CVE-2021-31540

Wowza Streaming Engine through 4.8.5 in a default installation has incorrect file permissions of configuration files in the conf/ directory. A regular local user is able to read and write to all the configuration files, e.g., modify the application server configuration...

Design/Logic Flaw

Wowza Streaming Engine before 4.8.8.01 in a default installation has cleartext passwords stored in the conf/admin.password file. A regular local user is able to read usernames and passwords...

CVE-2021-31539

Wowza Streaming Engine before 4.8.8.01 in a default installation has cleartext passwords stored in the conf/admin.password file. A regular local user is able to read usernames and passwords...

CVE-2021-31539

CVE-2021-31539 affects Wowza Streaming Engine prior to 4.8.8.01. In default installations, cleartext passwords are stored in conf/admin.password, allowing a local user to read usernames and passwords. Multiple connected sources confirm the issue and reference the 4.8.8.01 release as the fix. Reme...

CVE-2021-31540

CVE-2021-31540 affects Wowza Streaming Engine up to version 4.8.5 in a default installation. The root cause is incorrect file permissions in the conf/ directory, allowing a regular local user to read and write all configuration files and potentially modify the application server configuration. Do...

CVE-2021-31540

Wowza Streaming Engine through 4.8.5 in a default installation has incorrect file permissions of configuration files in the conf/ directory. A regular local user is able to read and write to all the configuration files, e.g., modify the application server configuration...

How to choose the best VPN for you

If you’ve been shopping for a VPN service in 2021, you’ve probably noticed how many providers are available. Using a personal VPN has grown in popularity in recent years, and for good reason. You may no longer be asking, “Should I use one,” but rather, “Which one should I choose?” The answer migh...

PT-2021-19412

Name of the Vulnerable Software and Affected Versions Wowza Streaming Engine versions prior to 4.8.8.01 Description The issue concerns cleartext passwords stored in the conf/admin.password file in a default installation. A regular local user can read usernames and passwords. Recommendations For...

PT-2021-19414

Name of the Vulnerable Software and Affected Versions Wowza Streaming Engine versions through 4.8.5 Description The issue concerns incorrect file permissions of configuration files in the conf/ directory. A regular local user can read and write to all the configuration files, allowing them to...

CVE-2021-31540: Incorrect Permission Assignment for Critical Resource

Wowza Streaming Engine through 4.8.5 in a default installation has incorrect file permissions of configuration files in the conf/ directory. A regular local user is able to read and write to all the configuration files, e.g., modify the application server configuration...

CVE-2021-31539: Cleartext Storage of Sensitive Information

Wowza Streaming Engine before 4.8.8.01 in a default installation has cleartext passwords stored in the conf/admin.password file. A regular local user is able to read usernames and passwords...

Wowza Media Systems Streaming Engine: Permissions, Licenses, and Access Control Vulnerabilities

Wowza Media Systems Streaming Engine is a suite of streaming media server software from Wowza Media Systems in the United States. A privilege-granting and access-control issue vulnerability exists in Wowza Media Systems Streaming Engine 4.8.5 and earlier versions, which stems from a file-permissi...

Wowza Media Systems Streaming Engine security vulnerabilities

Wowza Media Systems Streaming Engine is a suite of streaming media server software from Wowza Media Systems, USA. A security vulnerability exists in Wowza Streaming Engine 4.8.5 and earlier versions. The vulnerability stems from a plaintext password stored in the conf/admin.password file. An...

CVE-2020-36195

An SQL injection vulnerability has been reported to affect QNAP NAS running Multimedia Console or the Media Streaming add-on. If exploited, the vulnerability allows remote attackers to obtain application information. QNAP has already fixed this vulnerability in the following versions of Multimedi...

CVE-2020-36195

An SQL injection vulnerability has been reported to affect QNAP NAS running Multimedia Console or the Media Streaming add-on. If exploited, the vulnerability allows remote attackers to obtain application information. QNAP has already fixed this vulnerability in the following versions of Multimedi...

Sql injection

An SQL injection vulnerability has been reported to affect QNAP NAS running Multimedia Console or the Media Streaming add-on. If exploited, the vulnerability allows remote attackers to obtain application information. QNAP has already fixed this vulnerability in the following versions of Multimedi...

CVE-2020-36195 SQL Injection Vulnerability in Multimedia Console and the Media Streaming Add-On

An SQL injection vulnerability has been reported to affect QNAP NAS running Multimedia Console or the Media Streaming add-on. If exploited, the vulnerability allows remote attackers to obtain application information. QNAP has already fixed this vulnerability in the following versions of Multimedi...

CVE-2020-36195

CVE-2020-36195 is a SQL injection affecting QNAP NAS, specifically Multimedia Console and the Media Streaming Add-on. The vulnerability can lead to information disclosure without authentication over the network. Affected versions and fixes per sources: QTS 4.3.3: Media Streaming add-on 430.1.8.10...

PT-2021-4453

Name of the Vulnerable Software and Affected Versions QNAP NAS versions prior to QTS 4.3.3.1624 Build 20210416 QNAP NAS versions prior to QTS 4.3.6.1620 Build 20210322 QNAP NAS Multimedia Console versions prior to 1.3.4 QNAP NAS Media Streaming add-on versions prior to 430.1.8.8 QNAP NAS Media...

CVE-2020-36195: Improper Input Validation

An SQL injection vulnerability has been reported to affect QNAP NAS running Multimedia Console or the Media Streaming add-on. If exploited, the vulnerability allows remote attackers to obtain application information. QNAP has already fixed this vulnerability in the following versions of Multimedi...