PT-2020-14788

Name of the Vulnerable Software and Affected Versions temi Robox OS versions prior to 120 temi Android app versions up to 1.3.7931 Description The issue allows remote attackers to receive and answer calls intended for another temi user, granting motor control of the temi in addition to audio/vide...

Cross site scripting

A vulnerability in the API subsystem of Cisco Meetings App could allow an unauthenticated, remote attacker to retain and reuse the Traversal Using Relay NAT TURN server credentials that are configured in an affected system. The vulnerability is due to insufficient protection mechanisms for the TU...

Cisco Meetings App Missing TURN Server Credentials Expiration Vulnerability

A vulnerability in the API subsystem of Cisco Meetings App could allow an unauthenticated, remote attacker to retain and reuse the Traversal Using Relay NAT TURN server credentials that are configured in an affected system. The vulnerability is due to insufficient protection mechanisms for the TU...

Description of the cumulative update package for Office Communications Server 2007 R2, Audio/Video Conferencing Server: November 2010

Describes the bugs that are resolved in the November 2010 cumulative update package for Office Communications Server 2007 R2, Audio/Video Conferencing Server.SummaryThis article describes the issue that is fixed in the update package for Microsoft Office Communications Server 2007 R2, Audio/Video...

CVE-2013-7324

Webkit-GTK 2.x any version with HTML5 audio/video support based on GStreamer allows remote attackers to trigger unexpectedly high sound volume via malicious javascript. NOTE: this WebKit-GTK behavior complies with existing W3C standards and existing practices for GNOME desktop integration...

CVE-2013-7324

Webkit-GTK 2.x any version with HTML5 audio/video support based on GStreamer allows remote attackers to trigger unexpectedly high sound volume via malicious javascript. NOTE: this WebKit-GTK behavior complies with existing W3C standards and existing practices for GNOME desktop integration...

Blender Full Integer Overflow Code Execution

The vulnerability of the animation reproduction function in Blender’s 3D computer graphics software is caused by a numerical overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created AVI file...

GLSA-201909-07 : Simple DirectMedia Layer: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201909-07 Simple DirectMedia Layer: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Simple DirectMedia Layer. Please review the CVE identifiers referenced below for details. Impact : A remote attacker cou...

exempi: Infinite Loop in Chunk class in XMPFiles/source/FormatSupport/RIFF.cpp

An issue was discovered in Exempi before 2.4.4. Integer overflow in the Chunk class in XMPFiles/source/FormatSupport/RIFF.cpp allows remote attackers to cause a denial of service infinite loop via crafted XMP data in a .avi file...

Buffer Overflow Vulnerability in Virtual VCR Software

Virtual VCR is a DirectShow video capture application that allows you to capture audio and video to your hard drive in AVI file format. A buffer overflow vulnerability exists in the Virtual VCR software that can be exploited by an attacker to cause a denial of service to the server...

Legrand BTicino Driver Manager F454 1.0.51 - Cross-Site Request Forgery / Cross-Site Scripting

!-- CS...

OPENSUSE-SU-2019:1223-1 Security update for SDL

This update for SDL fixes the following issues: Security issues fixed: - CVE-2019-7572: Fixed a buffer over-read in IMAADPCMnibble in audio/SDLwave.c.bsc1124806. - CVE-2019-7578: Fixed a heap-based buffer over-read in InitIMAADPCM in audio/SDLwave.c bsc1125099. - CVE-2019-7576: Fixed heap-based...

CVE-2019-9483: Use of a Broken or Risky Cryptographic Algorithm

Amazon Ring Doorbell before 3.4.7 mishandles encryption, which allows attackers to obtain audio and video data, or insert spoofed video that does not correspond to the actual person at the door...

Ring Doorbell Flaw Opens Door to Spying

UPDATE A serious flaw in the popular Ring smart doorbell could allow an attacker on a shared WiFi network to spy on families’ video and audio footage, according to researchers. Ring Doorbell is a popular home security device acquired by Amazon. Researchers with BullGuard discovered a way to launc...

Google Android System Component Information Disclosure Vulnerability (CNVD-2019-05539)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which System is a component. An information disclosure vulnerability exists in the 'avrcparsvendorrsp' function of the System component in Android, which stems from a lack of...

Description of the cumulative update package for Office Communications Server 2007 R2, Audio/Video Conferencing Server: September 2011

Describes the cumulative update for Office Communications Server 2007 R2, Audio/Video Conferencing Server that is dated September 2011.SummaryThis article describes the cumulative update for Microsoft Office Communications Server 2007 R2, Audio/Video Conferencing Server that is dated September...

Chrome Bug Allowed Hackers to Find Out Everything Facebook Knows About You

With the release of Chrome 68, Google prominently marks all non-HTTPS websites as 'Not Secure' on its browser to make the web a more secure place for Internet users. If you haven't yet, there is another significant reason to immediately switch to the latest version of the Chrome web browser. Ron...

A Bug in Chrome Gives Bad Actors License to Play ‘20 Questions’ with Your Private Data

In a 2013 interview with The Telegraph, Eric Schmidt, then CEO of Google was quoted as saying: “You have to fight for your privacy or lose it.” Five years later, with the ‘Cambridge Analytica’ data breach scandal fresh in our memory, Eric Schmidt’s statement rings as a self-evident truth. Similar...

FFmpeg 'handle_eac3' function out-of-bounds read vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'handleeac3' function in the libavformat/movenc.c file in FFmpeg version 4.0.1, which originated from incorrect parameters AVCodecParameters being...

DEBIAN-CVE-2018-13300

In FFmpeg 3.2 and 4.0.1, an improper argument AVCodecParameters passed to the avprivrequestsample function in the handleeac3 function in libavformat/movenc.c may trigger an out-of-array read while converting a crafted AVI file to MPEG4, leading to a denial of service and possibly an information...