Design/Logic Flaw

The Telnet service of Rubetek RV-3406, RV-3409, and RV-3411 cameras firmware versions v342, v339 can allow a remote attacker to gain access to RTSP and ONFIV services without authentication. Thus, the attacker can watch live streams from the camera, rotate the camera, change some settings...

CVE-2020-25747

CVE-2020-25747 affects Rubetek RV-3406, RV-3409, and RV-3411 cameras (firmware v342, v339). The Telnet service allows remote unauthenticated access to RTSP and ONFIV services, enabling an attacker to view live streams, rotate the camera, modify settings (brightness, clarity, time), restart the de...

PT-2020-6276

Name of the Vulnerable Software and Affected Versions Rubetek RV-3406, RV-3409, and RV-3411 cameras firmware versions v342, v339 Description A Cleartext Transmission issue allows an attacker to intercept and modify video data from the camera, as it is transmitted in an unencrypted form. The...

PT-2020-6275

Name of the Vulnerable Software and Affected Versions Rubetek RV-3406, RV-3409, and RV-3411 affected versions not specified Description The issue is related to insufficient authentication in the Telnet service of the Wi-Fi camera's firmware, allowing a remote attacker to gain unauthorized access ...

PT-2020-6277

Name of the Vulnerable Software and Affected Versions Rubetek cameras RV-3406, RV-3409, and RV-3411 firmware versions v342, v339 Description The issue is related to the Telnet service of the affected cameras, which allows a remote attacker to gain full control of the device using a high-privilege...

CVE-2020-25748: Cleartext Transmission of Sensitive Information

A Cleartext Transmission issue was discovered on Rubetek RV-3406, RV-3409, and RV-3411 cameras firmware versions v342, v339. Someone in the middle can intercept and modify the video data from the camera, which is transmitted in an unencrypted form. One can also modify responses from NTP and RTSP...

CVE-2020-25747: Missing Authentication for Critical Function

The Telnet service of Rubetek RV-3406, RV-3409, and RV-3411 cameras firmware versions v342, v339 can allow a remote attacker to gain access to RTSP and ONFIV services without authentication. Thus, the attacker can watch live streams from the camera, rotate the camera, change some settings...

RHEL 8 : python-paunch and openstack-tripleo-heat-templates (RHSA-2020:3406)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:3406 advisory. Library and utility to launch and manage containers using YAML based configuration data. openstack-tripleo-heat-templates is a collection of OpenStac...

CVE-2020-3406

Cisco SD-WAN vManage Software's web-based management interface is affected by an XSS vulnerability (CVE-2020-3406) caused by improper validation of user-supplied input. An authenticated remote attacker could entice a user to click a crafted link to execute arbitrary script code in the interface c...

CVE-2020-3406 Cisco SD-WAN vManage Software Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of the Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. The vulnerability exists because the web-based management interface does not...

alpnesstrail.ch Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1062324 Security Researcher D34D Helped patch 275 vulnerabilities Received 5 Coordinated Disclosure badges Received 12 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting alpnesstrail.ch website and it...

CVE-2015-3406

creationtimestamp| type| source ---|---|--- 2019-12-03 16:02:52+00:00| seen| https://t.me/cibsecurity/8445 2024-03-05 09:12:19+00:00| seen| https://t.me/ctinow/200025...

CVE-2015-3406

The PGP signature parsing in Module::Signature before 0.74 allows remote attackers to cause the unsigned portion of a SIGNATURE file to be treated as the signed portion via unspecified vectors...

CVE-2015-3406

CVE-2015-3406 affects the Perl module Module::Signature prior to 0.74, where the PGP signature parsing can cause the unsigned portion of a SIGNATURE file to be treated as the signed portion via unspecified vectors. The vulnerability can lead to partial integrity impact without confidentiality or ...

CVE-2015-3406

The PGP signature parsing in Module::Signature before 0.74 allows remote attackers to cause the unsigned portion of a SIGNATURE file to be treated as the signed portion via unspecified vectors...

Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-3406-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3406-1 advisory. It was discovered that an out of bounds read vulnerability existed in the associative array implementation in the Linux kernel. A local attacker could us...

Ubuntu: Security Advisory (USN-3406-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-3406

CVE-2017-3406 is a vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (UI subcomponent). Affected versions include 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 . The issue allows an unauthenticated attacker with network access via HTTP to compro...

CVE-2016-3406

CVE-2016-3406 affects Zimbra Collaboration Server prior to 8.7.0, where CSRF vulnerabilities exist in the Client uploader extension and in extension REST handlers (bugs 104294/104456). The impact is that an attacker could hijack a user’s authenticated session. Connected sources confirm the affect...

CVE-2016-3406

Multiple cross-site request forgery CSRF vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to hijack the authentication of unspecified victims via vectors involving 1 the Client uploader extension or 2 extension REST handlers, aka bugs 104294 and 104456...