CVE-2017-7638

CVE-2017-7638 affects QNAP NAS Media Streaming add-on (versions 421.1.0.2, 430.1.2.0 and earlier). The vulnerability is that the add-on does not authenticate requests properly, which could allow an attacker to change Media Streaming settings and access sensitive information on the NAS. Connected ...

CVE-2017-7640

QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier allows remote attackers to run arbitrary OS commands against the system with root privileges...

CVE-2017-7634

CVE-2017-7634 is a cross-site scripting (XSS) vulnerability in the QNAP NAS application Media Streaming add-on (versions 421.1.0.2, 430.1.2.0, and earlier). The issue allows remote attackers to inject arbitrary web script or HTML when a user clicks a crafted link; the injected code is triggered o...

CVE-2017-7641

QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier does not utilize CSRF protections...

CVE-2017-16922

In com.wowza.wms.timedtext.http.HTTPProviderCaptionFile in Wowza Streaming Engine before 4.7.1, traversal of the directory structure and retrieval of a file are possible via a remote, specifically crafted HTTP request...

CVE-2017-16922

In com.wowza.wms.timedtext.http.HTTPProviderCaptionFile in Wowza Streaming Engine before 4.7.1, traversal of the directory structure and retrieval of a file are possible via a remote, specifically crafted HTTP request...

Design/Logic Flaw

In com.wowza.wms.timedtext.http.HTTPProviderCaptionFile in Wowza Streaming Engine before 4.7.1, traversal of the directory structure and retrieval of a file are possible via a remote, specifically crafted HTTP request...

CVE-2017-16922

Vulnerability in Wowza Streaming Engine (com.wowza.wms.timedtext.http.HTTPProviderCaptionFile) allows directory traversal and file retrieval via a remote HTTP request, affecting versions before 4.7.1. The root cause is the HTTPProviderCaptionFile’s handling of crafted requests that enables path t...

Wowza Streaming Engine File System Read/Write Vulnerability

Wowza Streaming Engine is a Unified Streaming Media Server software developed by Wowza Media Systems. A file system read and write vulnerability exists in Wowza Streaming Engine. An attacker can read and write to the file system via JMX using default JMX credentials remote code execution is also...

Wowza Streaming Engine Denial of Service Vulnerability

Wowza Streaming Engine is a Unified Streaming Media Server software developed by Wowza Media Systems. A denial of service vulnerability exists in Wowza Streaming Engine. An attacker can exploit this vulnerability to cause a denial of service memory consumption via a specially crafted HTTP request...

Wowza Streaming Engine Cross-Site Scripting Vulnerability

Wowza Streaming Engine is a Unified Streaming Media Server software developed by Wowza Media Systems. A cross-site scripting vulnerability exists in Wowza Streaming Engine. An attacker can exploit this vulnerability via a specially crafted HTTP request to cause script injection...

Cross site scripting

An issue was discovered in Wowza Streaming Engine before 4.7.1. There is an XSS vulnerability in the HTTP providers com.wowza.wms.http.HTTPProviderMediaList and com.wowza.wms.http.streammanager.HTTPStreamManager causing script injection and/or reflection via a crafted HTTP request...

CVE-2018-7049

An issue was discovered in Wowza Streaming Engine before 4.7.1. There is an XSS vulnerability in the HTTP providers com.wowza.wms.http.HTTPProviderMediaList and com.wowza.wms.http.streammanager.HTTPStreamManager causing script injection and/or reflection via a crafted HTTP request...

Cross site request forgery (csrf)

An issue was discovered in Wowza Streaming Engine before 4.7.1. There is a denial of service memory consumption via a crafted HTTP request...

Remote code execution

An issue was discovered in the MBeans Server in Wowza Streaming Engine before 4.7.1. The file system may be read and written to via JMX using the default JMX credentials remote code execution may be possible as well...

CVE-2018-7048

An issue was discovered in Wowza Streaming Engine before 4.7.1. There is a denial of service memory consumption via a crafted HTTP request...

CVE-2018-7047

An issue was discovered in the MBeans Server in Wowza Streaming Engine before 4.7.1. The file system may be read and written to via JMX using the default JMX credentials remote code execution may be possible as well...

CVE-2018-7048

An issue was discovered in Wowza Streaming Engine before 4.7.1. There is a denial of service memory consumption via a crafted HTTP request...

CVE-2018-7047

An issue was discovered in the MBeans Server in Wowza Streaming Engine before 4.7.1. The file system may be read and written to via JMX using the default JMX credentials remote code execution may be possible as well...

CVE-2018-7049

An issue was discovered in Wowza Streaming Engine before 4.7.1. There is an XSS vulnerability in the HTTP providers com.wowza.wms.http.HTTPProviderMediaList and com.wowza.wms.http.streammanager.HTTPStreamManager causing script injection and/or reflection via a crafted HTTP request...