Lucene search
K

7637 matches found

0day.today
0day.today
added 2009/02/09 12:0 a.m.18 views

Nokia N95-8 (JPG File) Remote Crash PoC

Exploit for hardware platform in category dos / poc ======================================= Nokia N95-8 JPG File Remote Crash PoC ======================================= Application: Nokia N95-8 OS: Symbian ------------------------------------------------------ 1 - Description 2 - Vulnerability 3...

7AI score
Exploits0
Prion
Prion
added 2009/02/06 7:30 p.m.15 views

Sql injection

SQL injection vulnerability in album.php in Camera Life 2.6.2b4 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2008-3355...

7.5CVSS8.7AI score0.01103EPSS
Exploits1References4Affected Software1
NVD
NVD
added 2009/02/06 7:30 p.m.17 views

CVE-2008-6086

SQL injection vulnerability in album.php in Camera Life 2.6.2b4 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2008-3355...

7.5CVSS8.2AI score0.01103EPSS
Exploits1References4
NVD
NVD
added 2009/02/06 7:30 p.m.17 views

CVE-2008-6087

Cross-site scripting XSS vulnerability in topic.php in Camera Life 2.6.2b4 allows remote attackers to inject arbitrary web script or HTML via the name parameter...

4.3CVSS5.7AI score0.01598EPSS
Exploits1References4
Prion
Prion
added 2009/02/06 7:30 p.m.14 views

Cross site scripting

Cross-site scripting XSS vulnerability in topic.php in Camera Life 2.6.2b4 allows remote attackers to inject arbitrary web script or HTML via the name parameter...

4.3CVSS6.1AI score0.01598EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2009/02/06 7:0 p.m.21 views

CVE-2008-6086

SQL injection vulnerability in album.php in Camera Life 2.6.2b4 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2008-3355...

8.2AI score0.01103EPSS
Exploits1References4
Cvelist
Cvelist
added 2009/02/06 7:0 p.m.21 views

CVE-2008-6087

Cross-site scripting XSS vulnerability in topic.php in Camera Life 2.6.2b4 allows remote attackers to inject arbitrary web script or HTML via the name parameter...

5.7AI score0.01598EPSS
Exploits1References4
CVE
CVE
added 2009/02/06 7:0 p.m.39 views

CVE-2008-6086

The CVE-2008-6086 entry describes an SQL injection vulnerability in Camera Life 2.6.2b4, exposed via album.php. The vulnerability allows remote attackers to execute arbitrary SQL commands by manipulating the id parameter, representing a different vector from CVE-2008-3355. According to the NVD en...

7.5CVSS8.6AI score0.01103EPSS
Exploits1References4Affected Software1
CVE
CVE
added 2009/02/06 7:0 p.m.39 views

CVE-2008-6087

CVE-2008-6087 describes a cross-site scripting (XSS) vulnerability in the Camera Life application, specifically in topic.php of version 2.6.2b4, exploitable via the name parameter. The vulnerability allows remote attackers to inject arbitrary web script or HTML. The provided connected documents c...

4.3CVSS5.9AI score0.01598EPSS
Exploits1References4Affected Software1
Check Point Advisories
Check Point Advisories
added 2009/02/06 12:0 a.m.4 views

Update Protection against AXIS Communications Camera Control image_pan_tilt Buffer Overflow

A buffer overflow vulnerability was reported in the ActiveX Camera Control by AXIS Communications. A remote image/video monitoring solution, AXIS Camera Control is an ActiveX control with multiple functions that can be used over HTTP. The vulnerability is due to a boundary error that can be...

9.3CVSS7.7AI score0.05767EPSS
Exploits0
seebug.org
seebug.org
added 2009/02/02 12:0 a.m.23 views

AXIS Camera控件image_pan_tilt属性缓冲区溢出漏洞

AXIS Camera Control是一种可以在IE中观看网络流媒体的控件程序。 AXIS Camera Control的实现上存在缓冲溢出漏洞,远程恶意网站可能利用此漏洞控制用户客户端系统。 控件在处理超长的imagepantilt属性数据时存在堆溢出问题,远程恶意网站可以通过设置超长的数据触发溢出控制客户端系统。 Axis Communications Camera Control = 2.40.0.0 厂商补丁: Axis Communications ------------------- 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载:...

