4886 matches found
PT-2019-16117
Name of the Vulnerable Software and Affected Versions GPAC versions 0.8.0 through 0.9.0-development-20191109 Description An issue was discovered in GPAC, which results in memory leaks. The memory leaks occur in the metx New function in isomedia/box code base.c and the abst Read function in...
PT-2019-16114
Name of the Vulnerable Software and Affected Versions GPAC versions 0.8.0 through 0.9.0-development-20191109 Description An issue was discovered in the function trak Read in isomedia/box code base.c, which results in a use-after-free. Recommendations For GPAC version 0.8.0, update to a version th...
Unspecified Vulnerability in Connect Box EuroDOCSIS 3.0 Voice Gateway
Connect Box EuroDOCSIS 3.0 Voice Gateway is a home voice gateway device. A security vulnerability exists in the administration interface of the Connect Box EuroDOCSIS 3.0 Voice Gateway CH7465LG-NCIP-6.12.18.25-2p6-NOSH version, which originates from the program receiving a POST request on port 80...
CVE-2019-19967
The Administration page on Connect Box EuroDOCSIS 3.0 Voice Gateway CH7465LG-NCIP-6.12.18.25-2p6-NOSH devices accepts a cleartext password in a POST request on port 80, as demonstrated by the Password field to the xml/setter.xml URI...
CVE-2019-19967
The Administration page on Connect Box EuroDOCSIS 3.0 Voice Gateway CH7465LG-NCIP-6.12.18.25-2p6-NOSH devices accepts a cleartext password in a POST request on port 80, as demonstrated by the Password field to the xml/setter.xml URI...
Default credentials
The Administration page on Connect Box EuroDOCSIS 3.0 Voice Gateway CH7465LG-NCIP-6.12.18.25-2p6-NOSH devices accepts a cleartext password in a POST request on port 80, as demonstrated by the Password field to the xml/setter.xml URI...
CVE-2019-19967
The Administration page on Connect Box EuroDOCSIS 3.0 Voice Gateway CH7465LG-NCIP-6.12.18.25-2p6-NOSH devices accepts a cleartext password in a POST request on port 80, as demonstrated by the Password field to the xml/setter.xml URI...
CVE-2019-19967
The CVE-2019-19967 issue affects the Connect Box EuroDOCSIS 3.0 Voice Gateway CH7465LG-NCIP-6.12.18.25-2p6-NOSH, where the Administration page accepts a cleartext password in a POST to port 80 via xml/setter.xml. This enables potential exposure of credentials over the network (confidentiality imp...
PT-2019-16025
Name of the Vulnerable Software and Affected Versions Connect Box EuroDOCSIS 3.0 Voice Gateway CH7465LG-NCIP version 6.12.18.25-2p6-NOSH Description The Administration page on the device accepts a cleartext password in a POST request on port 80, specifically to the "xml/setter.xml" URI. This issu...
CVE-2019-19967: Cleartext Transmission of Sensitive Information
The Administration page on Connect Box EuroDOCSIS 3.0 Voice Gateway CH7465LG-NCIP-6.12.18.25-2p6-NOSH devices accepts a cleartext password in a POST request on port 80, as demonstrated by the Password field to the xml/setter.xml URI...
Xiaomi Mi Box Memory Corruption Vulnerability
Xiaomi Mi Box is a Xiaomi set-top box application. Xiaomi Mi Box suffers from a memory corruption vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the currently logged in user, potentially resulting in a denial of service condition...
Xiaomi Mi Box Display Corruption Exploit
The vulnerability allows rescaling and corrupting the Xiaomi Mi Box model: MIBOX3, build.id : MHC19 display without any privilege requirement, thus creating an opportunity for a non-privilege malicious app to disable the basic functionalities that the TV box is offering or can even be used for...
Xiaomi Mi Box Display Corruption
HI, I would like to report a security vulnerability in Xiaomi Mi Box model: MIBOX3, build.id : MHC19. The vulnerability allows rescaling and corrupting the display without any privilege requirement, thus creating an opportunity for a non-privilege malicious app to disable the basic functionalitie...
UBUNTU-CVE-2019-5875
Insufficient data validation in downloads in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...
FAAD2 Heap Buffer Overflow DoS
The vulnerability of the mp4ffreadmdhd function common/mp4ff/mp4atom.c in the Freeware Advanced Audio Decoder 2 FAAD2 is caused by reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created mp4 file...
WordPress plugmatter-optin-feature-box-lite plugin SQL injection vulnerability (CNVD-2019-41888)
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. plugmatter-optin-feature-box-lite is a feature list plugin used in it. The WordPress plugmatter-optin-feature-box-lite plugin...
WordPress plugmatter-optin-feature-box-lite plugin SQL injection vulnerability (CNVD-2019-42838)
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. plugmatter-optin-feature-box-lite is a feature list plugin used in it. A SQL injection vulnerability exists in the WordPress...
PT-2021-6709
Name of the Vulnerable Software and Affected Versions libheif version 1.4.0 Description The issue is related to an invalid memory read in the heif::Box iref::get references function, which can cause a Denial of Service or potentially other unspecified impact. It is also associated with a buffer...
strong-on-health-box.cratejoy.com Open Redirect vulnerability
Open Bug Bounty ID: OBB-1015027 Security Researcher 41PH4 Helped patch 18 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting strong-on-health-box.cratejoy.com website and its users...
