Information Disclosure Vulnerability in Streaming Media Management Server of Hangzhou Hikvision Digital Technology Co.

Hangzhou Hikvision Digital Technology Co., Ltd. is a video-centered Internet of Things solution provider, offering integrated security, smart business and big data services. An information leakage vulnerability exists in the streaming media management server of Hangzhou Hikvision Digital Technolo...

CVE-2021-32508

Absolute Path Traversal vulnerability in FileStreaming in QSAN Storage Manager allows remote authenticated attackers access arbitrary files by injecting the Symbolic Link following the Url path parameter. The referred vulnerability has been solved with the updated version of QSAN Storage Manager...

PT-2021-19733 · Qsan · Qsan Storage Manager

Name of the Vulnerable Software and Affected Versions: QSAN Storage Manager versions prior to 3.3.3 Description: The issue allows remote authenticated attackers to access arbitrary files by injecting a Symbolic Link following the Url path parameter in the FileStreaming component. This enables...

MGASA-2021-0313 Updated live packages fix security vulnerabilities

Updated live packages fix security vulnerabilities: Live555 before 2019.08.16 has a Use-After-Free because GenericMediaServer::createNewClientSessionWithId can generate the same client session ID in succession, which is mishandled by the MPEG1or2 and Matroska file demultiplexors CVE-2019-15232...

SQL Injection Vulnerability in MSS Streaming Media Server of Suzhou Kodak Technology Co.

Ltd. is a leading provider of video and security products and solutions, committed to video conferencing, video surveillance and a wealth of video application solutions to help all kinds of government and enterprise customers to improve communication and management efficiency. A SQL injection...

Information Disclosure Vulnerability in MSS Streaming Media Server of Suzhou Kodak Technology Co.

Ltd. is a leading provider of video and security products and solutions, committed to video conferencing, video surveillance and a wealth of video application solutions to help all kinds of government and enterprise customers to improve communication and management efficiency. An information...

Advisory ROSA-SA-2021-1908

Software: live555 2020.04.12 OS: Cobalt 7.9 CVE-ID: CVE-2021-28899 CVE-Crit: HIGH CVE-DESC: Vulnerability in AC3AudioFileServerMediaSubsession, ADTSAudioFileServerMediaSubsession, and AMRAudioFileServerMediaSubsessionLive OnDemandServerMediaSubsession subclasses through 2021 in Networks LIVE555...

openSUSE 15 Security Update : live555 (openSUSE-SU-2021:0915-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:0915-1 advisory. - Live555 before 2019.08.16 has a Use-After-Free because GenericMediaServer::createNewClientSessionWithId can generate the same client...

World-Class OTT Streaming from MwareTV with Akamai

Since the onset of the pandemic, home entertainment has never been more important. Millions of users across the globe have turned to over-the-top OTT streaming and live TV to bring much-needed diversion and exciting content into their lives...

Code injection

Ampache is an open source web based audio/video streaming application and file manager. Due to a lack of input filtering versions 4.x.y are vulnerable to code injection in random.php. The attack requires user authentication to access the random.php page unless the site is running in demo mode. Th...

CVE-2021-32644

Ampache 4.x.y is affected by a code injection vulnerability in random.php due to insufficient input filtering. The attack requires user authentication to access random.php unless the site runs in demo mode. The issue has been fixed in version 4.4.3; users on older releases should upgrade to 4.4.3...

Weak Password Vulnerability in Streaming Media Encoder Professional Edition of Hefei Duck Information Technology Co.

Hefei Duck Information Technology Co., Ltd. is a company focusing on the research of audio and video compression, transmission and analysis algorithms. A weak password vulnerability exists in Hefei Tuduck Information Technology Limited Streaming Encoder Professional Edition, which can be exploite...

Logic Flaw Vulnerability in MSS Streaming Media Server at Suzhou Kodak Technology Co.

Ltd. is a leading provider of video and security products and solutions, committed to video conferencing, video surveillance and a wealth of video application solutions to help all kinds of government and enterprise customers to improve communication and management efficiency. A logic flaw exists...

CVE-2021-0073

Insufficient control flow management in IntelR DSA before version 20.11.50.9 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0094

Improper link resolution before file access in IntelR DSA before version 20.11.50.9 may allow an authenticated user to potentially enable an escalation of privilege via local access...

Cyberattack Suspected in Cox TV and Radio Outages

A reported ransomware attack on Cox Media Group CMG has crippled streaming and other internal operations of dozens of radio and television stations scattered across America’s 20 broadcast markets. CMG has won’t comment on the reported attack and hasn’t responded to a request for comment. A member...

Weak Password Vulnerability in Huazhou Private Cloud-CDN Live Streaming Acceleration Server

Shenzhen Huashimida Information Technology Co., Ltd. is a smart hotel IT service provider. A weak password vulnerability exists in the Huashi Private Cloud-CDN live streaming acceleration server, which can be exploited by attackers to obtain sensitive information...

Improper Verification of Cryptographic Signature in aws-encryption-sdk-javascript

Impact This advisory addresses several LOW severity issues with streaming signed messages and restricting processing of certain types of invalid messages. This ESDK supports a streaming mode where callers may stream the plaintext of signed messages before the ECDSA signature is validated. In...

GHSA-H45P-W933-JXH3 Improper Verification of Cryptographic Signature in aws-encryption-sdk-javascript

Impact This advisory addresses several LOW severity issues with streaming signed messages and restricting processing of certain types of invalid messages. This ESDK supports a streaming mode where callers may stream the plaintext of signed messages before the ECDSA signature is validated. In...

GHSA-89V2-G37M-G3FF Improper Verification of Cryptographic Signature in aws-encryption-sdk-cli

Impact This advisory addresses several LOW severity issues with streaming signed messages and restricting processing of certain types of invalid messages. This ESDK supports a streaming mode where callers may stream the plaintext of signed messages before the ECDSA signature is validated. In...