Lucene search
+L

14898 matches found

OSV
OSV
added 2021/02/19 5:05 p.m.3 views

OPENSUSE-SU-2021:0312-1 Security update for mumble

This update for mumble fixes the following issues: mumble was updated to 1.3.4: Fix use of outdated non-existent notification icon names Fix Security vulnerability caused by allowing non http/https URL schemes in public server list boo1182123 Server: Fix Exit status for actions like --version or...

7.1AI score
SaveExploits0References3
OPENSUSE Linux
OPENSUSE Linux
added 2021/02/19 12:00 a.m.17 views

Security update for mumble (moderate)

openSUSE Security Update: Security update for mumble Announcement ID: openSUSE-SU-2021:0312-1 Rating: moderate References: 1180068 1182123 Affected Products: openSUSE Backports SLE-15-SP2 An update that contains security fixes can now be installed. Description: This update for mumble fixes the...

7.3AI score
SaveExploits0
Citrix
Citrix
added 2021/02/19 12:00 a.m.22 views

Recommended configurations for Linux Thin Client when experiencing audio delays

Experiencing audio delays when using a Linux based thin client with a IP phone applications for example using Avaya...

7.2AI score
SaveExploits0
Prion
Prion
added 2021/02/18 6:15 p.m.24 views

Double free

Opencast is a free, open-source platform to support the management of educational audio and video content. In Opencast before version 9.2 there is a vulnerability in which publishing an episode with strict access rules will overwrite the currently set series access. This allows for an easy denial...

5.5CVSS5.5AI score0.00707EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/02/18 5:20 p.m.35 views

CVE-2021-21318 Removing access may not effect published series

Opencast is a free, open-source platform to support the management of educational audio and video content. In Opencast before version 9.2 there is a vulnerability in which publishing an episode with strict access rules will overwrite the currently set series access. This allows for an easy denial...

5.4CVSS5.7AI score0.00707EPSS
SaveExploits0References2
Trellix
Trellix
added 2021/02/18 12:00 a.m.26 views

Beyond Clubhouse: Vulnerable Agora SDKs Still in Widespread Use | McAfee Blogs

Beyond Clubhouse: Vulnerable Agora SDKs Still in Widespread Use Steve Povolny · FEB 18, 2021 On February 17th, 2021, McAfee disclosed findings based on a 10-month long disclosure process with major video conferencing vendor Agora, Inc. As we disclosed the findings to Agora in April 2020, this...

5.9CVSS5.6AI score0.06254EPSS
SaveExploits1
Trellix
Trellix
added 2021/02/18 12:00 a.m.28 views

Beyond Clubhouse: Vulnerable Agora SDKs Still in Widespread Use | McAfee Blogs

Beyond Clubhouse: Vulnerable Agora SDKs Still in Widespread Use Steve Povolny · FEB 18, 2021 On February 17th, 2021, McAfee disclosed findings based on a 10-month long disclosure process with major video conferencing vendor Agora, Inc. As we disclosed the findings to Agora in April 2020, this...

5.7AI score0.06254EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2021/02/18 12:00 a.m.7 views

PT-2021-17111 · Sangoma +1 · Asterisk +1

Name of the Vulnerable Software and Affected Versions: Sangoma Asterisk versions 16.x through 16.16.0 Sangoma Asterisk versions 17.x through 17.9.1 Sangoma Asterisk versions 18.x through 18.2.0 Certified Asterisk versions prior to 16.8-cert6 Description: An issue was discovered in Sangoma Asteris...

8.8CVSS6.1AI score0.4557EPSS
SaveExploits13References50
OSV
OSV
added 2021/02/17 9:15 p.m.12 views

CVE-2020-25605

Cleartext transmission of sensitive information in Agora Video SDK prior to 3.1 allows a remote attacker to obtain access to audio and video of any ongoing Agora video call through observation of cleartext network traffic...

5.9CVSS6.5AI score0.06254EPSS
SaveExploits1References2
Prion
Prion
added 2021/02/17 9:15 p.m.27 views

Design/Logic Flaw

Cleartext transmission of sensitive information in Agora Video SDK prior to 3.1 allows a remote attacker to obtain access to audio and video of any ongoing Agora video call through observation of cleartext network traffic...

