46 matches found
ZTE C520V21 Authentication Error Vulnerability
The ZTE C520V21 is a smart webcam from China's ZTE Corporation ZTE. An authentication error vulnerability exists in the ZTE C520V21 version 2.1.14 and earlier versions, which can be exploited by an attacker to access web services in an authorized browser and perform operations...
CVE-2019-3424
authentication issues vulnerability, which exists in V2.1.14 and below versions of C520V21 smart camera devices. An attacker can automatically obtain access to web services from the authorized browser of the same computer and perform operations...
Privilege escalation
ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows local users to achieve partial plaintext recovery for a CBC based ciphersuite via a cache-based side-channel attack...
CVE-2018-0498
ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows local users to achieve partial plaintext recovery for a CBC based ciphersuite via a cache-based side-channel attack...
openSUSE Security Update : mailman (openSUSE-SU-2011:0312-1)
mailman was updates to version 2.1.14 to fix several cross-site-scripting XSS vulnerabilities CVE-2011-0707, CVE-2010-3089. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update mailman-4271. The te...
SPIP 2.x - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/53983/info SPIP is prone to multiple unspecified cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user ...