Lucene search
+L

24769 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•3 views

CVE-2026-92043: Buffer Copy without Checking Size of Input

Privilege escalation due to incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

8.8CVSS7.7AI score0.00239EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•23 views

PT-2026-91941

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 156 Firefox ESR versions prior to 140.16 Firefox ESR versions prior to 153.3 Thunderbird versions prior to 156 Thunderbird versions prior to 140.16 Thunderbird versions prior to 153.3 Description A use-after-free issu...

10CVSS6.3AI score0.00406EPSS
SaveExploits0References250
EUVD
EUVD
•added 2026/09/15 12:00 a.m.•12 views

EUVD-2026-79997

The C-MOR Video Surveillance web interface up to version 6.0104 is vulnerable to Path Traversal via the 'cam' parameter in show-movies.pml...

5.7AI score0.01738EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•17 views

PT-2026-91979

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 156 Firefox ESR versions prior to 153.3 Thunderbird versions prior to 156 Thunderbird versions prior to 153.3 Description Privilege escalation is possible due to incorrect boundary conditions within the Audio/Video...

9.8CVSS6.8AI score0.00551EPSS
SaveExploits0References99
Vulnrichment
Vulnrichment
•added 2026/09/15 12:00 a.m.•16 views

CVE-2026-51134

The C-MOR Video Surveillance web interface up to version 6.0104 is vulnerable to Path Traversal via the 'cam' parameter in show-movies.pml...

5.9AI score0.01738EPSS
SaveExploits2References2
Vulnrichment
Vulnrichment
•added 2026/09/15 12:00 a.m.•11 views

CVE-2026-51133

Cross Site Scripting vulnerability in za-internet GmbH C-MOR Video Surveillance = V6.0104 allows a remote attacker to execute arbitrary code via the size parameter in ptzpreset.pml component and the showmovies.pml component...

6.8AI score0.00914EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•22 views

PT-2026-91875

A security vulnerability has been detected in GPAC up to f1219cde. Affected by this issue is the function mpgviddmx process of the file filters/reframe mpgvid.c of the component MPEG Video Reframer. Such manipulation leads to heap-based buffer overflow. The attack can be executed remotely. The...

7.5CVSS6.5AI score0.00553EPSS
SaveExploits0References9
Cvelist
Cvelist
•added 2026/09/15 12:00 a.m.•33 views

CVE-2026-51133

Cross Site Scripting vulnerability in za-internet GmbH C-MOR Video Surveillance = V6.0104 allows a remote attacker to execute arbitrary code via the size parameter in ptzpreset.pml component and the showmovies.pml component...

0.00914EPSS
SaveExploits2References2
CVE
CVE
•added 2026/09/15 12:00 a.m.•15 views

CVE-2026-51134

The C-MOR Video Surveillance web interface (up to version 6.0104 ) by za-internet GmbH is vulnerable to a Path Traversal vulnerability. An unauthenticated attacker can access arbitrary system files by sending specially crafted HTTP requests to the show-movies.pml component, specifically by using ...

7.5CVSS5.9AI score0.01738EPSS
SaveExploits2References2
CVE
CVE
•added 2026/09/15 12:00 a.m.•15 views

CVE-2026-51133

A Cross-Site Scripting (XSS) vulnerability exists in za-internet GmbH C-MOR Video Surveillance version 6.0104 and below . The flaw allows a remote attacker to execute arbitrary client-side code by enticing an authenticated user to click crafted URLs. The vulnerability is triggered via the size pa...

6.1CVSS6.8AI score0.00914EPSS
SaveExploits2References2
Redos
Redos
•added 2026/09/15 12:00 a.m.•12 views

ROS-20260915-73-0173

The vulnerability of the Video Capture component in Google Chrome and Microsoft Edge relates to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise data integrity through a specially crafted HTML page...

3.3CVSS6AI score0.00122EPSS
SaveExploits0
Redos
Redos
•added 2026/09/15 12:00 a.m.•12 views

ROS-20260915-73-0043

The vulnerability of the Codecs components in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created video file...

9.6CVSS8.1AI score0.00216EPSS
SaveExploits0
EUVD
EUVD
•added 2026/09/15 12:00 a.m.•14 views

EUVD-2026-79998

Cross Site Scripting vulnerability in za-internet GmbH C-MOR Video Surveillance = V6.0104 allows a remote attacker to execute arbitrary code via the size parameter in ptzpreset.pml component and the showmovies.pml component...

6.7AI score0.00914EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•5 views

CVE-2026-54337: Improper Neutralization of Argument Delimiters in a Command

Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.14, an argument Injection in the video upload function allows unauthenticated attacker to write/overwrite system files. Version 1.6.14 fixes the issue...

9.8CVSS5.8AI score0.00632EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•6 views

CVE-2026-51134: Improper Limitation of a Pathname to a Restricted Directory

The C-MOR Video Surveillance web interface up to version 6.0104 is vulnerable to Path Traversal via the 'cam' parameter in show-movies.pml...

7.5CVSS5.8AI score0.01738EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•3 views

CVE-2026-51133: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in za-internet GmbH C-MOR Video Surveillance = V6.0104 allows a remote attacker to execute arbitrary code via the size parameter in ptzpreset.pml component and the showmovies.pml component...

6.1CVSS6.6AI score0.00914EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•6 views

CVE-2026-91086: Heap-based Buffer Overflow

A security vulnerability has been detected in GPAC up to f1219cde. Affected by this issue is the function mpgviddmxprocess of the file filters/reframempgvid.c of the component MPEG Video Reframer. Such manipulation leads to heap-based buffer overflow. The attack can be executed remotely. The...

7.5CVSS6.4AI score0.00553EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•21 views

PT-2026-92418

Name of the Vulnerable Software and Affected Versions za-internet GmbH C-MOR Video Surveillance versions prior to 6.0105 Description A Cross Site Scripting issue allows a remote attacker to execute arbitrary code. The flaw exists within the ptzpreset.pml and showmovies.pml components when...

6.1CVSS6.7AI score0.00914EPSS
SaveExploits2References5
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•26 views

PT-2026-92419

The C-MOR Video Surveillance web interface up to version 6.0104 is vulnerable to Path Traversal via the 'cam' parameter in show-movies.pml...

5.7AI score0.01738EPSS
SaveExploits2References4
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•22 views

PT-2026-91999

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 156 Thunderbird versions prior to 156 Description A denial-of-service issue exists within the Audio/Video component. Recommendations Update Firefox to version 156. Update Thunderbird to version 156...

9.8CVSS6.6AI score0.00551EPSS
SaveExploits0References85
Rows per page
Query Builder