Lucene search
+L

137 matches found

OSV
OSV
added 2021/05/27 6:5 p.m.5 views

OPENSUSE-SU-2021:0798-1 Security update for mpv

This update for mpv fixes the following issues: - CVE-2021-30145: Fixed format string vulnerability allows user-assisted remote attackers to achieve code execution via a crafted m3u playlist file boo1186230 This update was imported from the openSUSE:Leap:15.2:Update update project...

7.8CVSS7.7AI score0.02409EPSS
SaveExploits1References3
OPENSUSE Linux
OPENSUSE Linux
added 2021/05/27 12:0 a.m.17 views

Security update for mpv (important)

openSUSE Security Update: Security update for mpv Announcement ID: openSUSE-SU-2021:0798-1 Rating: important References: 1186230 Cross-References: CVE-2021-30145 CVSS scores: CVE-2021-30145 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP2 An...

7.8CVSS7.6AI score0.02409EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2021/05/25 12:0 a.m.37 views

openSUSE Security Update : mpv (openSUSE-2021-788)

This update for mpv fixes the following issues : - CVE-2021-30145: Fixed format string vulnerability allows user-assisted remote attackers to achieve code execution via a crafted m3u playlist file boo1186230 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

7.8CVSS7.4AI score0.02409EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2021/05/25 12:0 a.m.15 views

openSUSE: Security Advisory for mpv (openSUSE-SU-2021:0788-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS7.6AI score0.02409EPSS
SaveExploits1References2
OSV
OSV
added 2021/05/24 12:3 p.m.5 views

OPENSUSE-SU-2021:0788-1 Security update for mpv

This update for mpv fixes the following issues: - CVE-2021-30145: Fixed format string vulnerability allows user-assisted remote attackers to achieve code execution via a crafted m3u playlist file boo1186230...

7.8CVSS7.7AI score0.02409EPSS
SaveExploits1References3
OPENSUSE Linux
OPENSUSE Linux
added 2021/05/24 12:0 a.m.20 views

Security update for mpv (important)

openSUSE Security Update: Security update for mpv Announcement ID: openSUSE-SU-2021:0788-1 Rating: important References: 1186230 Cross-References: CVE-2021-30145 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for mpv fixes t...

7.8CVSS7.6AI score0.02409EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/05/19 12:0 a.m.8 views

node-mpv formatting string error vulnerability

node-mpv is a Node.js based MPV player module. A security vulnerability exists in mpv version 0.33.0 and earlier versions, which can be exploited by an attacker to achieve code execution via a crafted m3u playlist file...

7.8CVSS7AI score0.02409EPSS
SaveExploits1References1
NVD
NVD
added 2021/05/18 2:15 p.m.8 views

CVE-2021-30145

A format string vulnerability in mpv through 0.33.0 allows user-assisted remote attackers to achieve code execution via a crafted m3u playlist file...

7.8CVSS0.02409EPSS
SaveExploits1References5
OSV
OSV
added 2021/05/18 2:15 p.m.3 views

DEBIAN-CVE-2021-30145

A format string vulnerability in mpv through 0.33.0 allows user-assisted remote attackers to achieve code execution via a crafted m3u playlist file...

7.8CVSS7.9AI score0.02409EPSS
SaveExploits1References1
OSV
OSV
added 2021/05/18 2:15 p.m.22 views

CVE-2021-30145

A format string vulnerability in mpv through 0.33.0 allows user-assisted remote attackers to achieve code execution via a crafted m3u playlist file...

7.8CVSS7.1AI score
SaveExploits0References5
Prion
Prion
added 2021/05/18 2:15 p.m.18 views

Format string

A format string vulnerability in mpv through 0.33.0 allows user-assisted remote attackers to achieve code execution via a crafted m3u playlist file...

6.8CVSS7.6AI score0.02409EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2021/05/18 2:15 p.m.12 views

UBUNTU-CVE-2021-30145

A format string vulnerability in mpv through 0.33.0 allows user-assisted remote attackers to achieve code execution via a crafted m3u playlist file...

7.8CVSS6.2AI score0.02409EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
added 2021/05/18 2:15 p.m.21 views

CVE-2021-30145

A format string vulnerability in mpv through 0.33.0 allows user-assisted remote attackers to achieve code execution via a crafted m3u playlist file...

7.8CVSS7.5AI score0.02409EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2021/05/18 1:34 p.m.55 views

CVE-2021-30145

A format string vulnerability in mpv through 0.33.0 allows user-assisted remote attackers to achieve code execution via a crafted m3u playlist file...

7.8AI score0.02409EPSS
SaveExploits1References5
Debian CVE
Debian CVE
added 2021/05/18 1:34 p.m.85 views

CVE-2021-30145

A format string vulnerability in mpv through 0.33.0 allows user-assisted remote attackers to achieve code execution via a crafted m3u playlist file...

7.8CVSS7.6AI score0.02409EPSS
SaveExploits1
AlpineLinux
AlpineLinux
added 2021/05/18 1:34 p.m.84 views

CVE-2021-30145

A format string vulnerability in mpv through 0.33.0 allows user-assisted remote attackers to achieve code execution via a crafted m3u playlist file...

7.8CVSS7.6AI score0.02409EPSS
SaveExploits1
CVE
CVE
added 2021/05/18 1:34 p.m.329 views

CVE-2021-30145

CVE-2021-30145 describes a format string vulnerability in mpv up to version 0.33.0 that could enable code execution when a user opens a crafted m3u playlist file. Multiple sources (including NVD/NVD list and Gentoo/OpenSUSE advisories) corroborate the impact and advise upgrading mpv to a fixed re...

7.8CVSS7.4AI score0.02409EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
added 2021/05/18 12:0 a.m.37 views

node-mpv 格式化字符串错误漏洞

node-mpv is a Node.js based MPV player module. A security vulnerability exists in mpv version 0.33.0 and earlier versions, which can be exploited by an attacker to achieve code execution via a crafted m3u playlist file...

7.8CVSS6.1AI score0.02409EPSS
SaveExploits1References8
Veracode
Veracode
added 2021/04/27 11:7 a.m.17 views

Denial Of Service (DoS)

mpv is vulnerable to denial of service. An attacker is able to crash the application through a buffer overflow by specifying a printf format string which is not verified...

7.8CVSS4.5AI score0.02409EPSS
SaveExploits1References7Affected Software1
Veracode
Veracode
added 2020/04/07 9:59 a.m.14 views

Remote Code Execution (RCE)

node-mpv is vulnerable to remote code execution RCE. The vulnerability exists because the parameter options was not sanitized properly, allowing to be controlled by the attacker by sending malicious code to execute...

9.8CVSS4.4AI score0.04358EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder