CVE-2021-25467

CVE-2021-25467 describes a potential buffer overflow in the Vision DSP kernel driver (Samsung devices) before SMR Oct-2021 Release 1, enabling privilege escalation to root via hijacking a loaded library. The incident is tied to local exploit scenarios, with impact described as high for confidenti...

Cisco Vision Dynamic Signage Director Reflected Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface on an affected device. This vulnerability is due to insufficient validation o...

CVE-2021-34742

A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface on an affected device. This vulnerability is due to insufficient validation o...

PT-2021-16657

Name of the Vulnerable Software and Affected Versions: Vision DSP kernel driver versions prior to SMR Oct-2021 Release 1 Description: The issue allows for privilege escalation to Root by hijacking loaded library, assuming system privilege is gained. This is due to possible buffer overflow...

CVE-2021-34742: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface on an affected device. This vulnerability is due to insufficient validation o...

CVE-2021-25467: Buffer Copy without Checking Size of Input

Assuming system privilege is gained, possible buffer overflow vulnerabilities in the Vision DSP kernel driver prior to SMR Oct-2021 Release 1 allows privilege escalation to Root by hijacking loaded library...

Cisco Vision Dynamic Signage Director 跨站脚本漏洞

Cisco Vision Dynamic Signage Director is an end-to-end dynamic signage and IPTV solution from Cisco. Cisco Vision Dynamic Signage Director suffers from a cross-site scripting vulnerability that stems from This vulnerability is due to insufficient validation of user-supplied input by the web-based...

PT-2021-5379

Name of the Vulnerable Software and Affected Versions Cisco Vision Dynamic Signage Director affected versions not specified Description A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to conduct a...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a microkernel-based distributed operating system. Huawei HarmonyOS Vision is a security vulnerability in some Huawei Smart Screens. An attacker could exploit the vulnerability to cause a WLAN denial of service...

CVE-2021-36134

Out of bounds write vulnerability in the JPEG parsing code of Netop Vision Pro up to and including 9.7.2 allows an adjacent unauthenticated attacker to write to arbitrary memory potentially leading to a Denial of Service DoS...

CVE-2021-36134

Out of bounds write vulnerability in the JPEG parsing code of Netop Vision Pro up to and including 9.7.2 allows an adjacent unauthenticated attacker to write to arbitrary memory potentially leading to a Denial of Service DoS...

CVE-2021-36134

Out of bounds write vulnerability in the JPEG parsing code of Netop Vision Pro up to and including 9.7.2 allows an adjacent unauthenticated attacker to write to arbitrary memory potentially leading to a Denial of Service DoS...

Cross site scripting

Out of bounds write vulnerability in the JPEG parsing code of Netop Vision Pro up to and including 9.7.2 allows an adjacent unauthenticated attacker to write to arbitrary memory potentially leading to a Denial of Service DoS...

CVE-2021-36134

Netop Vision Pro

CVE-2021-36134 Out of bounds write in Netop Vision Pro

Out of bounds write vulnerability in the JPEG parsing code of Netop Vision Pro up to and including 9.7.2 allows an adjacent unauthenticated attacker to write to arbitrary memory potentially leading to a Denial of Service DoS...

Netop Vision 缓冲区错误漏洞

Netop Vision is an application from the Danish company Netop. It provides a classroom management software. A security vulnerability in the JPEG parsing code of Netop Vision Pro 9.7.2 and prior versions can be exploited by an attacker to write to arbitrary memory, which could result in a denial of...

CVE-2021-36134: Out-of-bounds Write

Out of bounds write vulnerability in the JPEG parsing code of Netop Vision Pro up to and including 9.7.2 allows an adjacent unauthenticated attacker to write to arbitrary memory potentially leading to a Denial of Service DoS...

PT-2021-21131

Name of the Vulnerable Software and Affected Versions: Netop Vision Pro versions up to and including 9.7.2 Description: The issue is related to an out of bounds write vulnerability in the JPEG parsing code, which could allow an adjacent unauthenticated attacker to write to arbitrary memory. This...

Security Bulletin: IBM SDK, Java Tech Edition Quarterly CPU Jul 2021 - Includes Oracle Jul 2021 CPU (minus CVE-2021-2341)

Summary This Security Bulletin provides steps for updating Java for Db2 Query Management Facility QMF Workstation and QMF Vision. Vulnerability Details CVEID: CVE-2021-2388 DESCRIPTION: An unspecified vulnerability in Java SE related to the VM component could allow an unauthenticated attacker to...

Weak Password Vulnerability in Smart Camera of Shenzhen Anjiavision Information Technology Co.

Shenzhen Anjoy Vision Information Technology Co., Ltd. hereinafter referred to as: Anjoy Vision is a high-tech enterprise integrating R&D, production, sales and service. Shenzhen Anjoy Vision Information Technology Co., Ltd. smart camera has a weak password vulnerability, which can be exploited b...