396 matches found
CVE-2022-26652
NATS nats-server before 2.7.4 allows Directory Traversal with write access via an element in a ZIP archive for JetStream streams. nats-streaming-server before 0.24.3 is also affected...
Directory traversal
NATS nats-server before 2.7.4 allows Directory Traversal with write access via an element in a ZIP archive for JetStream streams. nats-streaming-server before 0.24.3 is also affected...
CVE-2022-26652
Summary: CVE-2022-26652 affects NATS nats-server (up to 2.7.3) and nats-streaming-server (up to 0.24.2). The issue is a directory traversal (“Zip Slip”) via an element in a ZIP archive used in JetStream streams, allowing potentially arbitrary file write. The root cause is insufficient sanitizatio...
CVE-2022-26652: Improper Limitation of a Pathname to a Restricted Directory
NATS nats-server before 2.7.4 allows Directory Traversal with write access via an element in a ZIP archive for JetStream streams. nats-streaming-server before 0.24.3 is also affected...
GHSA-G6W6-R76C-28J7 Incorrect Authorization in NATS nats-server
This advisory is canonically Problem Description NATS nats-server through 2022-02-04 has Incorrect Access Control, with unchecked ability for clients to authorize into any account, because of a coding error in a long-extant experimental feature. A client crafting the initial protocol-level...
PT-2022-16706 · Unknown · Nats Server +1
Name of the Vulnerable Software and Affected Versions: NATS Server versions prior to 2.7.2 NATS Streaming Server versions prior to 0.24.1 Description: The issue is related to Incorrect Access Control in NATS nats-server, where any authenticated user can obtain the privileges of the System account...
The vulnerability of the GNUMP3d streaming multimedia server in OpenSUSE Leap operating systems arises from incorrect handling of symbolic links before accessing files. This allows attackers to exploit their privileges.
The vulnerability of the GNUMP3d streaming multimedia server in OpenSUSE Leap operating systems is related to incorrect handling of symbolic links before accessing files. Exploiting this vulnerability can allow attackers to increase their privileges...
Information Disclosure Vulnerability in MSS Streaming Media Server of Suzhou Kodak Technology Co.
Ltd. is a leading provider of video and security products and solutions, committed to video conferencing, video surveillance and a wealth of video application solutions to help all kinds of government and enterprise customers to improve communication and management efficiency. An information...
SQL Injection Vulnerability in MSS Streaming Media Server of Suzhou Kodak Technology Co.
Ltd. is a leading provider of video and security products and solutions, committed to video conferencing, video surveillance and a wealth of video application solutions to help all kinds of government and enterprise customers to improve communication and management efficiency. A SQL injection...
http4s 路径遍历漏洞
Http4s is an open source for Scala streaming HTTP server . Http4s has a path traversal vulnerability that can be exploited by an attacker to obtain sensitive information...
Apple Darwin Streaming Server Remote Code Execution (CVE-2003-0050)
A remote code execution vulnerability exists in Apple Darwin Streaming Server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
SQL Injection Vulnerability in sewise Live Streaming Server of Shenzhen Siliconware Technology Co.
Shenzhen Siwei Zhi Technology Co., Ltd. is a national high-tech enterprise focusing on streaming media cloud platform technology research and development. Shenzhen Siliconware Technology Co., Ltd. sewise live server SQL injection vulnerability, attackers can use the vulnerability to obtain databa...
Unauthorized Access Vulnerability in TVHeadend Streaming Server
Tvheadend is a streaming media server software installed under LINUX based systems. An unauthorized access vulnerability exists in the TVHeadend streaming server, which can be exploited by attackers to obtain sensitive information...
VLC: Multiple vulnerabilities
Background VLC is a cross-platform media player and streaming server. Description Multiple vulnerabilities have been discovered in VLC. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known...
CVE-2019-11560
A buffer overflow vulnerability in the streaming server provided by hisilicon in HI3516 models allows an unauthenticated attacker to remotely run arbitrary code by sending a special RTSP over HTTP packet. The vulnerability was found in many cameras using hisilicon's hardware and software, as...
CVE-2019-11560
CVE-2019-11560 is a buffer overflow in the HI3516 streaming server (Hisilicon) enabling unauthenticated remote code execution over a crafted RTSP-over-HTTP packet. Affected devices include various cameras from HiSilicon-based implementations (e.g., TENVIS: 1.3.3.3, 1.2.7.2, 1.2.1.4, 7.1.20.1.2, 1...
CVE-2019-11560
A buffer overflow vulnerability in the streaming server provided by hisilicon in HI3516 models allows an unauthenticated attacker to remotely run arbitrary code by sending a special RTSP over HTTP packet. The vulnerability was found in many cameras using hisilicon's hardware and software, as...
CVE-2019-11560: Out-of-bounds Write
A buffer overflow vulnerability in the streaming server provided by hisilicon in HI3516 models allows an unauthenticated attacker to remotely run arbitrary code by sending a special RTSP over HTTP packet. The vulnerability was found in many cameras using hisilicon's hardware and software, as...
UBUNTU-CVE-2019-6256
A Denial of Service issue was discovered in the LIVE555 Streaming Media libraries as used in Live555 Media Server 0.93. It can cause an RTSPServer crash in handleHTTPCmdTunnelingPOST, when RTSP-over-HTTP tunneling is supported, via x-sessioncookie HTTP headers in a GET request and a POST request...
