Lucene search
+L

1349 matches found

NVD
NVD
added 2024/05/03 3:16 a.m.30 views

CVE-2023-51624

D-Link DCS-8300LHV2 RTSP ValidateAuthorizationHeader Nonce Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DCS-8300LHV2 IP cameras. Authentication is not required to...

8.8CVSS9.1AI score0.01315EPSS
SaveExploits0References2
OSV
OSV
added 2024/05/03 3:16 a.m.8 views

CVE-2023-51624

D-Link DCS-8300LHV2 RTSP ValidateAuthorizationHeader Nonce Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DCS-8300LHV2 IP cameras. Authentication is not required to...

8.8CVSS6.3AI score0.01315EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/05/03 2:15 a.m.31 views

CVE-2023-51626 D-Link DCS-8300LHV2 RTSP ValidateAuthorizationHeader Username Stack-Based Buffer Overflow Remote Code Execution Vulnerability

D-Link DCS-8300LHV2 RTSP ValidateAuthorizationHeader Username Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DCS-8300LHV2 IP cameras. Authentication is not required...

8.8CVSS7.8AI score0.01315EPSS
SaveExploits0References2
CVE
CVE
added 2024/05/03 2:15 a.m.84 views

CVE-2023-51626

The CVE-2023-51626 entry pertains to D-Link DCS-8300LHV2 and an RTSP server flaw in the Authorization header handling, causing a stack-based buffer overflow that can enable remote code execution with root privileges. Multiple connected sources (NVD/NVF, ZDI advisory ZDI-24-046) corroborate that t...

8.8CVSS9AI score0.01315EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/05/03 2:15 a.m.25 views

CVE-2023-51624 D-Link DCS-8300LHV2 RTSP ValidateAuthorizationHeader Nonce Stack-Based Buffer Overflow Remote Code Execution Vulnerability

D-Link DCS-8300LHV2 RTSP ValidateAuthorizationHeader Nonce Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DCS-8300LHV2 IP cameras. Authentication is not required to...

8.8CVSS7.8AI score0.01315EPSS
SaveExploits0References2
CVE
CVE
added 2024/05/03 2:15 a.m.96 views

CVE-2023-51624

CVE-2023-51624 affects D-Link DCS-8300LHV2 IP cameras. The vulnerability lies in the RTSP server’s handling of the Authorization header, where improper validation of user-supplied data length before copying it into a fixed-size, stack-based buffer can lead to a stack-based overflow and remote cod...

8.8CVSS9AI score0.01315EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2024/05/03 2:15 a.m.38 views

CVE-2023-51624 D-Link DCS-8300LHV2 RTSP ValidateAuthorizationHeader Nonce Stack-Based Buffer Overflow Remote Code Execution Vulnerability

D-Link DCS-8300LHV2 RTSP ValidateAuthorizationHeader Nonce Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DCS-8300LHV2 IP cameras. Authentication is not required to...

8.8CVSS9.2AI score0.01315EPSS
SaveExploits0References2
Fedora
Fedora
added 2024/04/25 1:20 a.m.65 views

[SECURITY] Fedora 39 Update: curl-8.2.1-5.fc39

curl is a command line tool for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMA P, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

8.6CVSS9AI score0.36081EPSS
SaveExploits2
Fedora
Fedora
added 2024/04/19 9:41 p.m.39 views

[SECURITY] Fedora 40 Update: curl-8.6.0-8.fc40

curl is a command line tool for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMA P, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

8.6CVSS9AI score0.36081EPSS
SaveExploits2
OpenVAS
OpenVAS
added 2024/04/05 12:0 a.m.16 views

Mageia: Security Advisory (MGASA-2024-0083)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.2AI score
SaveExploits0References4
Mageia
Mageia
added 2024/03/22 12:19 a.m.70 views

Updated ffmpeg packages fix security vulnerability

Out of array access in avformat/rtsp. CVE-2023-47342...

7.1AI score
SaveExploits0References2
OSV
OSV
added 2024/03/22 12:19 a.m.13 views

MGASA-2024-0083 Updated ffmpeg packages fix security vulnerability

Out of array access in avformat/rtsp. CVE-2023-47342...

6.7AI score
SaveExploits0References3
CNVD
CNVD
added 2024/01/12 12:0 a.m.54 views

TRENDnet TV-IP1314PI Buffer Overflow Vulnerability

The TRENDnet TV-IP1314PI is a wireless network camera from TRENDnet. The TRENDnet TV-IP1314PI suffers from a buffer overflow vulnerability that stems from a lack of length validation of user input in the scale field in davinci's RTSP playback feature, which can be exploited by an attacker to caus...

9.8CVSS7.6AI score0.01205EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
added 2024/01/11 12:0 a.m.27 views

D-Link DCS-8300LHV2 RTSP ValidateAuthorizationHeader Nonce Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DCS-8300LHV2 IP cameras. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the Authorization header by the RTSP server,...

8.8CVSS7.5AI score0.01315EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/01/11 12:0 a.m.25 views

D-Link DCS-8300LHV2 RTSP ValidateAuthorizationHeader Username Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DCS-8300LHV2 IP cameras. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the Authorization header by the RTSP server,...

8.8CVSS7.5AI score0.01315EPSS
SaveExploits0References1
NVD
NVD
added 2024/01/09 9:15 a.m.46 views

CVE-2023-49236

A stack-based buffer overflow was discovered on TRENDnet TV-IP1314PI 5.5.3 200714 devices, leading to arbitrary command execution. This occurs because of lack of length validation during an sscanf of a user-entered scale field in the RTSP playback function of davinci...

9.8CVSS9.8AI score0.01205EPSS
SaveExploits1References2
Prion
Prion
added 2024/01/09 9:15 a.m.19 views

Stack overflow

A stack-based buffer overflow was discovered on TRENDnet TV-IP1314PI 5.5.3 200714 devices, leading to arbitrary command execution. This occurs because of lack of length validation during an sscanf of a user-entered scale field in the RTSP playback function of davinci...

7.5CVSS7.9AI score0.01205EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/09 12:0 a.m.5 views

CVE-2023-49236

A stack-based buffer overflow was discovered on TRENDnet TV-IP1314PI 5.5.3 200714 devices, leading to arbitrary command execution. This occurs because of lack of length validation during an sscanf of a user-entered scale field in the RTSP playback function of davinci...

10AI score0.01205EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/01/09 12:0 a.m.9 views

PT-2024-13705 · Trendnet · Trendnet Tv-Ip1314Pi

Name of the Vulnerable Software and Affected Versions: TRENDnet TV-IP1314PI version 5.5.3 200714 Description: A stack-based buffer overflow was discovered, leading to arbitrary command execution. This occurs because of a lack of length validation during an sscanf of a user-entered scale field in...

9.8CVSS9.8AI score0.01205EPSS
SaveExploits1References6
CVE
CVE
added 2024/01/09 12:0 a.m.41 views

CVE-2023-49236

CVE-2023-49236 affects TRENDnet TV-IP1314PI devices running version 5.5.3 200714. A stack-based buffer overflow occurs due to lack of length validation when parsing a user-entered scale field in the RTSP playback function of the internal module (davinci), enabling arbitrary command execution. Mul...

9.8CVSS9.8AI score0.01205EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder