593 matches found
Input validation
Pexip Infinity before 24.1 has Improper Input Validation, leading to temporary denial of service via SIP...
Input validation
Pexip Infinity before 23.4 has a lack of input validation, leading to temporary denial of service via H.323...
CVE-2020-24615
Pexip Infinity before 24.1 has Improper Input Validation, leading to temporary denial of service via SIP...
Design/Logic Flaw
Pexip Infinity before 17 allows an unauthenticated remote attacker to achieve stored XSS via management web interface views...
CVE-2017-17477
Pexip Infinity before 17 allows an unauthenticated remote attacker to achieve stored XSS via management web interface views...
Input validation
Pexip Infinity 23.x before 23.3 has improper input validation, leading to a temporary software abort via RTP...
Design/Logic Flaw
Pexip Infinity before 18 allows Remote Denial of Service TLS handshakes in RTMP...
Privilege escalation
Pexip Infinity before 20.1 allows privilege escalation by restoring a system backup...
CVE-2020-24615
Summary: CVE-2020-24615 affects Pexip Infinity before version 24.1, due to improper input validation that can cause a temporary denial of service over SIP. Affected software (from provided docs): Pexip Infinity (video conferencing platform); versions prior to 24.1. Root cause (as stated): Imprope...
CVE-2020-24615
Pexip Infinity before 24.1 has Improper Input Validation, leading to temporary denial of service via SIP...
CVE-2020-13387
Pexip Infinity before 23.4 has a lack of input validation, leading to temporary denial of service via H.323...
CVE-2020-13387
The CVE-2020-13387 entry applies to Pexip Infinity prior to version 23.4, where a lack of input validation leads to a temporary denial of service via H.323. The vulnerability is documented across multiple sources (NVD/CNVD), confirming the affected product family and root cause, and indicating th...
CVE-2020-12824
Pexip Infinity 23.x prior to 23.3 is affected by an input-validation error that can cause a temporary software abort via RTP. The issue is documented across multiple sources (NVD and partner advisories) as Improper input validation leading to a transient crash in RTP handling. Affected product: P...
CVE-2020-12824
Pexip Infinity 23.x before 23.3 has improper input validation, leading to a temporary software abort via RTP...
CVE-2017-17477
CVE-2017-17477 concerns Pexip Infinity prior to 17, where an unauthenticated remote attacker can trigger stored cross-site scripting via the management web interface views. The vulnerability affects the admin-facing web UI and can lead to script execution in a user’s browser. The available connec...
CVE-2017-17477
Pexip Infinity before 17 allows an unauthenticated remote attacker to achieve stored XSS via management web interface views...
CVE-2019-7178
CVE-2019-7178 affects Pexip Infinity prior to 20.1, enabling privilege escalation by restoring a system backup. Connected sources confirm the vulnerability text and vendor advisories (Red Hat entry reiterates the same description). The exact root cause, vulnerable components, impacted configurati...
CVE-2019-7178
Pexip Infinity before 20.1 allows privilege escalation by restoring a system backup...
CVE-2019-7177
CVE-2019-7177 affects Pexip Infinity before 20.1. The vulnerability allows Code Injection onto nodes via an admin interface. The available sources identify the affected product/version and the attack vector as administrative input leading to code execution, but do not provide specific root-cause ...