PT-2023-12310 · Teradek · Teradek Slice

Name of the Vulnerable Software and Affected Versions: Teradek Slice 1st generation firmware versions 7.3.x and earlier Description: The issue allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. This is a result of a Cross Site Scripting XSS...

Teradek Slice 跨站脚本漏洞

Teradek Slice is a rackmount video decoder from Teradek. A security vulnerability exists in Teradek Slice 1st generation firmware version 7.3.x and earlier. An attacker could exploit the vulnerability to execute arbitrary code via the Friendly Name field in System Information Settings...

PT-2023-12313 · Teradek · Bond Pro +2

Name of the Vulnerable Software and Affected Versions: Teradek Bond, Bond 2 and Bond Pro versions 7.3.x and earlier Description: A Cross Site Scripting XSS issue allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. The vendor states that the...

PT-2023-12312 · Teradek · Teradek Vidiu Mini +1

Name of the Vulnerable Software and Affected Versions: Teradek VidiU / VidiU Mini versions 3.0.8 and earlier Description: A Cross Site Scripting XSS issue allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. The product has reached End of Life...

CVE-2021-37377: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Teradek Brik firmware version 7.2.x and earlier allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. NOTE: Vedor states the product has reached End of Life and will not be receiving any firmware updates...

PT-2023-12311

Name of the Vulnerable Software and Affected Versions Teradek Clip all firmware versions Description The issue allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. This is a result of a Cross Site Scripting XSS issue. The vendor has stated that...

Teradek Sphere 跨站脚本漏洞

Teradek Sphere is a real-time monitoring and streaming solution from Teradek. A security vulnerability exists in Teradek Sphere. An attacker could exploit the vulnerability to execute arbitrary code via the Friendly Name field in System Information Settings...

CVE-2021-37375: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Teradek VidiU / VidiU Mini firmware version 3.0.8 and earlier allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. NOTE: Vedor states the product has reached End of Life and will not be receiving any...

CVE-2021-37373: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Teradek Slice 1st generation firmware 7.3.x and earlier allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. NOTE: Vedor states the product has reached End of Life and will not be receiving any firmware...

CVE-2021-37374: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Teradek Clip all firmware versions allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. NOTE: Vedor states the product has reached End of Life and will not be receiving any firmware updates to address...

Teradek Clip 跨站脚本漏洞

Teradek Clip is Teradek's video signal transmitter for drones with encoding and wireless signal transmission. A security vulnerability exists in Teradek Clip. An attacker could use this vulnerability to execute arbitrary code via the Friendly Name field in System Information Settings...

Teradek VidiU 跨站脚本漏洞

Teradek VidiU is Teradek's device for transmitting HD video signals over a network. A security vulnerability exists in Teradek VidiU / VidiU Mini firmware version 3.0.8 and earlier versions. An attacker can exploit the vulnerability to execute arbitrary code via the Friendly Name field in System...

CVE-2021-37379: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Teradek Sphere all firmware versions allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. NOTE: Vedor states the product has reached End of Life and will not be receiving any firmware updates to address...

PT-2023-12315 · Teradek · Teradek Cube Pro +1

Name of the Vulnerable Software and Affected Versions: Teradek Cube and Cube Pro versions 7.3.x and earlier Description: The issue allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. This is a result of a Cross Site Scripting XSS vulnerability...

Teradek Bond 跨站脚本漏洞

Teradek Bond is Teradek's portable, real-time streaming media delivery solution. A security vulnerability exists in Teradek Bond version 7.3.x and prior versions. An attacker could exploit the vulnerability to execute arbitrary code via the Friendly Name field in System Information Settings...

CVE-2021-37378: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Teradek Cube and Cube Pro firmware version 7.3.x and earlier allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. NOTE: Vedor states the product has reached End of Life and will not be receiving any...

Teradek Cube 跨站脚本漏洞

Teradek Cube is a video decoder from Teradek. A security vulnerability exists in Teradek Cube version 7.3.x and prior versions. An attacker could exploit the vulnerability to execute arbitrary code via the Friendly Name field in System Information Settings...

CVE-2021-37373

Cross Site Scripting XSS vulnerability in Teradek Slice 1st generation firmware 7.3.x and earlier allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. NOTE: Vedor states the product has reached End of Life and will not be receiving any firmware...

PT-2023-34904 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.271 Description: The issue is related to the f2fs component, where a panic can be avoided if the extent tree is not created. The actual impact and attack plausibility have not yet been proven...

PT-2025-49656

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s f2fs file system related to information disclosure. Specifically, when converting an inline directory to a regular directory, the f2fs move inline...