7.1AI score
Exploits0
Prion
Prion
added 2009/01/26 3:30 p.m.14 views

Heap overflow

Heap-based buffer overflow in the CamImage.CamImage.1 ActiveX control in AxisCamControl.ocx in AXIS Camera Control 2.40.0.0 allows remote attackers to execute arbitrary code via a long imagepantilt property value...

9.3CVSS8.3AI score0.05767EPSS
Exploits0References8Affected Software1
Kaspersky
Kaspersky
added 2009/01/26 12:0 a.m.34 views

KLA10051 ACE vulnerability in Axis Camera Control

A buffer overflow vulnerability was found in Axis Camera Control. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from the network at a point related to AxisCamControl.ocx via a specially designed imagepantilt property value. Origin...

9.3CVSS7.8AI score0.05767EPSS
Exploits0References3
securityvulns
securityvulns
added 2009/01/25 12:0 a.m.33 views

AXIS Camera Control ActiveX buffer overflow

Buffer overflow in imagepantilt property...

9.3CVSS4.3AI score0.05767EPSS
Exploits0References1Affected Software1
securityvulns
securityvulns
added 2009/01/25 12:0 a.m.42 views

Secunia Research: AXIS Camera Control "image_pan_tilt" Property Buffer Overflow

====================================================================== Secunia Research 23/01/2009 - AXIS Camera Control "imagepantilt" Property Buffer Overflow - ====================================================================== Table of Contents Affected...

9.3CVSS0.8AI score0.05767EPSS
Exploits0
Fedora
Fedora
added 2009/01/07 9:26 a.m.10 views

[SECURITY] Fedora 10 Update: zoneminder-1.23.3-2.fc10

ZoneMinder is a set of applications which is intended to provide a complete solution allowing you to capture, analyse, record and monitor any cameras y ou have attached to a Linux based machine. It is designed to run on kernels wh ich support the Video For Linux V4L interface and has been tested...

1.7AI score
Exploits0
NVD
NVD
added 2008/12/09 12:30 a.m.24 views

CVE-2008-4391

Stack-based buffer overflow in the SetSource method in the NetCamPlayerWeb11gv2 ActiveX control in NetCamPlayerWeb11gv2.ocx on the Cisco Linksys WVC54GC wireless video camera before firmware 1.25 allows remote attackers to execute arbitrary code via long invalid arguments...

9.3CVSS8.2AI score0.06205EPSS
Exploits1References4
NVD
NVD
added 2008/12/09 12:30 a.m.19 views

CVE-2008-4390

The Cisco Linksys WVC54GC wireless video camera before firmware 1.25 sends cleartext configuration data in response to a Setup Wizard remote-management command, which allows remote attackers to obtain sensitive information such as passwords by sniffing the network...

10CVSS7.3AI score0.03293EPSS
Exploits1References5
Cvelist
Cvelist
added 2008/12/09 12:0 a.m.24 views

CVE-2008-4390

The Cisco Linksys WVC54GC wireless video camera before firmware 1.25 sends cleartext configuration data in response to a Setup Wizard remote-management command, which allows remote attackers to obtain sensitive information such as passwords by sniffing the network...

7.2AI score0.03293EPSS
Exploits1References5
CVE
CVE
added 2008/12/09 12:0 a.m.42 views

CVE-2008-4391

CVE-2008-4391 affects Linksys WVC54GC, specifically the NetCamPlayerWeb11gv2.ocx ActiveX control. The issue is a stack-based/buffer overflow in SetSource that can be triggered by long invalid arguments in a specially crafted HTML page, potentially allowing remote code execution with the user’s pr...

9.3CVSS8.2AI score0.06205EPSS
Exploits1References4Affected Software1
Rows per page
Query Builder