24846 matches found
CVE-2026-57716 WordPress Broadcast Live Video plugin <= 7.2.4 - Arbitrary File Deletion vulnerability
Unauthenticated Arbitrary File Deletion in Broadcast Live Video = 7.2.4 versions...
EUVD-2026-48176
Unauthenticated Arbitrary File Deletion in Broadcast Live Video = 7.2.4 versions...
Astra Linux – Vulnerability in Chromium
Insufficient validation of untrusted input in Media in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted video file. Chromium security severity: Low...
Astra Linux – Vulnerability in Chromium
The inappropriate implementation of Media in Google Chrome prior to version 148.0.7778.216 allowed a remote attacker to bypass the same-origin policy through a crafted video file. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
Before version 148.0.7778.96, using WebCodecs in Google Chrome allowed a remote attacker to perform an out-of-bounds memory read through a crafted video file. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
In GFX within Google Chrome on Linux and ChromeOS, prior to version 148.0.7778.179, it was possible for a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a crafted video file. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
Insufficient validation of untrusted input in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted video file. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
A heap buffer overflow in the Codecs component of Google Chrome prior to version 148.0.7778.168 allowed a remote attacker to execute arbitrary code within a sandbox using a specially crafted video file. Chromium security severity: High...
Google Adds Selfie Video Recovery for Users Locked Out of Their Accounts
Google on Thursday announced a new way for users to sign-in to their accounts by letting them take a selfie video. The selfie for sign-in, per the tech giant, is another option on top of existing recovery methods to log in to an account, including an email address or a phone number. The idea is t...
CVE-2024-58330
A missing authentication check in Bosch IP cameras of families CPP13 and CPP14 allows an unauthenticated attacker to retrieve video analytics event data...
CVE-2024-58330
A missing authentication check in Bosch IP cameras of families CPP13 and CPP14 allows an unauthenticated attacker to retrieve video analytics event data...
CVE-2024-58330
A missing authentication check in Bosch IP cameras of families CPP13 and CPP14 allows an unauthenticated attacker to retrieve video analytics event data...
EUVD-2024-55694
A missing authentication check in Bosch IP cameras of families CPP13 and CPP14 allows an unauthenticated attacker to retrieve video analytics event data...
CVE-2024-58330
A missing authentication check in Bosch IP cameras of families CPP13 and CPP14 allows an unauthenticated attacker to retrieve video analytics event data...
CVE-2024-58330
CVE-2024-58330 affects Bosch IP cameras families CPP13 and CPP14 due to a missing authentication check in the access path that guards video analytics event data. The vulnerability enables an unauthenticated attacker to retrieve video analytics event data remotely over the network, with a CVSS v3....
CVE-2026-57716: Improper Limitation of a Pathname to a Restricted Directory
Unauthenticated Arbitrary File Deletion in Broadcast Live Video = 7.2.4 versions...
CVE-2026-65703: Out-of-bounds Write
FFmpeg versions 2.7 through 8.1.2 contain an out-of-bounds write vulnerability in the TDSC video decoder that allows remote attackers to cause heap corruption by supplying a crafted AVI file that changes frame dimensions across TDSF frames. The tdscparsetdsf function fails to unreference the...
CVE-2024-58330: Improper Access Control
A missing authentication check in Bosch IP cameras of families CPP13 and CPP14 allows an unauthenticated attacker to retrieve video analytics event data...
PT-2026-63589
The GoDAM – Organize WordPress Media Library & File Manager with Unlimited Folders for Images, Videos & more plugin for WordPress is vulnerable to arbitrary file uploads in versions up to, and including, 1.12.2. This is due to insufficient file type validation in the save video file function hook...