239 matches found
CVE-2026-33650
WWBN AVideo is an open source video platform. In versions up to and including 26.0, a user with the "Videos Moderator" permission can escalate privileges to perform full video management operations — including ownership transfer and deletion of any video — despite the permission being documented ...
CVE-2026-33650 AVideo's Video Moderator Privilege Escalation via Ownership Transfer Enables Arbitrary Video Deletion
WWBN AVideo is an open source video platform. In versions up to and including 26.0, a user with the "Videos Moderator" permission can escalate privileges to perform full video management operations — including ownership transfer and deletion of any video — despite the permission being documented ...
Epross AVCON6 安全漏洞
Epross AVCON6 is a monitoring video management server developed by Epross Corporation. Epross AVCON6 has a security vulnerability, which stems from OGNL injection. This vulnerability could allow unverified attackers to execute arbitrary commands...
CVE-2026-20801
Cleartext Transmission of Sensitive Information CWE-319 in a component used in the Gallagher Hanwha VMS and Gallagher NxWitness VMS integrations allows unprivileged users with local network access to view live video streams. This issue affects all versions of Gallagher NxWitness VMS integration...
CVE-2026-20801
Cleartext Transmission of Sensitive Information CWE-319 in a component used in the Gallagher Hanwha VMS and Gallagher NxWitness VMS integrations allows unprivileged users with local network access to view live video streams. This issue affects all versions of Gallagher NxWitness VMS integration...
PT-2026-22717
Name of the Vulnerable Software and Affected Versions Gallagher NxWitness VMS integration versions prior to 9.10.017 Gallagher Hanwha VMS integration versions prior to 9.10.025 Description A component used in the Gallagher Hanwha VMS and Gallagher NxWitness VMS integrations allows unprivileged...
Gallagher NxWitness VMS 安全漏洞
Gallagher NxWitness VMS is a video management system developed by the New Zealand-based Gallagher company. Versions of Gallagher NxWitness VMS prior to 9.10.017 and 9.10.025 contained security vulnerabilities. These vulnerabilities stemmed from the transmission of sensitive information in plainte...
CVE-2019-25437
Foscam Video Management System 1.1.6.6 contains a buffer overflow vulnerability in the UID field that allows local attackers to crash the application by supplying an excessively long string. Attackers can input a 5000-character buffer into the UID parameter during device addition to trigger an...
CVE-2019-25437
Foscam Video Management System 1.1.6.6 contains a buffer overflow vulnerability in the UID field that allows local attackers to crash the application by supplying an excessively long string. Attackers can input a 5000-character buffer into the UID parameter during device addition to trigger an...
CVE-2019-25437 Foscam Video Management System 1.1.6.6 Buffer Overflow Denial of Service
Foscam Video Management System 1.1.6.6 contains a buffer overflow vulnerability in the UID field that allows local attackers to crash the application by supplying an excessively long string. Attackers can input a 5000-character buffer into the UID parameter during device addition to trigger an...
CVE-2019-25437: Stack-based Buffer Overflow
Foscam Video Management System 1.1.6.6 contains a buffer overflow vulnerability in the UID field that allows local attackers to crash the application by supplying an excessively long string. Attackers can input a 5000-character buffer into the UID parameter during device addition to trigger an...
Foscam Video Management System 安全漏洞
The Foscam Video Management System is a monitoring video management system developed by the American company Foscam. Version 1.1.6.6 of the Foscam Video Management System contains a security vulnerability. This vulnerability stems from a buffer overflow in the UID field, which could allow local...
CVE-2019-25353
CVE-2019-25353 affects Foscam Video Management System 1.1.4.9. The issue is a denial-of-service in the username input field: sending a 520-byte buffer of repeated 'A' characters overwrites the username during device login and crashes the application. The provided description explicitly states the...
CVE-2019-25353 Foscam Video Management System 1.1.4.9 - 'Username' Denial of Service
Foscam Video Management System 1.1.4.9 contains a denial of service vulnerability in the username input field that allows attackers to crash the application. Attackers can overwrite the username with a 520-byte buffer of repeated 'A' characters to trigger an application crash during device login...
CVE-2019-25353: Buffer Copy without Checking Size of Input
Foscam Video Management System 1.1.4.9 contains a denial of service vulnerability in the username input field that allows attackers to crash the application. Attackers can overwrite the username with a 520-byte buffer of repeated 'A' characters to trigger an application crash during device login...
Foscam Video Management System 安全漏洞
The Foscam Video Management System is a monitoring video management system developed by the American company Foscam. Version 1.1.4.9 of the Foscam Video Management System has a security vulnerability. This vulnerability allows attackers to cause the application to crash by overwriting the usernam...
PT-2026-20528
Foscam Video Management System 1.1.4.9 contains a denial of service vulnerability in the username input field that allows attackers to crash the application. Attackers can overwrite the username with a 520-byte buffer of repeated 'A' characters to trigger an application crash during device login...
CVE-2026-23896
immich is a high performance self-hosted photo and video management solution. Prior to version 2.5.0, API keys can escalate their own permissions by calling the update endpoint, allowing a low-privilege API key to grant itself full administrative access to the system. Version 2.5.0 fixes the issu...
WordPress Simple Video Management System plugin <= 1.0.4 - Reflected Cross-Site Scripting vulnerability
Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin Simple Video Management System versions = 1.0.4...