4.3CVSS5.6AI score0.06254EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2021/02/17 8:40 p.m.32 views

CVE-2020-25605

Cleartext transmission of sensitive information in Agora Video SDK prior to 3.1 allows a remote attacker to obtain access to audio and video of any ongoing Agora video call through observation of cleartext network traffic...

5.5AI score0.06254EPSS
SaveExploits1References2
CVE
CVE
added 2021/02/17 8:40 p.m.84 views

CVE-2020-25605

Agora Video SDKs prior to 3.1 were vulnerable to cleartext transmission of sensitive information (including App ID, channel, and token), enabling an attacker on the network to observe call setup data and potentially join ongoing calls to access audio/video. The issue has been mitigated in version...

5.9CVSS5.4AI score0.06254EPSS
SaveExploits1References2Affected Software1
Malwarebytes
Malwarebytes
added 2021/02/17 4:26 p.m.53 views

Clubhouse under scrutiny for sending data to Chinese servers

The audio-chat app Clubhouse is the latest rage in the social media landscape. What makes it so popular and, now its part of the social media landscape, can we trust it? The Clubhouse app Clubhouse was launched about a year ago and was initially only used by Silicon Valley’s rich and famous. It i...

0.6AI score
SaveExploits0
CNNVD
CNNVD
added 2021/02/17 12:00 a.m.25 views

Agora Agora Video SDK Information Disclosure Vulnerability

Agora Agora Video SDK is an application from the American company Agora. It provides a feature to add real-time audio and video interaction to games, increasing the interactive features between players. An information disclosure vulnerability exists in the Agora Video SDK, which stems from a...

5.9CVSS6.5AI score0.06254EPSS
SaveExploits1References3
OSV
OSV
added 2021/02/16 11:04 a.m.1 views

OPENSUSE-SU-2021:0300-1 Security update for mumble

This update for mumble fixes the following issues: mumble was updated to 1.3.4: Fix use of outdated non-existent notification icon names Fix Security vulnerability caused by allowing non http/https URL schemes in public server list boo1182123 Server: Fix Exit status for actions like --version or...

7.1AI score
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/02/16 12:00 a.m.13 views

The vulnerability of the gst_aac_parse_sink_setcaps function (gst/audioparsers/gstaacparse.c) in the gst-plugins-good plugin for the Gstreamer multimedia framework allows a malicious actor to cause a service failure.

The vulnerability of the gstaacparsesinksetcaps function gst/audioparsers/gstaacparse.c in the gst-plugins-good plugin for the Gstreamer multimedia framework is related to the execution of operations outside of the buffer memory. Exploiting this vulnerability could allow a remote attacker to caus...

7.8CVSS7AI score0.02668EPSS
SaveExploits0References6Affected Software4
OPENSUSE Linux
OPENSUSE Linux
added 2021/02/16 12:00 a.m.76 views

Security update for mumble (moderate)

openSUSE Security Update: Security update for mumble Announcement ID: openSUSE-SU-2021:0300-1 Rating: moderate References: 1180068 1182123 Affected Products: openSUSE Leap 15.2 An update that contains security fixes can now be installed. Description: This update for mumble fixes the following...

7.3AI score
SaveExploits0
Fedora
Fedora
added 2021/02/15 1:32 a.m.97 views

[SECURITY] Fedora 33 Update: audacity-2.4.2-4.fc33

Audacity is a cross-platform multitrack audio editor. It allows you to record sounds directly or to import files in various formats. It features a few simple effects, all of the editing features you should need, and unlimited undo. The GUI was built with wxWidgets and the audio I/O supports...

3.3CVSS2.3AI score0.00475EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2021/02/15 12:00 a.m.16 views

Fedora: Security Advisory for audacity (FEDORA-2021-8aaccdbb5f)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

3.3CVSS4AI score0.00475EPSS
SaveExploits0References2
The Hacker News
The Hacker News
added 2021/02/12 10:18 a.m.115 views

Secret Chat in Telegram Left Self-Destructing Media Files On Devices

Popular messaging app Telegram fixed a privacy-defeating bug in its macOS app that made it possible to access self-destructing audio and video messages long after they disappeared from secret chats. The vulnerability was discovered by security researcher Dhiraj Mishra in version 7.3 of the app, w...

0.2AI score
SaveExploits0
Rows per page
Query Builder