Huawei DP300 CIDAM Protocol Input Checksum Vulnerability (CNVD-2017-38106)

Huawei DP300 is a video conferencing terminal from Huawei, China.CIDAM is one of the messaging protocols. An input validation vulnerability exists in the CIDAM protocol in the Huawei DP300 due to the program failing to adequately validate specific information. A remote attacker could exploit this...

Huawei DP300, TP3206 and ViewPoint 9030 Weak Encryption Algorithm Vulnerability

Huawei DP300, TP3206 and ViewPoint 9030 are all products of Huawei, China.DP300 is a video conferencing endpoint.TP3206 is a panoramic video conferencing solution.ViewPoint 9030 is a multipoint control unit for video conferencing systems. A weak encryption algorithm vulnerability exists in the...

Shenzhen JetVision Technology Co., Ltd. video conferencing system has an overstepping access vulnerability

Shenzhen JetVision Technology Co., Ltd. video conferencing system is a new set of video conferencing communication system for customers in different industries to meet their video communication needs. There is an override access vulnerability in the video conferencing system of Shenzhen JetVision...

Buffer overflow vulnerability in SIP backup module of multiple Huawei products (CNVD-2017-37972)

Huawei DP300 and so on are products of Huawei, China.Huawei DP300 is a video conferencing end device.IPS Module is an intrusion prevention module.SIP backup is one of the SIP backup modules. A buffer overflow vulnerability exists in the SIP backup module in multiple Huawei products due to the...

Memory leak vulnerability in multiple Huawei products (CNVD-2017-35719)

Huawei DP300/RP200 and TE series are all-in-one desktop and HD video conferencing terminals launched by Huawei for high-end customers. A memory leak vulnerability exists in multiple Huawei products due to the XML parser failing to free memory when processing certain nodes. An attacker could explo...

Multiple Huawei products cross-border read vulnerability (CNVD-2017-34418)

Huawei RP200 and TE series are Huawei's all-in-one desktop and high-definition videoconferencing products for high-end customers. The out-of-bounds read vulnerability exists in several Huawei products, as the devices fail to adequately verify user input. A remote attacker could exploit this...

Mikogo 5.4.1.160608 - Local Credentials Disclosure Exploit

Exploit for windows platform in category local exploits !/usr/bin/env python Mikogo 5.4.1.160608 Local Credentials Disclosure Vendor: Snapview GmbH Product web page: https://www.mikogo.com Affected version: 5.4.1.160608 Summary: Mikogo is a desktop sharing software application for web conferencin...

Multiple Huawei products H323 protocol out-of-bounds read vulnerability

Huawei MAX PRESENCE is Huawei's SmartPresence videoconferencing system, Huawei TP3106 and TP3206 are both Huawei's Panorama SmartPresence products.H323 protocol is a standard audio/video transmission protocol, which is capable of realizing remote arraignment function. An out-of-bounds read...

H323 Protocol Memory Leakage Vulnerability in Multiple Huawei Products

Huawei MAX PRESENCE is Huawei's SmartPresence videoconferencing system, Huawei TP3106 and TP3206 are both Huawei's Panorama SmartPresence products.H323 protocol is a standard audio/video transmission protocol, which is capable of realizing remote arraignment function. A memory leak vulnerability...

Cisco Meeting Server Information Disclosure Vulnerability (CNVD-2017-32496)

Cisco Meeting Server formerly known as Acano Conferencing Server is the United States Cisco Cisco company's set of audio and video conferencing server software. An information disclosure vulnerability exists in Cisco Meeting Server. An attacker could exploit the vulnerability to obtain sensitive...

Sequoia Network Video Conferencing System suffers from st2-045 Remote Command Execution Vulnerability

Sequoia Network Video Conference System, also known as Sequoia Conference TV System, is a system equipment for individuals or groups in two or more different places to transmit sound, image and document information to each other through transmission lines and multimedia equipment to realize insta...

Input validation vulnerability in multiple Huawei products

Huawei DP300 and so on are products of Huawei, China. DP300 is a video conferencing terminal. eSpace 7950 is an intelligent IP video phone product of Huawei, China. An input validation vulnerability exists in multiple Huawei products, which stems from a lack of input validation in the program. A...

Code injection

Pexip Infinity before 14.2 allows remote attackers to cause a denial of service service restart or execute arbitrary code via vectors related to Conferencing Nodes...

CVE-2017-6551

Pexip Infinity before 14.2 allows remote attackers to cause a denial of service service restart or execute arbitrary code via vectors related to Conferencing Nodes...

CVE-2017-6551

Pexip Infinity before 14.2 allows remote attackers to cause a denial of service service restart or execute arbitrary code via vectors related to Conferencing Nodes...

CVE-2017-6551

Pexip Infinity before 14.2 allows remote attackers to cause a denial of service service restart or execute arbitrary code via vectors related to Conferencing Nodes...

CVE-2017-6551

CVE-2017-6551 : The provided records indicate that Pexip Infinity, versions prior to 14.2, is affected by a vulnerability in Conferencing Nodes that can be remotely triggered to cause a denial of service (service restart) or to execute arbitrary code. The exact vulnerable component or root cause ...

CVE-2017-3837

An HTTP Packet Processing vulnerability in the Web Bridge interface of the Cisco Meeting Server CMS, formerly Acano Conferencing Server, could allow an authenticated, remote attacker to retrieve memory contents, which could lead to the disclosure of confidential information. In addition, the...

CVE-2017-3837

CVE-2017-3837 affects Cisco Meeting Server (CMS), formerly Acano Conferencing Server. A vulnerability in the Web Bridge HTTP packet processing allows an authenticated, remote attacker with a valid Web Bridge session to retrieve memory contents, potentially leaking confidential data, and may cause...

SQL command execution vulnerability in the sysId parameter of Wyspeed V2 video conferencing system

Vizz V2 Video Conferencing System is a video conferencing system. A SQL command execution vulnerability exists in the sysId parameter of the Vizz V2 video conferencing system. It allows an attacker to remotely write a shell and gain server privileges...