CVE-2022-38527

UCMS v1.6.0 was discovered to contain a cross-site scripting XSS vulnerability via the Import function under the Site Management page...

UCMS 跨站脚本漏洞

UCMS is a content management system written in PHP. A security vulnerability exists in UCMS v1.6.0, which originates from the fact that an attacker can implement cross-site scripting via the Import function of its web management interface...

PT-2022-24436 · Ucms · Ucms

Name of the Vulnerable Software and Affected Versions: UCMS version 1.6.0 Description: A cross-site scripting XSS issue was found in UCMS via the Import function under the Site Management page. This allows for potential malicious script execution. Recommendations: For UCMS version 1.6.0, consider...

Bento4 Denial of Service Vulnerability (CNVD-2023-27653)

Bento4 is an open source C library for reading and writing MP4 files. Bento4 version 1.6.0-639 suffers from a denial-of-service vulnerability that stems from AP4CttsAtom::Create in its Core/Ap4CttsAtom.cpp component, which may consume too much memory. An attacker could exploit the vulnerability t...

Null pointer dereference

An issue was discovered in Bento4 through 1.6.0-639. A NULL pointer dereference occurs in AP4StszAtom::WriteFields...

Bento4 代码问题漏洞

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in Bento4 1.6.0-639 and earlier versions that stems from a null pointer dereference in its AP4StszAtom::WriteFields component...

CVE-2022-40736

An issue was discovered in Bento4 1.6.0-639. There ie excessive memory consumption in AP4CttsAtom::Create in Core/Ap4CttsAtom.cpp...

PT-2022-25498 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 version 1.6.0-639 Description: An issue was discovered in Bento4, where there is excessive memory consumption in AP4 CttsAtom::Create in Core/Ap4CttsAtom.cpp. Recommendations: For Bento4 version 1.6.0-639, consider restricting the use ...

PT-2022-25499 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 versions 1.6.0-639 and earlier Description: A buffer over-read issue exists in the function AP4 StdcFileByteStream::WritePartial located in System/StdC/Ap4StdCFileByteStream.cpp, which is called from AP4 ByteStream::Write and AP4...

Bento4 缓冲区错误漏洞

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in Bento4 version 1.6.0-639, which stems from its AP4ByteStream::Write and AP4HdlrAtom::WriteFields components calling the System/StdC/Ap4StdCFileByteStream.cpp component's AP4...

CVE-2022-40438

Buffer overflow vulnerability in function AP4MemoryByteStream::WritePartial in mp42aac in Bento4 v1.6.0-639, allows attackers to cause a denial of service via a crafted file...

Bento4 安全漏洞

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in Bento4 v1.6.0-639, which originates from a denial of service due to a buffer overflow in the AP4MemoryByteStream::WritePartial function of its mp42aac component that can be caused by an...

Bento4 安全漏洞

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in Bento4 v1.6.0-639, which originates from a denial of service due to a memory leak in the AP4StdcFileByteStream::Create function of its mp42ts component that can be caused by an attacker via ...

CVE-2022-38297

UCMS v1.6.0 contains an authentication bypass vulnerability which is exploited via cookie poisoning...

PT-2022-24347 · Ucms · Ucms

Name of the Vulnerable Software and Affected Versions: UCMS version 1.6.0 Description: The issue is an authentication bypass vulnerability that can be exploited through cookie poisoning. Recommendations: For UCMS version 1.6.0, update to a version that contains a fix for this issue, as the curren...

UCMS 安全漏洞

UCMS is a content management system written in PHP. A security vulnerability exists in UCMS v1.6.0, which stems from an authentication bypass vulnerability that contains an exploit via cookie poisoning...

Bento4 安全漏洞

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in version Bento4-1.6.0-639. An attacker could exploit this vulnerability to cause a denial of service DoS via specially crafted mp4 input...

PT-2022-17599 · Unknown · Tem Flex-1085

Name of the Vulnerable Software and Affected Versions: TEM FLEX-1085 version 1.6.0 Description: A critical issue has been discovered, affecting an unknown function of the file /sistema/flash/reboot. This issue leads to denial of service and can be exploited remotely. Recommendations: For TEM...

CVE-2022-29360

The Email Viewer in RainLoop through 1.6.0 allows XSS via a crafted email message...

CVE-2021-40943

In Bento4 1.6.0-638, there is a null pointer reference in the function AP4DescriptorListInspector::Action function in Ap4Descriptor.h:124 , as demonstrated by GPAC. This can cause a denial of service DOS...