Apache Cordova Plugin camera vulnerable to information exposure

Overview Apache Cordova Plugin camera is a plugin for Apache Cordova applications, which provides an API for taking pictures and for choosing images from the system image library. Vulnerable versions of Apache Cordova Plugin camera, when used in Android applications, use the external storage on t...

Unauthorized Access Vulnerability in Aqara Smart Camera G2H (Gateway Edition)

The Aqara Smart Camera G2H is a smart camera with 1080P image quality and 140° wide angle. An unauthorized access vulnerability exists in Aqara Smart Camera G2H Gateway Edition. An attacker can exploit the vulnerability to gain remote access control of the device over WiFi without the permission ...

Apache Cordova Access Control Error Vulnerability

Apache Cordova is a camera plug-in for Android from the Apache Foundation. An access control error vulnerability exists in Cordova Android, which can be exploited by an attacker to gain access to photos taken externally using the application...

CVE-2020-11990

We have resolved a security issue in the camera plugin that could have affected certain Cordova Android applications. An attacker who could install or lead the victim to install a specially crafted or malicious Android application would be able to access pictures taken with the app externally...

Security feature bypass

We have resolved a security issue in the camera plugin that could have affected certain Cordova Android applications. An attacker who could install or lead the victim to install a specially crafted or malicious Android application would be able to access pictures taken with the app externally...

CVE-2020-11990

We have resolved a security issue in the camera plugin that could have affected certain Cordova Android applications. An attacker who could install or lead the victim to install a specially crafted or malicious Android application would be able to access pictures taken with the app externally...

CVE-2020-11990

CVE-2020-11990 affects the Apache Cordova Plugin camera on Android. Vulnerability: when the plugin caches taken images to external storage, any app with READ_EXTERNAL_STORAGE/WRITE_EXTERNAL_STORAGE can access those cached image files, exposing user photos. Root cause: the external storage caching...

CVE-2020-26762

A stack-based buffer-overflow exists in Edimax IP-Camera IC-3116W v3.06 and IC-3140W v3.07, which allows an unauthenticated, unauthorized attacker to perform remote-code-execution due to a crafted GET-Request. The overflow occurs in binary ipcamcgi due to a missing type check in function...

CVE-2020-26762

A stack-based buffer-overflow exists in Edimax IP-Camera IC-3116W v3.06 and IC-3140W v3.07, which allows an unauthenticated, unauthorized attacker to perform remote-code-execution due to a crafted GET-Request. The overflow occurs in binary ipcamcgi due to a missing type check in function...

Stack overflow

A stack-based buffer-overflow exists in Edimax IP-Camera IC-3116W v3.06 and IC-3140W v3.07, which allows an unauthenticated, unauthorized attacker to perform remote-code-execution due to a crafted GET-Request. The overflow occurs in binary ipcamcgi due to a missing type check in function...

CVE-2020-26762

A stack-based buffer-overflow exists in Edimax IP-Camera IC-3116W v3.06 and IC-3140W v3.07, which allows an unauthenticated, unauthorized attacker to perform remote-code-execution due to a crafted GET-Request. The overflow occurs in binary ipcamcgi due to a missing type check in function...

CVE-2020-26762

Edimax IP-Camera IC-3116W (v3.06) and IC-3140W (v3.07) are affected by a stack-based buffer overflow in ipcam_cgi due to a missing type check in doGetSysteminfo(), enabling unauthenticated remote-code-execution via a crafted GET request. The issue is fixed in IC-3116W v3.08. Affected product line...

The vulnerability of the Windows Camera Codec Pack software on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Windows Camera Codec Pack software suite on Windows operating systems is related to object handling errors in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

VulnCheck KEV: CVE-2017-8223

On Wireless IP Camera P2P WIFICAM devices, an attacker can use the RTSP server on port 10554/tcp to watch the streaming without authentication via tcp/av01 or tcp/av00...

VulnCheck KEV: CVE-2017-8222

Wireless IP Camera P2P WIFICAM devices have an "Apple Production IOS Push Services" private RSA key and certificate stored in /system/www/pem/ck.pem inside the firmware, which allows attackers to obtain sensitive information...

VulnCheck KEV: CVE-2017-8221

Wireless IP Camera P2P WIFICAM devices rely on a cleartext UDP tunnel protocol aka the Cloud feature for communication between an Android application and a camera device, which allows remote attackers to obtain sensitive information by sniffing the network...

Apache Cordova 安全漏洞

Apache Cordova is a camera plug-in for Android from the Apache Foundation. An access control error vulnerability exists in Cordova Android, which can be exploited by an attacker to gain access to photos taken externally using the application...

The vulnerability of the Windows Camera Codec component of the Windows operating system allows attackers to disclose sensitive information that is protected by this component’s security measures.

The vulnerability of the Windows Camera Codec component of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose the protected information...

Command Execution Vulnerability in iray IR Camera AM310420

Arrow focuses on the R&D and manufacturing of infrared imaging technology and products with fully independent intellectual property rights, and is committed to providing professional and competitive infrared thermal imaging products and industry solutions for global customers. A command execution...

Unspecified Vulnerability in BASETech GE-131 BT-1837836

The BASETech GE-131 BT-1837836 is a Wi-Fi IP CCTV camera. The BASETech GE-131 BT-1837836 suffers from a device ID predictability vulnerability. An attacker can exploit this vulnerability to connect to the device...