PT-2018-1890

Name of the Vulnerable Software and Affected Versions libvorbis affected versions not specified Firefox versions prior to 59.0.1 Firefox ESR versions prior to 52.7.2 Thunderbird versions prior to 52.7 Description The issue is related to an error in the libvorbis multimedia library, causing a read...

CVE-2018-7661

Papenmeier WiFi Baby Monitor Free & Lite before 2.02.2 allows remote attackers to obtain audio data via certain requests to TCP ports 8258 and 8257...

CVE-2018-7661

Papenmeier WiFi Baby Monitor Free & Lite before 2.02.2 allows remote attackers to obtain audio data via certain requests to TCP ports 8258 and 8257...

Default credentials

Papenmeier WiFi Baby Monitor Free & Lite before 2.02.2 allows remote attackers to obtain audio data via certain requests to TCP ports 8258 and 8257...

CVE-2018-7661

CVE-2018-7661 affects Papenmeier WiFi Baby Monitor Free & Lite (before version 2.02.2). A remote attacker can obtain audio data by sending requests to TCP ports 8258 and 8257, the latter acting as a heartbeat while 8258 carries the audio stream. Public sources (CNVD, NVD, Exploit-DB) corroborate ...

CVE-2018-7661

Papenmeier WiFi Baby Monitor Free & Lite before 2.02.2 allows remote attackers to obtain audio data via certain requests to TCP ports 8258 and 8257...

PT-2018-18192

Name of the Vulnerable Software and Affected Versions Papenmeier WiFi Baby Monitor Free & Lite versions prior to 2.02.2 Description The issue allows remote attackers to obtain audio data via certain requests to TCP ports 8258 and 8257. Recommendations For versions prior to 2.02.2, update to versi...

CVE-2018-7661: Exposure of Sensitive Information to an Unauthorized Actor

Papenmeier WiFi Baby Monitor Free & Lite before 2.02.2 allows remote attackers to obtain audio data via certain requests to TCP ports 8258 and 8257...

Integer overflow

In all Qualcomm products with Android releases from CAF using the Linux kernel, while reading audio data from an unspecified driver, a buffer overflow or integer overflow could occur...

CVE-2017-8278

In all Qualcomm products with Android releases from CAF using the Linux kernel, while reading audio data from an unspecified driver, a buffer overflow or integer overflow could occur...

CVE-2017-8278

In all Qualcomm products with Android releases from CAF using the Linux kernel, while reading audio data from an unspecified driver, a buffer overflow or integer overflow could occur...

CVE-2017-8278

CVE-2017-8278 affects Qualcomm Audio driver in Android CAF builds (Linux kernel). Description across sources indicates an overflow in audio data handling (buffer/integer overflow) that could enable Elevation of Privilege via the Qualcomm audio stack. The CVE is listed under Qualcomm components wi...

Yandex Browser for iOS Security Bypass Vulnerability

Yandex Browser for iOS is an iOS-based browser from the Russian company Yandex. A security vulnerability exists in Yandex Browser for iOS versions prior to 16.10.0.2357, which stems from the program's failure to properly restrict the handling of facetime:// URLs. A remote attacker can exploit the...

CVE-2016-8507

Yandex Browser for iOS before 16.10.0.2357 does not properly restrict processing of facetime:// URLs, which allows remote attackers to initiate facetime-call without user's approval and obtain video and audio data from a device via a crafted web site...

CVE-2016-8507

Yandex Browser for iOS before 16.10.0.2357 does not properly restrict processing of facetime:// URLs, which allows remote attackers to initiate facetime-call without user's approval and obtain video and audio data from a device via a crafted web site...

CVE-2016-7577

An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. The issue involves the "FaceTime" component, which allows remote attackers to trigger memory corruption and obtain audio data from a call that appeared to have ended...

CVE-2016-7577

An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. The issue involves the "FaceTime" component, which allows remote attackers to trigger memory corruption and obtain audio data from a call that appeared to have ended...

Memory corruption

An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. The issue involves the "FaceTime" component, which allows remote attackers to trigger memory corruption and obtain audio data from a call that appeared to have ended...

CVE-2016-7577

An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. The issue involves the "FaceTime" component, which allows remote attackers to trigger memory corruption and obtain audio data from a call that appeared to have ended...

CVE-2016-7577

An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. The issue involves the "FaceTime" component, which allows remote attackers to trigger memory corruption and obtain audio data from a call that appeared to have ended...