241 matches found
CVE-2017-18675
An issue was discovered on Samsung mobile devices with M6.0 and N7.x Exynos7420 or Exynox8890 chipsets software. The Camera application can leak uninitialized memory via ion. The Samsung ID is SVE-2016-6989 April 2017...
Multiple Qualcomm Products Resource Management Error Vulnerability (CNVD-2020-09965)
Qualcomm MDM9206 and others are products of Qualcomm Incorporated.The MDM9206 is a central processing unit CPU product.The MDM9607 is a central processing unit CPU product.The SDX24 is a modem.The MDM9206 is a central processing unit CPU product.The MDM9607 is a central processing unit CPU...
Weak password vulnerability in Marlboze/Marlboze-w30 series cameras of Shenzhen Anjubao Electronics Co.
Webcam software can realize all kinds of hardware alarm effects, so you can enjoy real-time home monitoring experience, so you can easily understand the situation in the family. Shenzhen Anjubao Electronics Co., Ltd Marlboze/Marlboze-w30 series camera has a weak password vulnerability, which can ...
ACTi ACM-5611 Camera Remote Command Execution Vulnerability
The ACTi ACM-5611 is a network camera manufactured by ACTI. A remote command execution vulnerability exists in the ACTi ACM-5611 Camera. The vulnerability stems from the program not properly validating user-submitted data. A remote attacker can exploit this vulnerability by sending a malicious HT...
MicroDigital N-series cameras Operating System Command Injection Vulnerability
MicroDigital N-series cameras is an N-series network camera from MicroDigital Korea. An operating system command injection vulnerability exists in MicroDigital N-series cameras. An attacker can exploit this vulnerability to execute illegal operating system commands...
D-Link DCS-1100 and D-Link DCS-1130 Cross-Site Request Forgery Vulnerabilities (CNVD-2019-23338)
The D-Link DCS-1100 and the D-Link DCS-1130 are both network cameras from Taiwan, China-based AUO D-Link. A cross-site request forgery vulnerability exists in the D-Link DCS-1130 and DCS-1100 that stems from the program not performing authentication checks by default. An attacker could exploit th...
Unauthorized Access Vulnerability in Hikvision Cameras
Hikvision is a video-centric IoT solution provider, offering integrated security, smart business and big data services. An unauthorized access vulnerability exists in Hikvision cameras, which can be exploited by attackers to perform arbitrary operations...
Schneider Electric 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera Arbitrary OS Command Execution Vulnerability
Schneider Electric 1st Gen Pelco Sarix Enhanced Camera and Schneider Electric Spectra Enhanced PTZ Camera are products of Schneider Electric, France. The Schneider Electric 1st Gen Pelco Sarix Enhanced Camera is a series of fixed IP cameras and the Schneider Electric Spectra Enhanced PTZ Camera i...
CVE-2019-10711
Incorrect access control in the RTSP stream and web portal on all IP cameras based on Hisilicon Hi3510 firmware until Webware version V1.0.1 allows attackers to view an RTSP stream by connecting to the stream with hidden credentials guest or user that are neither displayed nor configurable in the...
CVE-2018-12672
The SV3C HD Camera L-SERIES V2.3.4.2103-S50-NTD-B20170508B does not perform proper validation on user-supplied input and is vulnerable to cross-site scripting attacks. If proper authorization was implemented, this vulnerability could be leveraged to perform actions on behalf of another user or th...
CVE-2018-12670
SV3C L-SERIES HD CAMERA V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B devices allow OS Command Injection...
CVE-2018-0662
Multiple I-O DATA network camera products TS-WRLP firmware Ver.1.09.04 and earlier, TS-WRLA firmware Ver.1.09.04 and earlier, TS-WRLP/E firmware Ver.1.09.04 and earlier allow an attacker on the same network segment to add malicious files on the device and execute arbitrary code...
Command Injection Vulnerability in Schneider Pelco Sarix Pro Camera set Program system.download.sd_file
Pelco Sarix Pro is a video surveillance device from Schneider Electric France. A command injection vulnerability exists in the Schneider Pelco Sarix Pro camera set program system.download.sdfile, which can be exploited by an attacker to execute arbitrary commands in the background via an http...
CVE-2018-7516
A server-side request forgery vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which could lead to proxied network scans...
Arbitrary File Download Vulnerability in the Pelco Sarix Pro Webcam ssldownload.cgi Program
pelco Sarix Professional is a video camera. An arbitrary file download vulnerability exists in the pelco Sarix Pro network camera ssldownload.cgi program. The vulnerability is caused due to the program failing to properly check the path and name of the downloaded file, allowing an attacker to...
A week in security (November 13 – November 19)
Last week, we gave you some tips for the inevitable online chaos that is Cyber Monday, explained how "trusted" root certificates can sometimes be anything but, and explored the strange world of catphishing. We also pulled apart some malware found on Google Play and laid out the specifics of the...
Google Android Qualcomm Camera Privilege Vulnerability
Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA.Qualcomm Camera is a camera program developed by Qualcomm. Qualcomm Camera is a camera program developed by Qualcomm...
Android Qualcomm Camera elevation of privilege vulnerability (CNVD-2017-34667)
Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA.Qualcomm Camera is a camera program developed by Qualcomm. Qualcomm Camera is a camera program developed by Qualcomm...
Google Android system (camera) elevation of privilege vulnerability
Android is a free and open-source Linux-based operating system for mobile devices such as smartphones and tablets, led and developed by Google Inc. and the Open Handset Alliance. A security vulnerability exists in the Android system camera that allows remote attackers to exploit the vulnerability...