24756 matches found
CVE-2026-54337
Fireshare is a self-hosted media and link sharing application. Prior to version 1.6.14 , an argument injection in the video upload function allows an unauthenticated remote attacker to write or overwrite system files, resulting in high impact on confidentiality, integrity, and availability (CVSS ...
CVE-2026-51134
The C-MOR Video Surveillance web interface up to version 6.0104 is vulnerable to Path Traversal via the 'cam' parameter in show-movies.pml...
CVE-2026-51133
Cross Site Scripting vulnerability in za-internet GmbH C-MOR Video Surveillance = V6.0104 allows a remote attacker to execute arbitrary code via the size parameter in ptzpreset.pml component and the showmovies.pml component...
CVE-2026-55863
CVE-2026-55863 affects motionEye (mEye) , a web interface for the motion video surveillance daemon. The root cause is a missing @BaseHandler.auth() decorator on the ActionHandler.post() method in motioneye/handlers/action.py (CWE-862), leaving the /action// endpoint accessible without authenticat...
CVE-2026-55863 motionEye: Missing authentication on ActionHandler allows unauthenticated camera action execution
motionEye mEye is an online interface for a piece of software called "motion," which is a video surveillance program with motion detection. Prior to 0.44.0, the ActionHandler.post method in motioneye/handlers/action.py lacks the BaseHandler.auth decorator, allowing an unauthenticated remote...
CVE-2026-46488 motionEye: Authentication possible via password hash
motionEye mEye is an online interface for a piece of software called "motion," which is a video surveillance program with motion detection. Prior to 0.44.0, motionEye accepts the client-controlled meyeusername and meyepasswordhash cookies as authentication material without server-side session...
CVE-2026-46488 motionEye: Authentication possible via password hash
motionEye mEye is an online interface for a piece of software called "motion," which is a video surveillance program with motion detection. Prior to 0.44.0, motionEye accepts the client-controlled meyeusername and meyepasswordhash cookies as authentication material without server-side session...
SUSE-SU-2026:23784-1 Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 153.2.0 ESR MFSA 2026-85 bsc1278001: CVE-2026-75874 bmo2039972 Sandbox escape in the Remote Settings Client component CVE-2026-84118 bmo2057457 Use-after-free in the JavaScript: GC component CVE-2026-84119...
CVE-2026-92063
Denial-of-service in the Audio/Video component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...
UBUNTU-CVE-2026-92063
Denial-of-service in the Audio/Video component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...
CVE-2026-92063
Denial-of-service in the Audio/Video component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...
DEBIAN-CVE-2026-92043
Privilege escalation due to incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...
CVE-2026-92043
Privilege escalation due to incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...
CVE-2026-92005
Use-after-free in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...
CVE-2026-92005
Use-after-free in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...
CVE-2026-92063 Denial-of-service in the Audio/Video component
Denial-of-service in the Audio/Video component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...
EUVD-2026-78526
Denial-of-service in the Audio/Video component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...
CVE-2026-92063 Denial-of-service in the Audio/Video component
Denial-of-service in the Audio/Video component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...
CVE-2026-92063
A Denial-of-service vulnerability exists in the Audio/Video component of Firefox and Thunderbird . This issue has been addressed in Firefox 156 and Thunderbird 156 . While specific technical root causes are not detailed in the provided documents, the vulnerability is confirmed to impact these spe...
