DLL injection in the ownCloud Desktop Client - ownCloud

The released desktop client was loading development plugins from certain directories when they were present...

container-tools:ol8 security, bug fix, and enhancement update

buildah 1.16.7-4.0.1 - Handling redirect from the docker registry Orabug: 29874238 Nikita Gerasimov 1.16.7-4 - update to the latest content of https://github.com/containers/buildah/tree/release-1.16 https://github.com/containers/buildah/commit/aaed66b - Related: 1888571 1.16.7-3 - revert back to...

The vulnerability of the gst_avi_demux_parse_ncdt function (gst/avi/gstavidemux.c) in the Gstreamer multimedia framework’s gst-plugins-good plugin. This vulnerability allows an attacker to cause a service failure.

The vulnerability of the gstavidemuxparsencdt function gst/avi/gstavidemux.c in the gst-plugins-good plugin for the Gstreamer multimedia framework is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause...

The vulnerability of the qtdemux_tag_add_str_full function (gst/isomp4/qtdemux.c) in the gst-plugins-good plugin for the Gstreamer multimedia framework allows a attacker to trigger a service failure.

The vulnerability of the qtdemuxtagaddstrfull function gst/isomp4/qtdemux.c in the Gst-plugins-good plugin for the Gstreamer multimedia framework is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause...

OESA-2021-1035 gstreamer1-plugins-bad-free security update

GStreamer is a pipeline-based multi media framework that links together a wide variety of media processing systems to complete complex workflows, based on graphs of filters which operate on media data. This package contains plug-ins that are not tested well enough yet, or the code is not of good...

AZL-6470 CVE-2021-21303 affecting package helm for versions less than 3.4.1-4

Helm is open-source software which is essentially "The Kubernetes Package Manager". Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. In Helm from version 3.0 and before version 3.5.2, there a few cases where data loaded from potentially untrusted...

Modern Events Calendar Lite < 5.16.5 - Authenticated Stored Cross-Site Scripting (XSS)

The plugin did not sanitise the miccomment field Notes on time when adding/editing an event, allowing users with privilege as low as author to add events with a Cross-Site Scripting payload in them, which will be triggered in the frontend when viewing the event. Edit WPScanTeam January 22nd, 2021...

DEBIAN-CVE-2021-3185

A flaw was found in the gstreamer h264 component of gst-plugins-bad before v1.18.1 where when parsing a h264 header, an attacker could cause the stack to be smashed, memory corruption and possibly code execution...

CVE-2021-26026

PlugIns\IDEACDStd.apl in ACDSee Professional 2021 14.0 1721 has a User Mode Write Access Violation starting at IDEACDStd!JPEGTransW+0x000000000000c7f4 via a crafted BMP image...

CVE-2021-26026

PlugIns\IDEACDStd.apl in ACDSee Professional 2021 14.0 1721 has a User Mode Write Access Violation starting at IDEACDStd!JPEGTransW+0x000000000000c7f4 via a crafted BMP image...

UBUNTU-CVE-2021-3185

A flaw was found in the gstreamer h264 component of gst-plugins-bad before v1.18.1 where when parsing a h264 header, an attacker could cause the stack to be smashed, memory corruption and possibly code execution...

CVE-2021-3185

A flaw was found in the gstreamer h264 component of gst-plugins-bad before v1.18.1 where when parsing a h264 header, an attacker could cause the stack to be smashed, memory corruption and possibly code execution...

gst-plugins-bad security vulnerability

A security vulnerability exists in gst-plugins-bad version 1.18.1. An attacker may exploit the vulnerability to execute arbitrary code...

CVE-2021-3185

CVE-2021-3185 affects the gstreamer gst-plugins-bad before v1.18.1, where parsing an H.264 header can cause stack smashing, memory corruption, and potentially code execution. The connected documents show multiple vendor advisories (RHEL, Gentoo GLSA, EulerOS, Astra, Nessus) noting this vulnerabil...

[SECURITY] [DSA 4833-2] gst-plugins-bad1.0 regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-4833-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 24, 2021 https://www.debian.org/security/faq -...

mad-metasploit

This is a Metasploit custom module repository, mad-metasploit, which contains a collection of exploits and plugins for various vulnerabilities. The repository is maintained by hahwul and is available on GitHub. The repository includes a variety of exploits, including: AIX Calendar Manager Service...

Information Disclosure

jenkins-2-plugins is vulnerable to information disclosure. The vulnerability exists through an incorrect permission check that allows users with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

CVE-2020-26278

Weave Net is open source software which creates a virtual network that connects Docker containers across multiple hosts and enables their automatic discovery. Weave Net before version 2.8.0 has a vulnerability in which can allow an attacker to take over any host in the cluster. Weave Net is...

Debian: Security Advisory (DSA-4833-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-4833-1 : gst-plugins-bad1.0 - security update

Andrew Wesie discovered a buffer overflow in the H264 support of the GStreamer multimedia framework, which could potentially result in the execution of arbitrary code. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...