24786 matches found
CVE-2026-81640
Softish C6 Ear Camera and its companion EarVision Android application are affected by a use of hard-coded credentials vulnerability (CVSS 3.1: 8.8 HIGH ). An attacker in an adjacent network position, with low complexity , no privileges required , and no user interaction , can derive the camera's ...
CVE-2026-81640 Softish C6 Ear Camera and EarVision Android Application Use of Hard-coded Credentials
An attacker could derive the camera's Wi-Fi password and connect to its wireless network. This weakens or eliminates the security value of the access-point password and may expose the live video stream, device services, status interfaces, and firmware-update functionality...
CVE-2026-81330 Softish C6 Ear Camera and EarVision Android Application Cleartext transmission of sensitive information
The C6 ear camera transmits live video to the EarVision Android application over unencrypted UDP streams. The application manifest permits cleartext traffic, and captured network traffic contains reconstructable JPEG or WEBP video frames transmitted over UDP. An attacker within local wireless ran...
EUVD-2026-75051
The C6 ear camera transmits live video to the EarVision Android application over unencrypted UDP streams. The application manifest permits cleartext traffic, and captured network traffic contains reconstructable JPEG or WEBP video frames transmitted over UDP. An attacker within local wireless ran...
CVE-2026-81330 Softish C6 Ear Camera and EarVision Android Application Cleartext transmission of sensitive information
The C6 ear camera transmits live video to the EarVision Android application over unencrypted UDP streams. The application manifest permits cleartext traffic, and captured network traffic contains reconstructable JPEG or WEBP video frames transmitted over UDP. An attacker within local wireless ran...
CVE-2026-81330
The Softish C6 Ear Camera transmits live video to the companion EarVision Android application over unencrypted UDP streams . The application manifest explicitly permits cleartext traffic, and the video payload consists of reconstructable JPEG or WEBP frames . An attacker within local wireless ran...
firefox: thunderbird: Same-origin policy bypass in the Audio/Video: Playback component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the Audio/Video: Playback component...
firefox: thunderbird: Same-origin policy bypass in the Audio/Video: Playback component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the Audio/Video: Playback component...
firefox: thunderbird: Same-origin policy bypass in the Audio/Video: Playback component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the Audio/Video: Playback component...
firefox: thunderbird: Same-origin policy bypass in the Audio/Video: Playback component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the Audio/Video: Playback component...
PT-2026-89263
Name of the Vulnerable Software and Affected Versions Builderall for WordPress versions prior to 3.0.3 Description Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping. Authenticated attackers with contributor-level access and above can inject arbitrary we...
ROS-20260909-73-0098
The vulnerability of the Codecs components in Google Chrome and Microsoft Edge relates to reading data from buffer registers beyond their allowable limits. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through the use of a specially created video file...
PT-2026-89075
The C6 ear camera transmits live video to the EarVision Android application over unencrypted UDP streams. The application manifest permits cleartext traffic, and captured network traffic contains reconstructable JPEG or WEBP video frames transmitted over UDP. An attacker within local wireless ran...
PT-2026-89076
An attacker could derive the camera's Wi-Fi password and connect to its wireless network. This weakens or eliminates the security value of the access-point password and may expose the live video stream, device services, status interfaces, and firmware-update functionality...
Deep-Live-Cam v2.7.5-Ultimate
Deep-Live-Cam 2.1.6 Real-time face swap and video deepfake with a single click and only a single image. Disclaimer This deepfake software is designed to be a productive tool for the AI-generated media industry. It can assist artists in animating custom characters, creating engaging content, and...
CVE-2026-86424
A flaw was found in ImageMagick. This time-of-check-time-of-use TOCTOU vulnerability, involving a symlink race in the video decoder, allows a local attacker with low privileges to bypass path policy write restrictions. By replacing a symbolic link between the security check and the actual file...
CVE-2026-72962
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-69584
Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally...