CVE-2023-30467: Improper Authorization

This vulnerability exists in Milesight 4K/H.265 Series NVR models MS-Nxxxx-xxG, MS-Nxxxx-xxE, MS-Nxxxx-xxT, MS-Nxxxx-xxH and MS-Nxxxx-xxC, due to improper authorization at the Milesight NVR web-based management interface. A remote attacker could exploit this vulnerability by sending a specially...

CVE-2023-30466: Weak Password Recovery Mechanism for Forgotten Password

This vulnerability exists in Milesight 4K/H.265 Series NVR models MS-Nxxxx-xxG, MS-Nxxxx-xxE, MS-Nxxxx-xxT, MS-Nxxxx-xxH and MS-Nxxxx-xxC, due to a weak password reset mechanism at the Milesight NVR web-based management interface. A remote attacker could exploit this vulnerability by sending a...

CVE-2023-25437

An issue was discovered in vTech VCS754 version 1.1.1.A before 1.1.1.H, allows attackers to gain escalated privileges and gain sensitive information due to cleartext passwords passed in the raw HTML...

Vtech VCS754 安全漏洞

The Vtech VCS754 is a conference phone from Vtech Hong Kong, China. A security vulnerability exists in the Vtech VCS754 version 1.1.1.A to versions prior to 1.1.1.H, which originates from passing a plaintext password in raw HTML. An attacker could exploit the vulnerability to escalate privileges...

PT-2023-20059 · Vtech · Vtech Vcs754

Name of the Vulnerable Software and Affected Versions: vTech VCS754 versions 1.1.1.A through 1.1.1.G Description: An issue was discovered that allows attackers to gain escalated privileges and gain sensitive information due to cleartext passwords passed in the raw HTML. Recommendations: For...

The vulnerability of the decoder_context::processSliceSegmentHeader function (decctx.cc) in the implementation of the h.265 Libde265 video codec allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the decodercontext::processSliceSegmentHeader function decctx.cc in the H.265 Libde265 video codec implementation is related to pointer swapping errors. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the...

Microsoft Windows Lock Screen 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Lock Screen. The following products and editions are affected:Windows Server 2019 Server Core installation,Window...

The vulnerability of the `put_epel_hv_fallback` function in the `fallback-motion.cc` component of the h.265 Libde265 codec implementation allows a perpetrator to trigger a service failure.

The vulnerability of the putepelhvfallback function in the fallback-motion.cc component of the h.265 Libde265 codec implementation is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to cause service failures...

Microsoft Windows Resilient File System (ReFS) 安全漏洞

Microsoft Windows Resilient File System ReFS is a resilient file system from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Resilient File System ReFS. The following products and versions are affected: Windows 11 Version 22H2 for ARM64-based Systems,Windows 11...

K00194184: Linux kernel Voice Over IP H.323 vulnerability CVE-2020-14305

Security Advisory Description An out-of-bounds memory write flaw was found in how the Linux kernels Voice Over IP H.323 connection tracking functionality handled connections on ipv6 port 1720. This flaw allows an unauthenticated remote user to crash the system, causing a denial of service. The...

SUSE CVE-2004-0097

Multiple vulnerabilities in PWLib before 1.6.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol...

SUSE CVE-2005-1468

Multiple unknown vulnerabilities in the 1 WSP, 2 Q.931, 3 H.245, 4 KINK, 5 MGCP, 6 RPC, 7 SMBMailslot, and 8 SMB NETLOGON dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service crash via unknown vectors that lead to a null dereference...

SUSE CVE-2006-4250

Buffer overflow in man and mandb man-db 2.4.3 and earlier allows local users to execute arbitrary code via crafted arguments to the -H flag...

SUSE CVE-2014-9839

magick/colormap-private.h in ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service out-of-bounds access...

SUSE CVE-2015-0797

GStreamer before 1.4.5, as used in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 on Linux, allows remote attackers to cause a denial of service buffer over-read and application crash or possibly execute arbitrary code via crafted H.264 video data in an m4v...

SUSE CVE-2021-38198

arch/x86/kvm/mmu/pagingtmpl.h in the Linux kernel before 5.12.11 incorrectly computes the access permissions of a shadow page, leading to a missing guest protection page fault...

Microsoft Windows HTTP.sys 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows HTTP.sys. The following products and versions are affected: Windows Server 2022,Windows Server 2022 Server Core installation,Windows 1...

CVE-2023-25719

ConnectWise Control before 22.9.10032 formerly known as ScreenConnect fails to validate user-supplied parameters such as the Bin/ConnectWiseControl.Client.exe h parameter. This results in reflected data and injection of malicious code into a downloaded executable. The executable can be used to...

CVE-2023-25719: Improper Neutralization of Special Elements in Output Used by a Downstream Component

ConnectWise Control before 22.9.10032 formerly known as ScreenConnect fails to validate user-supplied parameters such as the Bin/ConnectWiseControl.Client.exe h parameter. This results in reflected data and injection of malicious code into a downloaded executable. The executable can be used to...

Debian: Security Advisory (DSA-5346-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...