-Free and daemon crash...

6.5CVSS6.9AI score0.0119EPSS
SaveExploits1References3
Redos
Redos
•added 2022/11/18 12:00 a.m.•27 views

ROS-20221118-02

A vulnerability in the MPEG-4 GPAC system standard implementation is related to the svgparsepreserveaspectratio in the scenegraph/svgattributes.c file of the SVG Parser component. Exploitation of the vulnerability could allow an attacker acting remotely to cause a memory leak. an attacker acting...

6.5CVSS6.6AI score0.01025EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/10/31 12:00 a.m.•19 views

PT-2022-24108

Name of the Vulnerable Software and Affected Versions Axiomatic Bento4 version 5e7bb34 Description A critical issue was found in the function AP4 Mp4AudioDsiParser::ReadBits of the file Ap4Mp4AudioInfo.cpp, which is part of the mp4hls component. This issue leads to a heap-based buffer overflow. T...

7.8CVSS7.5AI score0.00605EPSS
SaveExploits1References10
CNNVD
CNNVD
•added 2022/10/26 12:00 a.m.•15 views

Bento4 代码问题漏洞

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in Axiomatic Bento4. An attacker exploited the vulnerability to cause a null pointer dereference...

5.5CVSS5.8AI score0.00709EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2022/10/26 12:00 a.m.•14 views

Bento4 缓冲区错误漏洞

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in Bento4 that stems from the presence of a heap-based buffer overflow problem...

7.5CVSS7.5AI score0.01189EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2022/10/26 12:00 a.m.•21 views

Bento4 缓冲区错误漏洞

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in Bento4 that stems from the presence of a heap-based buffer overflow problem...

7.8CVSS7.5AI score0.00736EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2022/09/19 4:15 p.m.•11 views

CVE-2022-40428

The d8s-mpeg for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0...

9.8CVSS7.3AI score0.0136EPSS
SaveExploits1References3
Prion
Prion
•added 2022/09/19 4:15 p.m.•34 views

Code injection

The d8s-mpeg for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0...

7.5CVSS9.4AI score0.0136EPSS
SaveExploits1References2Affected Software1
OSV
OSV
•added 2022/09/19 4:15 p.m.•10 views

PYSEC-2022-43114

The d8s-mpeg for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0...

9.8CVSS5.9AI score
SaveExploits0References2
CVE
CVE
•added 2022/09/19 3:19 p.m.•74 views

CVE-2022-40428

CVE-2022-40428 affects d8s-mpeg for Python (PyPI) where a third‑party backdoor in the democritus-networking package is bundled with version 0.1.0. The established data indicates a potential arbitrary code execution backdoor, enabling code execution if the compromised package is used. Exploitation...

9.8CVSS9.4AI score0.0136EPSS
SaveExploits1References2Affected Software1
OSV
OSV
•added 2022/09/19 3:19 p.m.•18 views

CVE-2022-40428

The d8s-mpeg for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0...

6.9AI score
SaveExploits0References4
Mend
Mend
•added 2022/09/19 3:19 p.m.•4 views

CVE-2022-40428

The d8s-mpeg for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0...

9.8CVSS0.0136EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2022/09/19 12:00 a.m.•28 views

PT-2022-25377 · Unknown +1 · Democritus-Networking +1

Name of the Vulnerable Software and Affected Versions: d8s-mpeg version 0.1.0 Description: The d8s-mpeg for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. Recommendations: For version 0.1.0...

9.8CVSS9.6AI score0.0136EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/19 12:00 a.m.•3 views

CVE-2022-40428: Undefined Security Weakness

The d8s-mpeg for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0...

9.8CVSS8.2AI score0.0136EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2022/09/19 12:00 a.m.•41 views

Democritus Project 安全漏洞

Democritus Project is a collection of simple, effective, modular, well-tested and well-documented features from Democritus. A security vulnerability exists in Democritus Project d8s-mpeg version 0.1.0 that originates from a potential code execution backdoor inserted by a third party...

9.8CVSS8.8AI score0.0136EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2022/09/16 6:15 a.m.•18 views

CVE-2022-25669

Denial of service in video due to buffer over read while parsing MP4 clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

7.5CVSS7.3AI score0.00456EPSS
SaveExploits0References2
OSV
OSV
•added 2022/09/15 3:15 p.m.•10 views

DEBIAN-CVE-2022-38864

Certain The MPlayer Project products are vulnerable to Buffer Overflow via the function mpunescape03 of libmpdemux/mpeghdr.c. This affects mencoder SVN-r38374-13.0.1 and mplayer SVN-r38374-13.0.1...

5.5CVSS5.5AI score0.00365EPSS
SaveExploits1References1
OSV
OSV
•added 2022/09/15 3:15 p.m.•10 views

DEBIAN-CVE-2022-38863

Certain The MPlayer Project products are vulnerable to Buffer Overflow via function mpgetbits of libmpdemux/mpeghdr.c which affects mencoder and mplayer. This affects mecoder SVN-r38374-13.0.1 and mplayer SVN-r38374-13.0.1...

5.5CVSS5.5AI score0.00365EPSS
SaveExploits1References1
OSV
OSV
•added 2022/09/15 3:15 p.m.•17 views

UBUNTU-CVE-2022-38863

Certain The MPlayer Project products are vulnerable to Buffer Overflow via function mpgetbits of libmpdemux/mpeghdr.c which affects mencoder and mplayer. This affects mecoder SVN-r38374-13.0.1 and mplayer SVN-r38374-13.0.1...

5.5CVSS6AI score0.00365EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2022/09/15 12:00 a.m.•15 views

MPlayer 缓冲区错误漏洞

MPlayer is an open source multimedia player from the MPlayer team. A security vulnerability exists in MPlayer SVN-r38374-13.0.1 version, mencoder SVN-r38374-13.0.1 version, which originates from a buffer overflow in the mpgetbits function in libmpdemux/mpeghdr.c. The vulnerability is caused by a...

5.5CVSS6AI score0.00365EPSS
SaveExploits1References5
Rows per page
Query Builder