Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-10388 State: PUBLISHED Published: 2019-08-22T18:55:53 Last Updated: 2024-08-06T14:10:54.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has full path disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-support-plus-responsive-ticket-system/#developers
CVE ID: CVE-2014-10389 State: PUBLISHED Published: 2019-08-22T18:55:19 Last Updated: 2024-08-06T14:10:54.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has incorrect authentication. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-support-plus-responsive-ticket-system/#developers
CVE ID: CVE-2014-10390 State: PUBLISHED Published: 2019-08-22T18:54:48 Last Updated: 2024-08-06T14:10:54.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has directory traversal. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-support-plus-responsive-ticket-system/#developers
CVE ID: CVE-2014-10391 State: PUBLISHED Published: 2019-08-22T18:54:17 Last Updated: 2024-08-06T14:10:54.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-support-plus-responsive-ticket-system plugin before 4.1 for WordPress has JavaScript injection. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-support-plus-responsive-ticket-system/#developers
CVE ID: CVE-2014-10392 State: PUBLISHED Published: 2019-08-22T18:52:29 Last Updated: 2024-08-06T14:10:54.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cforms2 plugin before 10.2 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/cforms2/#developers - https://wpvulndb.com/vulnerabilities/9621
CVE ID: CVE-2014-10393 State: PUBLISHED Published: 2019-08-22T19:48:32 Last Updated: 2024-08-06T14:10:56.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cforms2 plugin before 10.5 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/cforms2/#developers
CVE ID: CVE-2014-10394 State: PUBLISHED Published: 2019-08-22T18:40:12 Last Updated: 2024-08-06T14:10:54.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rich-counter plugin before 1.2.0 for WordPress has JavaScript injection via a User-Agent header. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/rich-counter/#developers
CVE ID: CVE-2014-10395 State: PUBLISHED Published: 2019-08-27T11:50:55 Last Updated: 2024-08-06T14:10:55.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cp-polls plugin before 1.0.1 for WordPress has XSS in the votes list. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/cp-polls/#developers
CVE ID: CVE-2014-10396 State: PUBLISHED Published: 2019-09-20T19:31:23 Last Updated: 2024-08-06T14:10:56.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: The epic theme through 2014-09-07 for WordPress allows arbitrary file downloads via the file parameter to includes/download.php. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/128186/
CVE ID: CVE-2014-10397 State: PUBLISHED Published: 2019-09-20T19:34:05 Last Updated: 2024-08-06T14:10:54.793Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Antioch theme through 2014-09-07 for WordPress allows arbitrary file downloads via the file parameter to lib/scripts/download.php. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/128188/
CVE ID: CVE-2014-10398 State: PUBLISHED Published: 2020-01-03T19:40:49 Last Updated: 2024-08-06T14:10:54.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in bsi.dll in Bank Soft Systems (BSS) RBS BS-Client. Private Client (aka RBS BS-Client. Retail Client) 2.5, 2.4, and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) DICTIONARY, (2) FILTERIDENT, (3) FROMSCHEME, (4) FromPoint, or (5) FName_0 parameter and a valid sid parameter value. Additional Analyst Notes: - CVE Program Container: References: - https://www3.trustwave.com/spiderlabs/advisories/TWSL2014-009.txt
CVE ID: CVE-2014-10399 State: PUBLISHED Published: 2020-02-06T15:26:29 Last Updated: 2024-08-06T14:10:54.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: The session.lua library in CGILua 5.1.x uses the same ID for each session, which allows remote attackers to hijack arbitrary sessions. NOTE: this vulnerability was SPLIT from CVE-2014-2875. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Apr/318 - http://www.securityfocus.com/archive/1/531981/100/0/threaded - http://www.syhunt.com/en/index.php?n=Advisories.Cgilua-weaksessionid
CVE ID: CVE-2014-10400 State: PUBLISHED Published: 2020-02-06T15:26:31 Last Updated: 2024-08-06T14:10:54.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: The session.lua library in CGILua 5.0.x uses sequential session IDs, which makes it easier for remote attackers to predict the session ID and hijack arbitrary sessions. NOTE: this vulnerability was SPLIT from CVE-2014-2875. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Apr/318 - http://www.securityfocus.com/archive/1/531981/100/0/threaded - http://www.syhunt.com/en/index.php?n=Advisories.Cgilua-weaksessionid
