PT-2026-24595

🚨 CVE-2024-14025 An SQL injection vulnerability has been reported to affect Video Station. If an attacker gains local network access who have also gained an administrator account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the...

QNAP Systems Video Station 安全漏洞

QNAP Systems Video Station is a multimedia application developed by QNAP Systems in Taiwan, China. QNAP Systems Video Station has a security vulnerability, which stems from SQL injection vulnerabilities. This vulnerability may allow attackers with administrator accounts to execute unauthorized co...

Epross AVCON6 安全漏洞

Epross AVCON6 is a monitoring video management server developed by Epross Corporation. Epross AVCON6 has a security vulnerability, which stems from OGNL injection. This vulnerability could allow unverified attackers to execute arbitrary commands...

QNAP Systems Video Station 安全漏洞

QNAP Systems Video Station is a multimedia application developed by QNAP Systems in Taiwan, China. There is a security vulnerability in QNAP Systems Video Station, which stems from improper certificate verification. This vulnerability could allow attackers with administrative accounts to compromi...

PT-2026-24594

🚨 CVE-2024-14024 An improper certificate validation vulnerability has been reported to affect Video Station. If an attacker gains local network access who have also gained an administrator account, they can then exploit the vulnerability to compromise the security of the system. We have already...

Infinite loop

Overview Affected versions of this package are vulnerable to Infinite loop in the FileTypeParser class. This is triggered when the ASF WMV/WMA parser receives input including an ASF sub-header with a size value of 0. An attacker can interrupt service with a 55-byte payload. Remediation A fix was...

Infinite loop

Overview Affected versions of this package are vulnerable to Infinite loop in the FileTypeParser class. This is triggered when the ASF WMV/WMA parser receives input including an ASF sub-header with a size value of 0. An attacker can interrupt service with a 55-byte payload. Remediation Upgrade...

CVE-2026-0121

In VPU, there is a possible use-after-free read due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0121

In VPU, there is a possible use-after-free read due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0121

In VPU, there is a possible use-after-free read due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0121

In VPU, a race condition enables a use-after-free read, causing local information disclosure without requiring privileges or user interaction. The issue is documented across multiple sources (NVD/Red Hat/OSV/ENISA/Android Pixel bulletin), with no publicly provided technical details on affected ve...

EUVD-2026-10503

Heap buffer overflow in the Audio/Video: Playback component in Firefox for Android. This vulnerability affects Firefox 148.0.2...

EUVD-2026-10502

Heap buffer overflow in the Audio/Video: Playback component in Firefox for Android. This vulnerability affects Firefox 148.0.2...

CVE-2026-3845

Heap buffer overflow in the Audio/Video: Playback component in Firefox for Android. This vulnerability was fixed in Firefox 148.0.2...

CVE-2026-30885

WWBN AVideo is an open source video platform. Prior to 25.0, the /objects/playlistsFromUser.json.php endpoint returns all playlists for any user without requiring authentication or authorization. An unauthenticated attacker can enumerate user IDs and retrieve playlist information including playli...

CVE-2026-23667 Broadcast DVR Elevation of Privilege Vulnerability

...

CVE-2026-23667

CVE-2026-23667 is described as a Local privilege-escalation vulnerability affecting Broadcast DVR. The available data show a CVSS 3.1 base score of 7.0 (HIGH) with local attack vector, high impact on confidentiality, integrity, and availability, and no user interaction required. Exploitation is l...

CVE-2026-23667

Use after free in Broadcast DVR allows an authorized attacker to elevate privileges locally...

CVE-2026-3845

CVE-2026-3845 : A heap buffer overflow in the Firefox for Android Audio/Video: Playback component was fixed in Firefox 148.0.2. The advisory reports a high-severity issue (CVSS v3.1: 8.8, AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) requiring user interaction. Affected product: Firefox for Android; vulne...

CVE-2026-3845 Heap buffer overflow in the Audio/Video: Playback component in Firefox for Android

Heap buffer overflow in the Audio/Video: Playback component in Firefox for Android. This vulnerability was fixed in Firefox 148.0.2...