DEBIAN-CVE-2024-50108

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too Stuart Hayhurst has found that both at bootup and fullscreen VA-API video is leading to black screens for around 1 second and kernel WARNING 1 traces when calling...

AZL-52477 CVE-2024-50108 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too Stuart Hayhurst has found that both at bootup and fullscreen VA-API video is leading to black screens for around 1 second and kernel WARNING 1 traces when calling...

CVE-2024-9579

A potential vulnerability was discovered in certain Poly video conferencing devices. The firmware flaw does not properly sanitize user input. The exploitation of this vulnerability is dependent on a layered attack and cannot be exploited by itself...

CVE-2024-9579

A potential vulnerability was discovered in certain Poly video conferencing devices. The firmware flaw does not properly sanitize user input. The exploitation of this vulnerability is dependent on a layered attack and cannot be exploited by itself...

CVE-2024-9579 Certain Poly Video Conference Devices – Potential Remote Code Execution

A potential vulnerability was discovered in certain Poly video conferencing devices. The firmware flaw does not properly sanitize user input. The exploitation of this vulnerability is dependent on a layered attack and cannot be exploited by itself...

CVE-2024-9579 Certain Poly Video Conference Devices – Potential Remote Code Execution

A potential vulnerability was discovered in certain Poly video conferencing devices. The firmware flaw does not properly sanitize user input. The exploitation of this vulnerability is dependent on a layered attack and cannot be exploited by itself...

PT-2024-33515 · Google +1 · Android 12 +3

Name of the Vulnerable Software and Affected Versions: Samsung Video Player versions prior to 7.3.29.1 on Android 12 Samsung Video Player versions prior to 7.3.36.1 on Android 13 Samsung Video Player versions prior to 7.3.41.230 on Android 14 Description: The issue is related to improper access...

WordPress Video Gallery for WooCommerce Plugin <= 1.31 is vulnerable to Broken Access Control

Software Video Gallery for WooCommerce Type Plugin Vulnerable versions = 1.31 Fixed in 1.32 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-10535 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID fc5201d78d06 Credits incognito Require...

The vulnerability of the Real-Time Streaming Protocol (RTSP) implementation of the D3D Security IP Camera D8801 software-based network IP camera allows a intruder to gain access to the video stream.

The vulnerability of the Real-Time Streaming Protocol RTSP implementation of the D3D Security IP Camera D8801 software-based network camera is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to gain access to the video stream using...

HP TC8 安全漏洞

HP TC8 is a video conferencing system from Hewlett-Packard HP in the United States. A security vulnerability exists in HP TC8 versions prior to 6.3.2, which stems from an inability to properly clean up user input...

PT-2024-16352 · WordPress · Video Gallery For Woocommerce

Name of the Vulnerable Software and Affected Versions: Video Gallery for WooCommerce plugin for WordPress versions up to, and including, 1.31 Description: The issue is related to a missing capability check on the remove unused thumbnails function, allowing unauthenticated attackers to delete...

AlmaLinux 9 : thunderbird (ALSA-2024:8793)

The remote AlmaLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2024:8793 advisory. firefox: thunderbird: History interface could have been used to cause a Denial of Service condition in the browser CVE-2024-10464 firefox: thunderbird: XS...

WordPress Firework Shoppable Live Video plugin <= 6.3 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Firework Shoppable Live Video versions = 6.3...

CVE-2024-23386 Improper Input Validation in Video

memory corruption when WiFi display APIs are invoked with large random inputs...

firefox: thunderbird: Cross origin video frame leak

A flaw was found in Mozilla. The Mozilla Foundation's Security Advisory describes the following issue: Video frames could have been leaked between origins in some situations...

firefox: thunderbird: Cross origin video frame leak

A flaw was found in Mozilla. The Mozilla Foundation's Security Advisory describes the following issue: Video frames could have been leaked between origins in some situations...

PT-2024-9534 · Poly · Poly Video Conferencing Devices

Name of the Vulnerable Software and Affected Versions: Poly video conferencing devices affected versions not specified Description: A potential issue was discovered in certain Poly video conferencing devices, related to the firmware not properly sanitizing user input. This can be exploited by a...

WordPress Firework Shoppable Live Video Plugin <= 6.3 is vulnerable to Cross Site Scripting (XSS)

Software Firework Shoppable Live Video Type Plugin Vulnerable versions = 6.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51781 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID a80a55038a62 Credits João Pedro S Alcântara...

Certain Poly Video Conference Devices – Potential Remote Code Execution

A potential vulnerability was discovered in certain Poly video conferencing devices. The firmware flaw does not properly sanitize user input. The exploitation of this vulnerability is dependent on a layered attack and cannot be exploited by itself. The recommendation is to update an impacted devi...

CVE-2024-44234

The issue was addressed with improved bounds checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1, tvOS 18.1, visionOS 2.1, watchOS 11.1. Parsing a maliciously crafted video file may lead to unexpected...