Lucene search
+L

25210 matches found

osv_oesa
osv_oesa
•added 2026/05/09 11:11 a.m.•19 views

OESA-2026-2272 firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global mozdebugprefix /lib/debug %global mozdebugdir /lib/debug/ %global unamem %uname -m %global symbolsfilename -.en-US.-%uname.crashreporter-symbols.zip %global symbolsfilepath...

9.1CVSS7.7AI score0.00596EPSS
SaveExploits0References2
osv_oesa
osv_oesa
•added 2026/05/09 11:11 a.m.•23 views

OESA-2026-2210 libtheora security update

Theora is a free and open video compression format from the Xiph.org Foundation. Like all our multimedia technology it can be used to distribute film and video online and on disc without the licensing and royalty fees or vendor lock-in associated with other formats. Security Fixes: A flaw was fou...

5.6CVSS5.5AI score0.00162EPSS
SaveExploits1References2
NVD
NVD
•added 2026/05/09 9:16 a.m.•29 views

CVE-2026-32683

Some EZVIZ products utilize older versions of cloud feature modules with legacy API interfaces, which pose a data transmission risk. Attackers can exploit this by eavesdropping on network requests to obtain data.Users are advised to upgrade the app to the latest version and enable the video...

5.3CVSS0.00085EPSS
SaveExploits1References2
CVE
CVE
•added 2026/05/09 8:29 a.m.•95 views

CVE-2026-32683

CVE-2026-32683 affects EZVIZ products that use older cloud feature modules with legacy API interfaces. The root issue is data transmission risk due to these outdated modules, potentially allowing an attacker to eavesdrop on network requests and obtain data. The available sources describe the impa...

5.3CVSS5.7AI score0.00085EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2026/05/09 8:29 a.m.•15 views

CVE-2026-32683

Some EZVIZ products utilize older versions of cloud feature modules with legacy API interfaces, which pose a data transmission risk. Attackers can exploit this by eavesdropping on network requests to obtain data.Users are advised to upgrade the app to the latest version and enable the video...

5.3CVSS5.7AI score0.00085EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2026/05/09 8:29 a.m.•63 views

CVE-2026-32683

Some EZVIZ products utilize older versions of cloud feature modules with legacy API interfaces, which pose a data transmission risk. Attackers can exploit this by eavesdropping on network requests to obtain data.Users are advised to upgrade the app to the latest version and enable the video...

5.3CVSS0.00085EPSS
SaveExploits1References2
EUVD
EUVD
•added 2026/05/09 8:29 a.m.•29 views

EUVD-2026-28907

Some EZVIZ products utilize older versions of cloud feature modules with legacy API interfaces, which pose a data transmission risk. Attackers can exploit this by eavesdropping on network requests to obtain data.Users are advised to upgrade the app to the latest version and enable the video...

5.3CVSS5.8AI score0.00085EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2026/05/09 8:29 a.m.•18 views

CVE-2026-32683

Some EZVIZ products utilize older versions of cloud feature modules with legacy API interfaces, which pose a data transmission risk. Attackers can exploit this by eavesdropping on network requests to obtain data.Users are advised to upgrade the app to the latest version and enable the video...

5.3CVSS5.8AI score0.00085EPSS
SaveExploits1References3Affected Software1
SUSE CVE
SUSE CVE
•added 2026/05/09 2:40 a.m.•34 views

SUSE CVE-2026-43229

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Fix device cleanup order to prevent kernel panic Move video device unregistration to the beginning of the remove function to ensure all video operations are stopped before cleaning up the worker thread...

5.5CVSS5.5AI score0.00162EPSS
SaveExploits0References8
RedhatCVE
RedhatCVE
•added 2026/05/09 2:21 a.m.•22 views

CVE-2026-8115

A security flaw has been discovered in gyoridavid short-video-maker up to 1.3.4. This affects an unknown part of the file src/server/routers/rest.ts of the component REST API. The manipulation of the argument req.params.tmpFile results in path traversal. The attack can be launched remotely. The...

