EUVD-2021-22820

Malware in sbrugna...

EUVD-2023-44384

Malicious code in bioql PyPI...

The vulnerability of Johnson Controls VideoEdge network video recorder software lies in insufficient verification of data authenticity. This allows intruders to modify configuration files and trigger service failures.

The vulnerability of the Johnson Controls VideoEdge network video recorder software is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an intruder to modify configuration files and cause service failures...

CVE-2023-3749

A local user could edit the VideoEdge configuration file and interfere with VideoEdge operation...

CVE-2023-3749

A local user could edit the VideoEdge configuration file and interfere with VideoEdge operation...

Design/Logic Flaw

A local user could edit the VideoEdge configuration file and interfere with VideoEdge operation...

CVE-2023-3749 VideoEdge config

A local user could edit the VideoEdge configuration file and interfere with VideoEdge operation...

CVE-2023-3749

Vulnerability summary (CVE-2023-3749): In Sensormatic Electronics/Johnson Controls VideoEdge, versions prior to 6.1.1 allow a local user to edit the VideoEdge configuration file, enabling interference with VideoEdge operation due to a flaw described as accepting extraneous untrusted data with tru...

CVE-2023-3749 VideoEdge config

A local user could edit the VideoEdge configuration file and interfere with VideoEdge operation...

Sensormatic Electronics VideoEdge

1. EXECUTIVE SUMMARY ​CVSS v3 7.1 ​ATTENTION: Low attack complexity ​Vendor: Sensormatic Electronics, LLC, a subsidiary of Johnson Controls Inc. ​Equipment: VideoEdge ​Vulnerability: Acceptance of Extraneous Untrusted Data with Trusted Data 2. RISK EVALUATION ​Successful exploitation of this...

Johnson Controls VideoEdge Data Forgery Issue Vulnerability

Johnson Controls VideoEdge is a security solution from Johnson Controls, Inc. A security vulnerability exists in Johnson Controls VideoEdge that originates from a local user being able to edit configuration files and interfere with VideoEdge operation...

CVE-2021-36199

Running a vulnerability scanner against VideoEdge NVRs can cause some functionality to stop...

CVE-2021-36199

Running a vulnerability scanner against VideoEdge NVRs can cause some functionality to stop...

Design/Logic Flaw

Running a vulnerability scanner against VideoEdge NVRs can cause some functionality to stop...

CVE-2021-36199

CVE-2021-36199 affects VideoEdge NVRs (VideoEdge) with versions 5.4.1–5.7.1. It is due to improper handling of syntactically invalid structure, potentially causing a denial-of-service condition (availability impact listed as LOW). No public exploits are documented in the provided sources. Johnson...

CVE-2021-36199 VideoEdge

Running a vulnerability scanner against VideoEdge NVRs can cause some functionality to stop...

Johnson Controls VideoEdge 安全漏洞

Johnson Controls VideoEdge is a security solution from Johnson Controls, Inc. A security vulnerability exists in Johnson Controls VideoEdge that could result in a denial of service...

Johnson Controls VideoEdge

1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Sensormatic Electronics, LLC, a subsidiary of Johnson Controls, Inc. Equipment: VideoEdge Vulnerability: Improper Handling of Syntactically Invalid Structure= 2. RISK EVALUATION Running a vulnerability...

Sensormatic Electronics VideoEdge

1. EXECUTIVE SUMMARY CVSS v3 6.1 ATTENTION: Exploitable remotely/low attack complexity Vendor: Sensormatic Electronics, LLC, a subsidiary of Johnson Controls, Inc. Equipment: VideoEdge Vulnerability: Cross-site Scripting 2. RISK EVALUATION Successful exploitation of this vulnerability could allow...

Johnson Controls Sensormatic Electronics VideoEdge

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Sensormatic Electronics, LLC, a subsidiary of Johnson Controls Equipment: VideoEdge Vulnerability: Off-by-one Error 2. RISK EVALUATION Under specific circumstances, a local authenticated user may be able to exploit this...