CVE-2024-0642

Inadequate access control in the C21 Live Encoder and Live Mosaic product, version 5.3. This vulnerability allows a remote attacker to access the application as an administrator user through the application endpoint, due to lack of proper credential management...

Design/Logic Flaw

Inadequate access control in the C21 Live Encoder and Live Mosaic product, version 5.3. This vulnerability allows a remote attacker to access the application as an administrator user through the application endpoint, due to lack of proper credential management...

CVE-2024-0643

CVE-2024-0643 affects C21 Live Encoder and Live Mosaic, version 5.3. The issue is an unrestricted upload of dangerous file types in the product, enabling a remote attacker to upload various file extensions without restrictions and potentially achieve full system compromise. Some sources corrobora...

CVE-2024-0643 Unrestricted upload of dangerous file types in C21 Live Encoder and Live Mosaic

Unrestricted upload of dangerous file types in the C21 Live Encoder and Live Mosaic product, version 5.3. This vulnerability allows a remote attacker to upload different file extensions without any restrictions, resulting in a full system compromise...

CVE-2024-0643 Unrestricted upload of dangerous file types in C21 Live Encoder and Live Mosaic

Unrestricted upload of dangerous file types in the C21 Live Encoder and Live Mosaic product, version 5.3. This vulnerability allows a remote attacker to upload different file extensions without any restrictions, resulting in a full system compromise...

CVE-2024-0642

CVE-2024-0642 affects C21 Live Encoder and Live Mosaic (v5.3). Root cause: inadequate access control due to improper credential management, enabling a remote unauthenticated attacker to access the application as an administrator via the application endpoint. CVSS v3.1 base score 9.8 (CRITICAL) wi...

PT-2024-15711 · Unknown · C21 Live Encoder/Live Mosaic

Name of the Vulnerable Software and Affected Versions: C21 Live Encoder and Live Mosaic version 5.3 Description: The issue is related to inadequate access control, allowing a remote attacker to access the application as an administrator user due to lack of proper credential management. This can b...

C21 Live encoder Access Control Error Vulnerability

Cires21 C21 Live encoder is a software for various encoding and transcoding needs from Cires21. An Access Control Error vulnerability exists in C21 Live Encoder and Live Mosaic version 5.3 that stems from a lack of proper credentials management, which allows an attacker to ask the application as ...

C21 Live encoder code issue vulnerability

Cires21 C21 Live encoder is a software from Cires21 for various encoding and transcoding needs. A code issue vulnerability exists in C21 Live Encoder and Live Mosaic version 5.3 that stems from the presence of an arbitrary file upload vulnerability...

PT-2024-15712 · Unknown · C21 Live Encoder/Live Mosaic

Name of the Vulnerable Software and Affected Versions: C21 Live Encoder and Live Mosaic product version 5.3 Description: The issue allows a remote attacker to upload different file extensions without any restrictions, resulting in a full system compromise. This is due to an unrestricted upload of...

CVE-2023-24286

A crafted save file can cause a buffer overrun in the Mosaic puzzle...

Weak Password Vulnerability in NPort 5210A of Mosaic Technology (Shanghai) Co.

Mosa Technology Shanghai Co., Ltd. is a company whose business scope includes technology development, technical consultation, technical services, etc. in the field of communication equipment. A weak password vulnerability exists in NPort 5210A of Mosa Technologies Shanghai Co. Ltd. that can be...

CVE-2023-24286

A crafted save file can cause a buffer overrun in the Mosaic puzzle...

PT-2023-19513 · Canonical +4 · Sgt-Puzzles

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned Description: A crafted save file can cause a buffer overrun in the Mosaic puzzle. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

UBUNTU-CVE-2023-24286

A crafted save file can cause a buffer overrun in the Mosaic puzzle...

SUSE CVE-2014-3423

lisp/net/browse-url.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a /tmp/Mosaic. temporary file...

CVE-2022-31521

The Niyaz-Mohamed/mosaic repository through 1.0.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31521

The Niyaz-Mohamed/mosaic repository through 1.0.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31521

The CVE-2022-31521 entry concerns the Niyaz-Mohamed/mosaic repository up to version 1.0.0, where an absolute path traversal is possible due to unsafe usage of Flask’s send_file. The Red Hat/CVE, NVD, OSV and other sources confirm this underlying flaw stems from how file paths are handled in send_...

Mosiac 路径遍历漏洞

Mosiac is a web application for pixelated images. A security vulnerability exists in Mosiac version 1.0.0 and prior versions, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...