coreml (0.0.5), imgreg2d (0.0.0.2) +1 more potentially affected by CVE-2019-5064 via opencv-python (3.4.1.15)

opencv-python PYPI version 3.4.1.15 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python and may be impacted: - coreml 0.0.5 - imgreg2d 0.0.0.2 - pyannote-video =1.6.0, =1.6.3 Source cves: CVE-2019-5064 Source advisory: OSV:PYSEC-2026-2828...

coreml (0.0.5), imgreg2d (0.0.0.2) +1 more potentially affected by CVE-2019-16249 via opencv-python (3.4.1.15)

opencv-python PYPI version 3.4.1.15 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python and may be impacted: - coreml 0.0.5 - imgreg2d 0.0.0.2 - pyannote-video =1.6.0, =1.6.3 Source cves: CVE-2019-16249 Source advisory: OSV:PYSEC-2026-2833...

coreml (0.0.5), imgreg2d (0.0.0.2) +1 more potentially affected by CVE-2019-5063 via opencv-python (3.4.1.15)

opencv-python PYPI version 3.4.1.15 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python and may be impacted: - coreml 0.0.5 - imgreg2d 0.0.0.2 - pyannote-video =1.6.0, =1.6.3 Source cves: CVE-2019-5063 Source advisory: OSV:PYSEC-2026-2826...

coreml (0.0.5), imgreg2d (0.0.0.2) +1 more potentially affected by CVE-2019-14493 via opencv-python (3.4.1.15)

opencv-python PYPI version 3.4.1.15 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python and may be impacted: - coreml 0.0.5 - imgreg2d 0.0.0.2 - pyannote-video =1.6.0, =1.6.3 Source cves: CVE-2019-14493 Source advisory: OSV:PYSEC-2026-2806...

EUVD-2026-42485

Out of bounds read and write in Codecs in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potentially exploit heap corruption via a crafted video file. Chromium security severity: High...

CVE-2026-51597

MERCURY MIPC252W IP camera v1.0.5 Build 230306 Rel.79931n does not implement nonce expiration in RTSP Digest authentication. An adjacent network attacker can capture a legitimate authentication exchange and replay the nonce and response values in a new connection to bypass authentication without...

CVE-2026-51597: Authentication Bypass by Capture-replay

MERCURY MIPC252W IP camera v1.0.5 Build 230306 Rel.79931n does not implement nonce expiration in RTSP Digest authentication. An adjacent network attacker can capture a legitimate authentication exchange and replay the nonce and response values in a new connection to bypass authentication without...

CVE-2026-51597

The MERCURY MIPC252W IP camera (v1.0.5 Build 230306 Rel.79931n) is vulnerable to an authentication bypass because it fails to implement nonce expiration in RTSP Digest authentication . An adjacent network attacker can capture a legitimate authentication exchange and replay the nonce and response ...

CVE-2026-51597

MERCURY MIPC252W IP camera v1.0.5 Build 230306 Rel.79931n does not implement nonce expiration in RTSP Digest authentication. An adjacent network attacker can capture a legitimate authentication exchange and replay the nonce and response values in a new connection to bypass authentication without...

CVE-2026-51597

MERCURY MIPC252W IP camera v1.0.5 Build 230306 Rel.79931n does not implement nonce expiration in RTSP Digest authentication. An adjacent network attacker can capture a legitimate authentication exchange and replay the nonce and response values in a new connection to bypass authentication without...

PT-2026-56872

MERCURY MIPC252W IP camera v1.0.5 Build 230306 Rel.79931n does not implement nonce expiration in RTSP Digest authentication. An adjacent network attacker can capture a legitimate authentication exchange and replay the nonce and response values in a new connection to bypass authentication without...

UBUNTU-CVE-2026-55192

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP H.264 decoder backends can return YUV planes sized from the bitstream without comparing the decoded width and height to the RDPGFX surface dimensions used to validate region rectangles. A malicious RDP serve...

PT-2026-59471

OpenCV 4.1.1 has an out-of-bounds read in hal baseline::v load in core/hal/intrin sse.hpp when called from computeSSDMeanNorm in modules/video/src/dis flow.cpp...

PT-2026-59442

OpenCV 4.1.1 has an out-of-bounds read in hal baseline::v load in core/hal/intrin sse.hpp when called from computeSSDMeanNorm in modules/video/src/dis flow.cpp...

CVE-2026-15114

Out of bounds read and write in Codecs in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potentially exploit heap corruption via a crafted video file. Chromium security severity: High...

CVE-2026-15114

Out of bounds read and write in Codecs in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potentially exploit heap corruption via a crafted video file. Chromium security severity: High...

CVE-2026-15114

Google Chrome and Microsoft Edge are vulnerable to an out-of-bounds read and write in the Codecs components. A remote attacker can exploit this via a crafted video file to trigger heap corruption or a service failure . The issue affects Google Chrome versions prior to 150.0.7871.115 . Remediation...

CVE-2026-15114

Out of bounds read and write in Codecs in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potentially exploit heap corruption via a crafted video file. Chromium security severity: High...

CVE-2026-55596

Plate is a rich-text editor with AI and shadcn/ui. From 53.0.0 until 53.1.4, the media embed renderer trusts serialized provider or sourceUrl metadata in useMediaState and skips parseMediaUrl protocol validation, allowing a crafted Plate document to set a known video provider while keeping url as...

CVE-2026-55596

Plate is a rich-text editor with AI and shadcn/ui. From 53.0.0 until 53.1.4, the media embed renderer trusts serialized provider or sourceUrl metadata in useMediaState and skips parseMediaUrl protocol validation, allowing a crafted Plate document to set a known video provider while keeping url as...