6.9CVSS5.2AI score0.00627EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/05/09 12:00 a.m.•33 views

PT-2026-39324

Name of the Vulnerable Software and Affected Versions EZVIZ products affected versions not specified Description Certain products use outdated cloud feature modules with legacy API interfaces, creating a data transmission risk. This allows attackers to obtain data by eavesdropping on network...

5.3CVSS5.8AI score0.00085EPSS
SaveExploits1References8
RedhatCVE
RedhatCVE
•added 2026/05/08 7:02 p.m.•22 views

CVE-2026-43310

A flaw was found in the Linux kernel's Verisilicon media driver. On the i.MX8MQ platform, simultaneous decoding of H.264 and HEVC video streams by the g1 and g2 Video Processing Units VPUs can lead to a bus error. This issue can result in corrupted video output and potentially cause a system hang...

5.5CVSS5.7AI score0.0016EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/05/08 3:31 p.m.•29 views

EUVD-2026-28580

In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: Avoid G2 bus error while decoding H.264 and HEVC For the i.MX8MQ platform, there is a hardware limitation: the g1 VPU and g2 VPU cannot decode simultaneously; otherwise, it will cause below bus error and produ...

5.8AI score0.0016EPSS
SaveExploits0References3
NVD
NVD
•added 2026/05/08 2:16 p.m.•28 views

CVE-2026-43310

In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: Avoid G2 bus error while decoding H.264 and HEVC For the i.MX8MQ platform, there is a hardware limitation: the g1 VPU and g2 VPU cannot decode simultaneously; otherwise, it will cause below bus error and produ...

5.5CVSS0.0016EPSS
SaveExploits0References3
NVD
NVD
•added 2026/05/08 2:16 p.m.•46 views

CVE-2026-43298

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Skip vcn poison irq release on VF VF doesn't enable VCN poison irq in VCNv2.5. Skip releasing it and avoid call trace during deinitialization. 71.913601 drm clean up the vf2pf work item 71.915088 ------------ cut here...

5.5CVSS0.0016EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2026/05/08 2:16 p.m.•24 views

CVE-2026-43290

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Return queued buffers on startstreaming failure Return buffers if streaming fails to start due to uvcpmget error. This bug may be responsible for a warning I got running while :; do yavta -c3 /dev/video0; done on...

7.8CVSS6.5AI score0.00173EPSS
SaveExploits0References5
osv_ubuntu
osv_ubuntu
•added 2026/05/08 2:16 p.m.•39 views

UBUNTU-CVE-2026-43310

In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: Avoid G2 bus error while decoding H.264 and HEVC For the i.MX8MQ platform, there is a hardware limitation: the g1 VPU and g2 VPU cannot decode simultaneously; otherwise, it will cause below bus error and produ...

5.8CVSS6AI score0.0016EPSS
SaveExploits0References5
osv_ubuntu
osv_ubuntu
•added 2026/05/08 2:16 p.m.•26 views

UBUNTU-CVE-2026-43290

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Return queued buffers on startstreaming failure Return buffers if streaming fails to start due to uvcpmget error. This bug may be responsible for a warning I got running while :; do yavta -c3 /dev/video0; done on...

7.8CVSS6.6AI score0.00173EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
•added 2026/05/08 2:16 p.m.•23 views

CVE-2026-43310

In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: Avoid G2 bus error while decoding H.264 and HEVC For the i.MX8MQ platform, there is a hardware limitation: the g1 VPU and g2 VPU cannot decode simultaneously; otherwise, it will cause below bus error and produ...

5.5CVSS5.8AI score0.0016EPSS
SaveExploits0References4
CVE
CVE
•added 2026/05/08 1:11 p.m.•83 views

CVE-2026-43310

The CVE-2026-43310 issue affects the Linux kernel Verisilicon media driver on the i.MX8MQ platform. It describes a hardware limitation where the g1 VPU and g2 VPU cannot decode H.264 and HEVC simultaneously; doing so can trigger a bus error, producing corrupted video output and potentially causin...

5.5CVSS5.8AI score0.0016EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder