329 matches found
PT-2022-12122 · Lens · Lens
Name of the Vulnerable Software and Affected Versions: Lens versions 5.2.6 and earlier Description: The issue allows attackers to execute arbitrary commands as the Lens user by making websocket connections from the victim's browser to Lens, enabling operation of the local terminal feature, when a...
Lens Access Control Vulnerability
Lens is a distribution of the OpenLens repository that contains Team Lens-specific customizations released under a legacy EULA. An authorization issue vulnerability exists in Lens that stems from a lack of websocket authentication leading to remote code execution when accessing a malicious websit...
Lens operating system command injection vulnerability
Lens is a distribution of the OpenLens repository that contains Team Lens-specific customizations released under the legacy EULA. An operating system command injection vulnerability exists in versions of Lens prior to 5.3.4 that originates when a customized helm chart configuration creates a helm...
CVE-2021-23154: Improper Control of Generation of Code
In Lens prior to 5.3.4, custom helm chart configuration creates helm commands from string concatenation of provided arguments which are then executed in the user's shell. Arguments can be provided which cause arbitrary shell commands to run on the system...
PT-2022-9366
Name of the Vulnerable Software and Affected Versions Lens versions prior to 5.3.4 Description The issue allows custom helm chart configuration to create helm commands from string concatenation of provided arguments, which are then executed in the user's shell. This can be exploited by providing...
Denial Of Service (DoS)
ffmpeg is vulnerable to denial of service. The vulnerability exists due a division by zero in function filterframe in libavfilter/vflenscorrection.c in Ffmpeg...
DEBIAN-CVE-2020-20892
An issue was discovered in function filterframe in libavfilter/vflenscorrection.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts due to a division by zero...
UBUNTU-CVE-2020-20892
An issue was discovered in function filterframe in libavfilter/vflenscorrection.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts due to a division by zero...
CVE-2020-20892
An issue was discovered in function filterframe in libavfilter/vflenscorrection.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts due to a division by zero...
Snapchat: CSRF when unlocking lenses leads to lenses being forcefully installed without user interaction
Hi, The url below allows a user to unlock a particular lens. Once they have opened the URL on their phone, Snapchat opens up and prompts the user to unlock this lens. https://www.snapchat.com/unlock/?type=SNAPCODE&uuid=6ff5a565fca249a1948b1963ee2881b4&metadata=01 By changing the value of type in...
lens-top.com Cross Site Scripting vulnerability OBB-1282553
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
PT-2019-6177 · FFmpeg +4 · Ffmpeg +4
Name of the Vulnerable Software and Affected Versions: Ffmpeg version 4.2.1 Description: The issue is related to a division by zero in the filter frame function of the libavfilter/vf lenscorrection.c component. This allows attackers to cause a Denial of Service or potentially gain access to...
August 17, 2019—KB4512534 (OS Build 17763.720)
None None...
Sensitive Information Disclosure
Augeas is a utility for editing configuration. Augeas parses configuration files in their native formats and transforms them into a tree. Configuration changes are made by manipulating this tree and saving it back into native configuration files. Augeas also uses "lenses" as basic building blocks...
VIVOTEK Network Camera Command Injection Vulnerability
VIVOTEK VIVOTEK Communications Co., Ltd. is a network camera and AV server manufacturer. A command injection vulnerability exists in VIVOTEK network cameras with firmware versions lower than XXXXXX-VVTK-0X06a, which can be exploited by authenticated users to execute arbitrary commands via...
rawlingsopticians.co.uk XSS vulnerability
Open Bug Bounty ID: OBB-665623 Description| Value ---|--- Affected Website:| rawlingsopticians.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2018-8977
In Exiv2 0.26, the Exiv2::Internal::printCsLensFFFF function in canonmnint.cpp allows remote attackers to cause a denial of service invalid memory access via a crafted file...
Pre-set accounts Access
The microprogramming software of the wireless video camera Lens Peek-a-View has vulnerabilities. There are pre-installed user accounts named “admin” with the password “2601hx” for access via UART, and user accounts named “user” and “guest” with passwords “user” and “guest” respectively for access...
[SECURITY] Fedora 25 Update: augeas-1.8.1-1.fc25
A library for programmatically editing configuration files. Augeas parses configuration files into a tree structure, which it exposes through its public API. Changes made through the API are written back to the initially read files. The transformation works very hard to preserve comments and...
Microsoft Windows HoloLens Remote Code Execution Vulnerability
Microsoft Windows 10 and Windows Server 2016 are both products of Microsoft Corporation USA. The former is a set of operating systems for personal computers and the latter is a server operating system. A remote code execution vulnerability exists in Microsoft Windows 10 version 1607 and Windows...