Lucene search
K

9 matches found

Tenable Nessus
Tenable Nessus
added 2026/05/26 12:0 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-41470

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LIVE555 before 2026.04.22 contains an authorization bypass vulnerability in RTSP session command handling that allows attackers to replay valid Session tokens...

8.2CVSS5.8AI score0.00066EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2026/05/21 2:28 a.m.7 views

SUSE CVE-2026-41470

LIVE555 before 2026.04.22 contains an authorization bypass vulnerability in RTSP session command handling that allows attackers to replay valid Session tokens from unauthenticated connections. Attackers who obtain a valid Session token can issue PLAY and TEARDOWN commands from a second TCP...

8.2CVSS5.8AI score0.00066EPSS
Exploits0References3
NVD
NVD
added 2026/05/19 7:16 p.m.4 views

CVE-2026-41470

LIVE555 before 2026.04.22 contains an authorization bypass vulnerability in RTSP session command handling that allows attackers to replay valid Session tokens from unauthenticated connections. Attackers who obtain a valid Session token can issue PLAY and TEARDOWN commands from a second TCP...

8.2CVSS0.00066EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/05/19 6:43 p.m.7 views

CVE-2026-41470 LIVE555 < 2026.04.22 RTSP Server Authorization Bypass via Session Token

LIVE555 before 2026.04.22 contains an authorization bypass vulnerability in RTSP session command handling that allows attackers to replay valid Session tokens from unauthenticated connections. Attackers who obtain a valid Session token can issue PLAY and TEARDOWN commands from a second TCP...

8.2CVSS5.8AI score0.00066EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/05/19 6:43 p.m.8 views

CVE-2026-41470

LIVE555 before 2026.04.22 contains an authorization bypass vulnerability in RTSP session command handling that allows attackers to replay valid Session tokens from unauthenticated connections. Attackers who obtain a valid Session token can issue PLAY and TEARDOWN commands from a second TCP...

8.2CVSS5.8AI score0.00066EPSS
Exploits0References4
EUVD
EUVD
added 2026/05/19 6:43 p.m.5 views

EUVD-2026-30973

LIVE555 before 2026.04.22 contains an authorization bypass vulnerability in RTSP session command handling that allows attackers to replay valid Session tokens from unauthenticated connections. Attackers who obtain a valid Session token can issue PLAY and TEARDOWN commands from a second TCP...

8.2CVSS5.8AI score0.00066EPSS
Exploits0References3
EUVD
EUVD
added 2026/03/29 3:41 p.m.1 views

EUVD-2026-16715

AVideo: Missing Authorization in Playlist Schedule Creation Allows Cross-User Broadcast Hijacking...

6.3CVSS5.8AI score0.00018EPSS
Exploits1References3
EUVD
EUVD
added 2025/12/25 6:30 a.m.2 views

EUVD-2025-205374

Pexip Infinity 38.0 and 38.1 before 39.0 has insufficient access control in the RTMP implementation, allowing an attacker to disconnect RTMP streams traversing a Proxy Node...

5.9CVSS6.4AI score0.00043EPSS
Exploits0References2
OSV
OSV
added 2025/12/25 5:16 a.m.0 views

CVE-2025-66378

Pexip Infinity 38.0 and 38.1 before 39.0 has insufficient access control in the RTMP implementation, allowing an attacker to disconnect RTMP streams traversing a Proxy Node...

7.5CVSS5.8AI score0.00043EPSS
Exploits0References1
Rows per page
Query Builder