Security Vulnerabilities fixed in Firefox 89 — Mozilla

A malicious website that causes an HTTP Authentication dialog to be spawned could trick the built-in password manager to suggest passwords for the currently active website instead of the website that triggered the dialog. This bug only affects Firefox for Android. Other operating systems are...

Logic Flaw Vulnerability in Finetree 5MP Network Camera

5MP Network Camera is a camera product. A logic flaw vulnerability exists in Finetree 5MP Network Camera, which can be exploited by an attacker to obtain sensitive information...

[ASA-202106-3] firefox: multiple issues

Arch Linux Security Advisory ASA-202106-3 ========================================= Severity: High Date : 2021-06-01 CVE-ID : CVE-2021-29959 CVE-2021-29960 CVE-2021-29961 CVE-2021-29966 CVE-2021-29967 Package : firefox Type : multiple issues Remote : Yes Link :...

Mozilla Firefox < 89.0

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 89.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2021-23 advisory. - Mozilla developers Christian Holler, Anny Gakhokidze, Alexandru Michis, Gabriele Svelto reported memory safet...

Unauthorized Access Vulnerability in Finetree-5MP-Network-Camera

Finetree-5MP-Network-Camera is a network camera. An unauthorized access vulnerability exists in Finetree-5MP-Network-Camera. An attacker can exploit this vulnerability to obtain sensitive information...

CVE-2021-23852

An authenticated attacker with administrator rights Bosch IP cameras can call an URL with an invalid parameter that causes the camera to become unresponsive for a few seconds and cause a Denial of Service DoS...

CVE-2021-23851

A specially crafted TCP/IP packet may cause the camera recovery image web interface to crash. It may also cause a buffer overflow which could enable remote code execution. The recovery image can only be booted with administrative rights or with physical access to the camera and allows the upload ...

CVE-2021-23850

A specially crafted TCP/IP packet may cause a camera recovery image telnet interface to crash. It may also cause a buffer overflow which could enable remote code execution. The recovery image can only be booted with administrative rights or with physical access to the camera and allows the upload...

Bug Exposes Eufy Camera Private Feeds to Random Users

Owners of Eufy home security cameras were warned this week of an internal server bug that allowed strangers to view, pan and zoom in on their home-video feeds for approximately one day. Inversely, customers were also suddenly given access to do the same to other users. The SNAFU, according to...

A Simple 1-Click Compromised Password Reset Feature Coming to Chrome Browser

Google on Tuesday announced a new feature to its password manager that could be used to change a stolen password automatically with a single tap. Automated password changes build on the tool's ability to check the safety of saved passwords. Thus when Chrome finds a password that may have been...

Logic Flaw Vulnerability in 5MP Network Camera of Zhejiang YUV Technology Co.

Zhejiang YUVE Technology Co. Ltd. is a global provider of AIoT products, solutions and full-stack capabilities. A logic flaw vulnerability exists in the 5MP Network Camera of Zhejiang YUV Technology Co. Ltd, which can be exploited by an attacker to arbitrarily add users...

Moxa Camera VPort 06EC-2V Denial of Service Vulnerability (CNVD-2021-36220)

Moxa Camera VPort 06EC-2V is a camera device from Moxa MOXA of Taiwan, China. A security vulnerability exists in the Moxa Camera VPort 06EC-2V. An attacker can cause a denial of service by dereferencing a NULL pointer via a fake lldp packet...

Unspecified Vulnerability in Moxa Camera VPort 06EC-2V (CNVD-2021-36216)

Moxa Camera VPort 06EC-2V is a camera device from Moxa MOXA of Taiwan, China. A security vulnerability exists in the Moxa Camera VPort 06EC-2V. An attacker can obtain compromised information by controlling a loop counter variable via a crafted lldp packet...

Moxa Camera VPort 06EC-2V Denial of Service Vulnerability (CNVD-2021-36219)

MOXA Moxa Camera VPort 06EC-2V is a camera device from Moxa Taiwan, China. A security vulnerability exists in the Moxa Camera VPort 06EC-2V. An attacker can cause a denial of service by passing a carefully crafted lldp packet to a negative number in the memcpy function...

Unspecified Vulnerability in Moxa Camera VPort 06EC-2V

Moxa Camera VPort 06EC-2V is a camera device from Moxa MOXA of Taiwan, China. A security vulnerability exists in the Moxa Camera VPort 06EC-2V. An attacker can obtain compromised information by controlling a loop counter variable via a crafted lldp packet...

Denial of Service Vulnerability in Moxa Camera VPort 06EC-2V

MOXA Camera VPort 06EC-2V is a camera device from MOXA Taiwan, China. A security vulnerability exists in the Moxa Camera VPort 06EC-2V. An attacker can cause a denial of service via a crafted lldp packet...

Unauthorized Access Vulnerability in Axis P1346 Network Camera

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in Axis P1346 Network Camera, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in Hikvision DS-2CD2612F-IS

The DS-2CD2612F-IS is a network camera. An unauthorized access vulnerability exists in the Hikvision DS-2CD2612F-IS. An attacker can exploit the vulnerability to obtain sensitive information...

Brickcom FB-200Np Camera Has Logic Flaw Vulnerability

Based in Taiwan, Brickcom is committed to developing a full range of security monitoring system products and has established its own brand "Brickcom", which has established a comprehensive distribution system in America, Europe, Asia and New Zealand and Australia. A logic flaw exists in the...

Unauthorized Access Vulnerability in Axis P1344 Network Camera

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in Axis P1344 Network Camera, which can be exploited by attackers to obtain sensitive information...