PJSIP competition condition issue vulnerability

PJSIP is a free and open source multimedia communications library written in C that implements standards-based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE.A contention problem vulnerability exists in PJSIP, which stems from improper handling of concurrent access when concurrent code need...

编号撤回

Oracle Communications Applications is an advanced communications and collaboration services application from Oracle Corporation USA. This CVE number has been withdrawn...

Docker before 1.3.3 does not properly validate image IDs which allows remote attackers to conduct path traversal attacks and spoof repositories via a crafted image in a (1) "docker load" operation or (2) "registry communications."

...

Unauthorized Access Vulnerability in Axis Communications AB AXIS 241SA

The AXIS 241SA is a network video server from Axis Communications AB. An unauthorized access vulnerability exists in the Axis Communications AB AXIS 241SA, which can be exploited by an attacker to obtain sensitive information and perform unauthorized operations...

Eclipse TinyDTLS encryption issue vulnerability

Eclipse TinyDTLS is a library for Datagram Transport Layer Security DTLS.Eclipse TinyDTLS is vulnerable to an encryption issue that could be exploited by an attacker to compute a key to decrypt DTLS communications...

Directory Traversal Vulnerability in P&T's Commercial Web Cloud Platform

"TP-LINK" is a leading global supplier of network communication equipment. A directory traversal vulnerability exists in TP-LINK's commercial network cloud platform, which can be exploited by attackers to obtain sensitive information...

多款Qualcomm产品输入验证错误漏洞

Qualcomm QCA6574AU and others are products of Qualcomm Incorporated Qualcomm.QCA6574AU is a central processing unit CPU product.SDX55 is a modem.IPQ6018 is a central processing unit CPU product. qualcomm An input validation error vulnerability exists in multiple products, which stems from a lack ...

Command Execution Vulnerability in Airspace Technologies WIFISKY Layer 7 Flow Control Router

Shenzhen Airspace Technology Co., Ltd "Airspace Technology" is a network communication equipment supplier rooted in Shenzhen radiation, dedicated to the research and development of network communication equipment products. A command execution vulnerability exists in the Airspace Technology WIFISK...

CVE-2021-1134

A vulnerability in the Cisco Identity Services Engine ISE integration feature of the Cisco DNA Center Software could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data. The vulnerability is due to an incomplete validation of the X.509 certificate used when...

Input validation

A vulnerability in the Cisco Identity Services Engine ISE integration feature of the Cisco DNA Center Software could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data. The vulnerability is due to an incomplete validation of the X.509 certificate used when...

MITRE Engenuity™ ATT&CK Evaluations & Framework

With the MITRE ATT Framework, you can simplify security communications across your organization while providing visibility to your security teams...

[SECURITY] Fedora 33 Update: openssh-8.4p1-7.fc33

SSH Secure SHell is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forward...

Command Execution Vulnerability in Intelligent Edge Gateway of China Mobile Communications Corporation Ltd.

China Mobile Communications Corporation CMCC, the largest mobile communications operator in China, specializes in mobile voice, data, IP telephony and multimedia services. A command execution vulnerability exists in the Smart Edge Gateway of China Mobile Communications Corporation, which can be...

Arbitrary File Read Vulnerability in Fiberhome Network Behavior Audit System

Established in 1999, Fiberhome Communication Technology Co., Ltd. is currently the only scientific research and industrial entity integrating three strategic technologies in the field of optical communication in China. An arbitrary file read vulnerability exists in Fiberhome Network Behavior Audi...

The vulnerability in the web interface of the Cisco Unified Communications Manager IM & Presence Service allows a perpetrator to execute arbitrary SQL commands and gain unauthorized access to modify data.

The vulnerability of the Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P web interface management interface is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary SQL commands an...

Unauthorized Access Vulnerability in Axis-M1104 Network Camera

Axis Communications AB is an IT company specializing in providing network video solutions. An unauthorized access vulnerability exists in Axis-M1104 Network Camera, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in Axis-207 Network Camera

Axis Communications AB is an IT company specializing in providing network video solutions. An unauthorized access vulnerability exists in Axis-207 Network Camera, which can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in NVS3000 Integrated Video Surveillance Platform of Datang Telecom Technology Co. Ltd (CNVD-2021-45156)

Datang Telecom Technology Co., Ltd. is a provider of products and integrated solutions in the field of information and communications. A SQL injection vulnerability exists in Datang Telecom Technology Co., Ltd.'s NVS3000 Integrated Video Surveillance Platform, which can be exploited by attackers ...

Bugs Lurking in Cisco UC Provisioning Platform

The Akkadian Provisioning Manager, which is used as a third-party provisioning tool within Cisco Unified Communications environments, has three high-severity security vulnerabilities that can be chained together to enable remote code execution RCE with elevated privileges, researchers said. They...

SUSE SLES11 Security Update : openssl (SUSE-SU-2020:14491-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2020:14491-1 advisory. - The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able to compute the pre-master secret in connections...