netwave-dosvulnerability

Netwave IP Camera server vulnerable to unauthenticated Denial of Service via one single huge POST request on any firmware. CVE| Descripción ---|--- CVE-2018-6479| Vulnerabilidad de denegación de servicio remota no autenticada CVSS| Puntuación| Detalles ---|---|--- 3| 7.3|...

CVE-2026-88259

CareCam CM2507 IP cameras do not require authentication for access to its network video streaming service. An unauthenticated attacker with network access to the affected device could retrieve live camera video...

CVE-2026-88259

CareCam CM2507 IP cameras are affected by a missing authentication for critical function vulnerability in their network video streaming service. An unauthenticated attacker with network access to the device can retrieve live camera video without credentials. The CISA advisory (ICSA-26-258-08 ) as...

CVE-2021-44320

Parrot AR.Drone version 1 and 2 does not employ a suitable mechanism to prevent denial-of-service DoS attacks. An attacker can harm the device availability i.e., video streaming and control by using tool to perform an IPv4 flood attack. Verified attacks includes SYN flooding and UDP flooding...

CVE-2021-44320

Parrot AR.Drone versions 1 and 2 lack a suitable mechanism to prevent denial-of-service attacks. An unauthenticated, remote attacker can exploit IPv4 flood attacks —specifically SYN flooding and UDP flooding —to disrupt device availability, including video streaming and control . The root cause i...

EUVD-2021-34875

Parrot AR.Drone version 1 and 2 does not employ a suitable mechanism to prevent denial-of-service DoS attacks. An attacker can harm the device availability i.e., video streaming and control by using tool to perform an IPv4 flood attack. Verified attacks includes SYN flooding and UDP flooding...

CVE-2026-75928 Brushfire unauthenticated information disclosure

The Brushfire platform's video content streaming application https://online.brushfire.com exposes database path in requests to users, allowing a remote, unauthenticated attacker to read information about other users. Fixed February 2026...

CVE-2026-75928

The Brushfire platform's video content streaming application (online.brushfire.com) contains an information disclosure vulnerability where database paths are exposed in HTTP requests to users. This allows a remote, unauthenticated attacker to read information about other users. The CVSS v3.1 base...

Brushfire unauthenticated information disclosure

RISK EVALUATION The Brushfire platform's video content streaming application https://online.brushfire.com exposes database path in requests to users, allowing a remote, unauthenticated attacker to read information about other users. 2. RECOMMENDED PRACTICES Fixed February 2026. 3. DESCRIPTION...

PT-2026-79397

The Brushfire platform's video content streaming application https://online.brushfire.com exposes database path in requests to users, allowing a remote, unauthenticated attacker to read information about other users. Fixed February 2026...

CVE-2026-61514

Puwell IP Camera firmware versions 2.x through 4.x contains an authentication bypass vulnerability that allows unauthenticated attackers to access device functions by sending protocol-conforming packets over TCP port 23456 without credentials. Attackers can exploit the unvalidated Session field i...

CVE-2026-46222 media: rockchip: rkcif: Add missing MUST_CONNECT flag to pads

In the Linux kernel, the following vulnerability has been resolved: media: rockchip: rkcif: Add missing MUSTCONNECT flag to pads The pads missed checks for connected devices which may a null dereference when the stream is enabled. Unable to handle kernel NULL pointer dereference at virtual addres...

PYSEC-2026-180

Streamlink is a CLI utility which pipes video streams from various services into a video player. Prior to 8.4.0, Streamlink's HLS and DASH parsers do not validate the URI scheme of segment entries and other resources. A remote .m3u8 HLS playlist or .mpd DASH manifest can list file:///path/to/file...

EUVD-2026-19475

ZLMediaKit is a streaming media service framework. the VP9 RTP payload parser in ext-codec/VP9Rtp.cpp reads multiple fields from the RTP payload based on flag bits in the first byte, without verifying that sufficient data exists in the buffer. A crafted VP9 RTP packet with a 1-byte payload 0xFF,...

CVE-2026-26967 PJSIP has a Heap-based Buffer Overflow vulnerability in its H.264 unpacketizer

PJSIP is a free and open source multimedia communication library written in C. In versions 2.16 and below, there is a critical Heap-based Buffer Overflow vulnerability in PJSIP's H.264 unpacketizer. The bug occurs when processing malformed SRTP packets, where the unpacketizer reads a 2-byte NAL...

SUSE CVE-2022-50757

In the Linux kernel, the following vulnerability has been resolved: media: camss: Clean up received buffers on failed start of streaming It is required to return the received buffers, if streaming can not be started. For instance mediapipelinestart may fail with EPIPE, if a link validation betwee...

CVE-2022-50757

In the Linux kernel, the following vulnerability has been resolved: media: camss: Clean up received buffers on failed start of streaming It is required to return the received buffers, if streaming can not be started. For instance mediapipelinestart may fail with EPIPE, if a link validation betwee...

UBUNTU-CVE-2022-50757

In the Linux kernel, the following vulnerability has been resolved: media: camss: Clean up received buffers on failed start of streaming It is required to return the received buffers, if streaming can not be started. For instance mediapipelinestart may fail with EPIPE, if a link validation betwee...

CVE-2022-50757 media: camss: Clean up received buffers on failed start of streaming

In the Linux kernel, the following vulnerability has been resolved: media: camss: Clean up received buffers on failed start of streaming It is required to return the received buffers, if streaming can not be started. For instance mediapipelinestart may fail with EPIPE, if a link validation betwee...

PT-2025-53123

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's media subsystem, specifically within the camss component, related to the handling of received buffers when streaming fails to start. If media pipeline...