CVE ID: CVE-2014-10401 State: PUBLISHED Published: 2020-09-11T18:37:52 Last Updated: 2024-08-06T14:10:54.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the DBI module before 1.632 for Perl. DBD::File drivers can open files from folders other than those specifically passed via the f_dir attribute. Additional Analyst Notes: - CVE Program Container: References: - https://rt.cpan.org/Public/Bug/Display.html?id=99508 - https://github.com/perl5-dbi/dbi/commit/caedc0d7d602f5b2ae5efc1b00f39efeafb7b05a - https://metacpan.org/pod/distribution/DBI/Changes#Changes-in-DBI-1.632-9th-Nov-2014 - https://usn.ubuntu.com/4509-1/
CVE ID: CVE-2014-10402 State: PUBLISHED Published: 2020-09-16T15:55:20 Last Updated: 2024-08-06T14:10:54.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the DBI module through 1.643 for Perl. DBD::File drivers can open files from folders other than those specifically passed via the f_dir attribute in the data source name (DSN). NOTE: this issue exists because of an incomplete fix for CVE-2014-10401. Additional Analyst Notes: - CVE Program Container: References: - https://rt.cpan.org/Public/Bug/Display.html?id=99508#txn-1911590 - https://lists.debian.org/debian-lts-announce/2022/05/msg00046.html
CVE ID: CVE-2014-123456 State: REJECTED Published: 2015-01-13T11:00:00 Last Updated: 2016-04-26T12:57:01 Description: No description available.
CVE ID: CVE-2014-125001 State: PUBLISHED Published: 2022-05-24T15:30:33.000Z Last Updated: 2025-04-15T14:38:41.497Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Cardo Systems Products: Scala Rider Q3 Problem Types: CWE-269 Description: A vulnerability classified as critical has been found in Cardo Systems Scala Rider Q3. Affected is the file /cardo/api of the Cardo-Updater. Unauthenticated remote code execution with root permissions is possible. Firewalling or disabling the service is recommended. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.remote-exploit.org/archives/2014/06/03/ride_with_the_devil/ -
ntainer: - CISA ADP Vulnrichment: References: - http://www.remote-exploit.org/archives/2014/06/03/ride_with_the_devil/ - https://vuldb.com/?id.13428
CVE ID: CVE-2014-125002 State: PUBLISHED Published: 2022-06-18T06:15:44.000Z Last Updated: 2025-04-15T14:23:42.301Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: unspecified Products: FFmpeg Problem Types: CWE-119 Description: A vulnerability was found in FFmpeg 2.0. It has been classified as problematic. Affected is the function dnxhd_init_rc of the file libavcodec/dnxhdenc.c. The manipulation leads to memory corruption. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit
Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=f1caaa1c61310beba705957e6366f0392a0b005b - https://vuldb.com/?id.12588
CVE ID: CVE-2014-125003 State: PUBLISHED Published: 2022-06-18T06:15:46.000Z Last Updated: 2025-04-15T14:23:34.861Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: unspecified Products: FFmpeg Problem Types: CWE-119 Description: A vulnerability was found in FFmpeg 2.0 and classified as problematic. This issue affects the function get_siz of the file libavcodec/jpeg2000dec.c. The manipulation leads to memory corruption. The attack may be initiated remotely. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=8001e9f7
Program Container: - CISA ADP Vulnrichment: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=8001e9f7d17e90b4b0898ba64e3b8bbd716c513c - https://vuldb.com/?id.12587
CVE ID: CVE-2014-125004 State: PUBLISHED Published: 2022-06-18T06:15:48.000Z Last Updated: 2025-04-15T14:23:28.004Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: unspecified Products: FFmpeg Problem Types: CWE-119 Description: A vulnerability has been found in FFmpeg 2.0 and classified as problematic. This vulnerability affects the function decode_hextile of the file libavcodec/vmnc.c. The manipulation leads to memory corruption. The attack can be initiated remotely. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit
Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=6ba02602aa7fc7d38db582e75b8b093fb3c1608d - https://vuldb.com/?id.12586
CVE ID: CVE-2014-125005 State: PUBLISHED Published: 2022-06-18T06:15:49.000Z Last Updated: 2025-04-15T14:23:20.144Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: unspecified Products: FFmpeg Problem Types: CWE-119 Description: A vulnerability, which was classified as problematic, was found in FFmpeg 2.0. This affects the function decode_vol_header of the file libavcodec/mpeg4videodec.c. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://git.videolan.org/?p=ffmpeg.git
