PT-2025-1783 · WordPress · Woocommerce Hss Extension For Streaming Video

Name of the Vulnerable Software and Affected Versions: WooCommerce HSS Extension for Streaming Video plugin versions up to and including 3.31 Description: The issue is related to insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject arbitrary web script...

PT-2025-49261

Name of the Vulnerable Software and Affected Versions urllib3 versions 1.0 through 2.5.16 Description urllib3 is a Python HTTP client library. Versions prior to 2.6.0 have an issue in the Streaming API where it improperly handles highly compressed data. The decompression logic can cause excessive...

PT-2025-36308

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue where a kernel crash can occur due to trying to copy to unmapped memory. This happens when a program is streaming video and another program changes the...

CVE-2023-6603

A flaw was found in FFmpeg's HLS playlist parsing. This vulnerability allows a denial of service via a maliciously crafted HLS playlist that triggers a null pointer dereference during initialization...

PT-2024-15024

Name of the Vulnerable Software and Affected Versions FFmpeg affected versions not specified Description A flaw was found in FFmpeg's HLS playlist parsing, allowing a denial of service via a maliciously crafted HLS playlist that triggers a null pointer dereference during initialization...

The vulnerability of the Streaming Service of the Synology Media Server, which allows a hacker to read arbitrary files.

The vulnerability of the Streaming Service in Synology Media Server lies in the ability to bypass authentication by using a user-controlled key. Exploiting this vulnerability allows an attacker to remotely access and read arbitrary files...

[SECURITY] Fedora 40 Update: mingw-gstreamer1-plugins-bad-free-1.24.10-1.fc40

GStreamer is a streaming media framework, based on graphs of elements which operate on media data. This package contains plug-ins that aren't tested well enough, or the code is not of good enough quality...

[SECURITY] Fedora 40 Update: mingw-gstreamer1-plugins-base-1.24.10-1.fc40

GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types ...

[SECURITY] Fedora 41 Update: mingw-gstreamer1-plugins-good-1.24.10-1.fc41

GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types ...

Stardust 访问控制错误漏洞

Stardust is a spaceness open source platform for streaming isolated desktop containers. An access control error vulnerability exists in Stardust. An attacker exploiting this vulnerability could access another container's proxy...

CVE-2024-4464

Authorization bypass through user-controlled key vulnerability in streaming service in Synology Media Server before 1.4-2680, 2.0.5-3152 and 2.2.0-3325 allows remote attackers to read specific files via unspecified vectors...

RHEL 9 : gstreamer1-plugins-base (RHSA-2024:11123)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:11123 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages conta...

CVE-2024-54114

Out-of-bounds access vulnerability in playback in the DASH module Impact: Successful exploitation of this vulnerability will affect availability...

GStreamer 资源管理错误漏洞

GStreamer is a GStreamer open source set of frameworks for processing streaming media. A resource management error vulnerability exists in GStreamer, which stems from the fact that it could lead to post-release reuse under certain circumstances...

[SECURITY] Fedora 41 Update: python-python-multipart-0.0.19-1.fc41

Python-Multipart is a streaming multipart parser for Python...

[SECURITY] Fedora 40 Update: python-multipart-0.0.19-1.fc40

Python-Multipart is a streaming multipart parser for Python...

SUSE CVE-2024-53104

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Skip parsing frames of type UVCVSUNDEFINED in uvcparseformat This can lead to out of bounds writes since frames of this type were not taken into account when calculating the size of the frames buffer in...

CVE-2024-53981

python-multipart is a streaming multipart parser for Python. When parsing form data, python-multipart skips line breaks CR \r or LF \n in front of the first boundary and any tailing bytes after the last boundary. This happens one byte at a time and emits a log event each time, which may cause...

CVE-2024-53981 python-multipart has a Denial of service (DoS) via deformation `multipart/form-data` boundary

python-multipart is a streaming multipart parser for Python. When parsing form data, python-multipart skips line breaks CR \r or LF \n in front of the first boundary and any tailing bytes after the last boundary. This happens one byte at a time and emits a log event each time, which may cause...

DEBIAN-CVE-2024-53104

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Skip parsing frames of type UVCVSUNDEFINED in uvcparseformat This can lead to out of bounds writes since frames of this type were not taken into account when calculating the size of the frames buffer in...