CVE-2008-5109

The default configuration of Adobe Flash Media Server FMS 3.0 does not enable SWF Verification for 1 RTMPE and 2 RTMPTE sessions, which makes it easier for remote attackers to make copies of video content via stream-capture software...

CVE-2009-3792

Directory traversal vulnerability in Adobe Flash Media Server FMS before 3.5.3 allows attackers to load arbitrary DLL files via unspecified vectors...

Logic Flaw Vulnerability in MSS Streaming Media Server at Suzhou Kodak Technology Co.

Ltd. is a leading provider of video and security products and solutions. A logic flaw vulnerability exists in the MSS streaming media server of Suzhou Kedar Technology Co. Ltd. that can be exploited by an attacker to illegally create a new user account and elevate privileges during login...

CVE-2025-31499

Jellyfin is an open source self hosted media server. Versions before 10.10.7 are vulnerable to argument injection in FFmpeg. This can be leveraged to possibly achieve remote code execution by anyone with credentials to a low-privileged user. This vulnerability was previously reported in...

CVE-2025-32012

Jellyfin is an open source self hosted media server. In versions 10.9.0 to before 10.10.7, the /System/Restart endpoint provides administrators the ability to restart their Jellyfin server. This endpoint is intended to be admins-only, but it also authorizes requests from any device in the same...

CVE-2025-32012

Jellyfin is an open source self hosted media server. In versions 10.9.0 to before 10.10.7, the /System/Restart endpoint provides administrators the ability to restart their Jellyfin server. This endpoint is intended to be admins-only, but it also authorizes requests from any device in the same...

CVE-2024-32656

Ant Media Server is live streaming engine software. A local privilege escalation vulnerability in present in versions 2.6.0 through 2.8.2 allows any unprivileged operating system user account to escalate privileges to the root user account on the system. This vulnerability arises from Ant Media...

CVE-2024-4464

Authorization bypass through user-controlled key vulnerability in streaming service in Synology Media Server before 1.4-2680, 2.0.5-3152 and 2.2.0-3325 allows remote attackers to read specific files via unspecified vectors...

The vulnerability of the Streaming Service of the Synology Media Server, which allows a hacker to read arbitrary files.

The vulnerability of the Streaming Service in Synology Media Server lies in the ability to bypass authentication by using a user-controlled key. Exploiting this vulnerability allows an attacker to remotely access and read arbitrary files...

Out-of-bounds Read

Ant-Media-Server is vulnerable to Out-of-bounds Read. The vulnerability is due to insufficient input sanitization in the logging mechanism, allowing user-controllable data, such as identifiers or sensitive information, to be included in log entries without proper filtering or validation. This cou...

CVE-2024-4464

Authorization bypass through user-controlled key vulnerability in streaming service in Synology Media Server before 1.4-2680, 2.0.5-3152 and 2.2.0-3325 allows remote attackers to read specific files via unspecified vectors...

CVE-2024-4464

Authorization bypass through user-controlled key vulnerability in streaming service in Synology Media Server before 1.4-2680, 2.0.5-3152 and 2.2.0-3325 allows remote attackers to read specific files via unspecified vectors...

CVE-2024-4464

Authorization bypass through user-controlled key vulnerability in streaming service in Synology Media Server before 1.4-2680, 2.0.5-3152 and 2.2.0-3325 allows remote attackers to read specific files via unspecified vectors...

CVE-2024-4464

CVE-2024-4464 affects Synology Media Server prior to versions 1.4-2680, 2.0.5-3152, and 2.2.0-3325. The root cause is an authorization bypass via a user-controlled key in the streaming service, enabling remote attackers to read specific files through unspecified vectors. Public references corrobo...

Synology Media Server 安全漏洞

Synology Media Server is a media server from China-based Synology Inc. A security vulnerability exists in Synology Media Server for DSM version 7.2, version 7.1, and Synology Media Server for SRM version 1.3, which stems from an authorization bypass vulnerability via user-controlled key, which...

Ant-Media-Server vulnerable to Improper Output Neutralization for Logs

Ant-Media-Server v2.8.2 is affected by Improper Output Neutralization for Logs. The vulnerability stems from insufficient input sanitization in the logging mechanism. Without proper filtering or validation, user-controllable data, such as identifiers or other sensitive information, can be include...

GHSA-2GX6-QRPP-C4P3 Ant-Media-Server vulnerable to Improper Output Neutralization for Logs

Ant-Media-Server v2.8.2 is affected by Improper Output Neutralization for Logs. The vulnerability stems from insufficient input sanitization in the logging mechanism. Without proper filtering or validation, user-controllable data, such as identifiers or other sensitive information, can be include...

CVE-2024-35371

Ant-Media-Serverv2.8.2 is affected by Improper Output Neutralization for Logs. The vulnerability stems from insufficient input sanitization in the logging mechanism. Without proper filtering or validation, user-controllable data, such as identifiers or other sensitive information, can be included...

Ant Media Server 安全漏洞

Ant Media Server is a real-time streaming engine software from Ant Media open source. It provides adaptive ultra-low latency streaming by using WebRTC technology with a latency of about 0.5 seconds. A security vulnerability exists in Ant Media Server version v2.8.2, which stems from insufficient...

Access Control Bypass

Overview Affected versions of this package are vulnerable to Access Control Bypass through the gstrtspmediagetrates function inrtsp-media.c file. An attacker can disrupt service operations by sending a sequence of specially crafted hexstream requests. Remediation Upgrade gstreamer to version 1.28...