nal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=3edc3b159503d512c919b3d5902f7026e961823a - https://vuldb.com/?id.12585
CVE ID: CVE-2014-125006 State: PUBLISHED Published: 2022-06-18T06:15:51.000Z Last Updated: 2025-04-15T14:23:13.073Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: unspecified Products: FFmpeg Problem Types: CWE-119 Description: A vulnerability, which was classified as problematic, has been found in FFmpeg 2.0. Affected by this issue is the function output_frame of the file libavcodec/h264.c. The manipulation leads to memory corruption. The attack may be launched remotely. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=co
lyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=8c55ff393340998faae887dfac19e7ef128e1e58 - https://vuldb.com/?id.12584
CVE ID: CVE-2014-125007 State: PUBLISHED Published: 2022-06-18T06:15:52.000Z Last Updated: 2025-04-15T14:23:06.453Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: unspecified Products: FFmpeg Problem Types: CWE-119 Description: A vulnerability classified as problematic was found in FFmpeg 2.0. Affected by this vulnerability is the function intra_pred of the file libavcodec/hevcpred_template.c. The manipulation leads to memory corruption. The attack can be launched remotely. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=
nalyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=dfefc9097e9b4bb20442e65454a40043bd189b3d - https://vuldb.com/?id.12583
CVE ID: CVE-2014-125008 State: PUBLISHED Published: 2022-06-18T06:15:54.000Z Last Updated: 2025-04-15T14:22:58.948Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: unspecified Products: FFmpeg Problem Types: CWE-119 Description: A vulnerability classified as problematic has been found in FFmpeg 2.0. Affected is the function vorbis_header of the file libavformat/oggparsevorbis.c. The manipulation leads to memory corruption. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%
Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=f5d1d1e4667ba346ea7e0f97e6d2756bc9d4abde - https://vuldb.com/?id.12582
CVE ID: CVE-2014-125009 State: PUBLISHED Published: 2022-06-18T06:15:55.000Z Last Updated: 2025-04-15T14:22:49.915Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: unspecified Products: FFmpeg Problem Types: CWE-119 Description: A vulnerability classified as problematic has been found in FFmpeg 2.0. This affects the function add_yblock of the file libavcodec/snow.h. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=61d5970
E Program Container: - CISA ADP Vulnrichment: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=61d59703c91869f4e5cdacd8d6be52f8b89d4ba4 - https://vuldb.com/?id.12393
CVE ID: CVE-2014-125010 State: PUBLISHED Published: 2022-06-18T06:15:57.000Z Last Updated: 2025-04-15T14:22:40.844Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: unspecified Products: FFmpeg Problem Types: CWE-119 Description: A vulnerability was found in FFmpeg 2.0. It has been rated as critical. Affected by this issue is the function decode_slice_header of the file libavcodec/h64.c. The manipulation leads to memory corruption. The attack may be launched remotely. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3
otes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=91253839e14cce9793ee93f184cef609ca8195d5 - https://vuldb.com/?id.12392
CVE ID: CVE-2014-125011 State: PUBLISHED Published: 2022-06-18T06:15:58.000Z Last Updated: 2025-04-15T14:22:34.094Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: unspecified Products: FFmpeg Problem Types: CWE-192 Description: A vulnerability was found in FFmpeg 2.0. It has been declared as problematic. Affected by this vulnerability is the function decode_frame of the file libavcodec/ansi.c. The manipulation leads to integer coercion error. The attack can be launched remotely. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://git.videolan.org/?p=ffmpeg.git
nal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=d42ec8433c687fcbccefa51a7716d81920218e4f - https://vuldb.com/?id.12391
CVE ID: CVE-2014-125012 State: PUBLISHED Published: 2022-06-18T06:16:00.000Z Last Updated: 2025-04-15T14:22:27.412Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: unspecified Products: FFmpeg Problem Types: CWE-192 Description: A vulnerability was found in FFmpeg 2.0. It has been classified as problematic. Affected is an unknown function of the file libavcodec/dxtroy.c. The manipulation leads to integer coercion error. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh
