Linux Distros Unpatched Vulnerability : CVE-2025-21992

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: HID: ignore non-functional sensor in HP 5MP Camera The HP 5MP Camera USB ID 0408:5473 report...

Linux Distros Unpatched Vulnerability : CVE-2021-29959

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When a user has already allowed a website to access microphone and camera, disabling camera sharing would not fully prevent the website from re-enabling it...

Linux Distros Unpatched Vulnerability : CVE-2025-37971

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: staging: bcm2835-camera: Initialise dev in v4l2dev Commit 42a2f6664e18 staging: vc04services...

Linux Distros Unpatched Vulnerability : CVE-2019-11749

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability exists in WebRTC where malicious web content can use probing techniques on the getUserMedia API using constraints to reveal device properties of...

CVE-2025-8757

The CVE-2025-8757 entry concerns TRENDnet TV-IP110WN (firmware 1.2.2). Affected component: Embedded Boa Web Server, specifically the /server/boa.conf file. Root cause is described as a least-privilege violation in the manipulated configuration, allowing local attackers to exploit the issue. Explo...

TRENDnet TV-IP110WN security vulnerabilities

The TRENDnet TV-IP110WN is a wireless webcam from Trendnet, Inc. A security vulnerability exists in TRENDnet TV-IP110WN version 1.2.2, which stems from a least privilege violation in the file /server/boa.conf...

CVE-2025-21473

Memory corruption when using Virtual cdm Camera Data Mover to write registers...

D-Link DCS-6010L XSS

The vulnerability of the /vb.htm component in the microprogramming software of the D-Link DCS-6010L wireless IP camera is related to the lack of measures taken to protect the website structure when processing the paratest parameter. Exploiting this vulnerability allows a malicious actor to carry...

6,500 Servers Expose Axis Remoting Protocol; 4,000 in U.S. Vulnerable to Exploits

Cybersecurity researchers have disclosed multiple security flaws in video surveillance products from Axis Communications that, if successfully exploited, could expose them to takeover attacks. "The attack results in pre-authentication remote code execution on Axis Device Manager, a server used to...

CVE-2025-27068

CVE-2025-27068 describes memory corruption while processing an IOCTL command with an arbitrary address, affecting Qualcomm chipsets per multiple feeds. The core issue is a problematic handling path during IOCTL processing that can lead to corruption of memory (severity High, CVSSv3.1: 7.8; Local ...

CVE-2025-27068 Buffer Over-read in Camera

Memory corruption while processing an IOCTL command with an arbitrary address...

CVE-2025-21473 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera_Linux

Memory corruption when using Virtual cdm Camera Data Mover to write registers...

CVE-2025-21473

Memory corruption when using Virtual cdm Camera Data Mover to write registers...

CVE-2025-21473 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera_Linux

Memory corruption when using Virtual cdm Camera Data Mover to write registers...

CVE-2025-21461 Out-of-bounds Write in Camera_Linux

Memory corruption when programming registers through virtual CDM...

CVE-2025-21461

CVE-2025-21461 describes a memory corruption issue when programming registers through a virtual CDM in Qualcomm chipsets (Camera_Linux). The CVSS3.1 vector indicates Local access, Low attack complexity/privileges, no user interaction, with High impact to confidentiality, integrity, and availabili...

CVE-2025-21455 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera_Linux

Memory corruption while submitting blob data to kernel space though IOCTL...

PT-2025-32197

Name of the Vulnerable Software and Affected Versions: Vacron Camera affected versions not specified Description: A command injection vulnerability exists in the ping functionality of Vacron Cameras. This allows for remote code execution. The vulnerability was discovered by Steven C Yu of Trend...

(0Day) Vacron Camera ping Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Vacron Camera devices. Authentication is required to exploit this vulnerability. The specific flaw exists within the webs.cgi endpoint. The issue results from the lack of proper validation of a...

OESA-2025-1927 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: pcigeneric: Use pcitryresetfunction to avoid deadlock There are multiple places from where the recovery work gets scheduled asynchronously. Also,...