es: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=a392bf657015c9a79a5a13adfbfb15086c1943b9 - https://vuldb.com/?id.12390
CVE ID: CVE-2014-125013 State: PUBLISHED Published: 2022-06-18T06:16:02.000Z Last Updated: 2025-04-15T14:22:18.602Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: unspecified Products: FFmpeg Problem Types: CWE-119 Description: A vulnerability was found in FFmpeg 2.0 and classified as problematic. This issue affects the function msrle_decode_frame of the file libavcodec/msrle.c. The manipulation leads to memory corruption. The attack may be initiated remotely. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=c91
- CVE Program Container: - CISA ADP Vulnrichment: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=c919e1ca2ecfc47d796382973ba0e48b8f6f92a2 - https://vuldb.com/?id.12389
CVE ID: CVE-2014-125014 State: PUBLISHED Published: 2022-06-18T06:16:04.000Z Last Updated: 2025-04-15T14:22:10.921Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: unspecified Products: FFmpeg Problem Types: CWE-119 Description: A vulnerability classified as problematic was found in FFmpeg 2.0. Affected by this vulnerability is an unknown functionality of the component HEVC Video Decoder. The manipulation leads to memory corruption. The attack can be launched remotely. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit
Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=d1e6602665 - https://vuldb.com/?id.12367
CVE ID: CVE-2014-125015 State: PUBLISHED Published: 2022-06-18T06:16:05.000Z Last Updated: 2025-04-15T14:22:03.650Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: FFmpeg Problem Types: CWE-119 Description: A vulnerability classified as critical has been found in FFmpeg 2.0. Affected is the function read_var_block_data. The manipulation leads to memory corruption. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=18f94df8af - https://vuldb.com/?id.1
DP Vulnrichment: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=18f94df8af - https://vuldb.com/?id.12366
CVE ID: CVE-2014-125016 State: PUBLISHED Published: 2022-06-18T06:16:07.000Z Last Updated: 2025-04-15T14:21:56.670Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: unspecified Products: FFmpeg Problem Types: CWE-119 Description: A vulnerability was found in FFmpeg 2.0. It has been rated as problematic. This issue affects the function ff_init_buffer_info of the file utils.c. The manipulation leads to memory corruption. The attack may be initiated remotely. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=e5c722999
Program Container: - CISA ADP Vulnrichment: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=e5c7229999 - https://vuldb.com/?id.12365
CVE ID: CVE-2014-125017 State: PUBLISHED Published: 2022-06-18T06:16:08.000Z Last Updated: 2025-04-15T14:21:49.414Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: FFmpeg Problem Types: CWE-119 Description: A vulnerability classified as critical was found in FFmpeg 2.0. This vulnerability affects the function rpza_decode_stream. The manipulation leads to memory corruption. The attack can be initiated remotely. The name of the patch is Fixes Invalid Writes. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba
Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=77bb0004bbe18f1498cfecdc68db5f10808b6599 - https://vuldb.com/?id.12340
CVE ID: CVE-2014-125018 State: PUBLISHED Published: 2022-06-19T06:10:24.000Z Last Updated: 2025-04-15T14:21:41.130Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: unspecified Products: FFmpeg Problem Types: CWE-119 Description: A vulnerability, which was classified as problematic, has been found in FFmpeg 2.0. Affected by this issue is the function decode_slice_header. The manipulation leads to memory corruption. The attack may be launched remotely. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=8a3b85f3a7 - h
am Container: - CISA ADP Vulnrichment: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=8a3b85f3a7 - https://vuldb.com/?id.12296
CVE ID: CVE-2014-125019 State: PUBLISHED Published: 2022-06-19T06:10:26.000Z Last Updated: 2025-04-15T14:21:31.901Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: unspecified Products: FFmpeg Problem Types: CWE-119 Description: A vulnerability, which was classified as problematic, was found in FFmpeg 2.0. This affects the function decode_nal_unit of the component Slice Segment Handler. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://git.videolan.org/?p=ffmpeg.git%3
l Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=b25e84b739 - https://vuldb.com/?id.12297