9366 matches found
CVE-2023-31996: Improper Neutralization of Special Elements used in a Command
Hanwha IP Camera ANE-L7012R 1.41.01 is vulnerable to Command Injection due to improper sanitization of special characters for the NAS storage test function...
PT-2023-23560 · Hanwha · Hanwha Ip Camera Ane-L7012R
Name of the Vulnerable Software and Affected Versions: Hanwha IP Camera ANE-L7012R version 1.41.01 Description: The issue is related to Cross Site Scripting XSS. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issu...
CVE-2023-33244
Obsidian before 1.2.2 allows calls to unintended APIs for microphone access, camera access, and desktop notification via an embedded web page...
CVE-2023-33244
Obsidian before 1.2.2 allows calls to unintended APIs for microphone access, camera access, and desktop notification via an embedded web page...
Design/Logic Flaw
Obsidian before 1.2.2 allows calls to unintended APIs for microphone access, camera access, and desktop notification via an embedded web page...
CVE-2023-33244
Obsidian before 1.2.2 allows calls to unintended APIs for microphone access, camera access, and desktop notification via an embedded web page...
CVE-2023-33244
Obsidian before 1.2.2 allows calls to unintended APIs for microphone access, camera access, and desktop notification via an embedded web page...
CVE-2023-33244: Undefined Security Weakness
Obsidian before 1.2.2 allows calls to unintended APIs for microphone access, camera access, and desktop notification via an embedded web page...
PT-2023-24240 · Obsidian · Obsidian
Name of the Vulnerable Software and Affected Versions: Obsidian versions prior to 1.2.2 Description: The issue allows calls to unintended APIs, including those for microphone access, camera access, and desktop notification, via an embedded web page. Recommendations: For versions prior to 1.2.2,...
PT-2023-2893 · Apple · Macos Monterey +8
Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 9.5 tvOS versions prior to 16.5 macOS Ventura versions prior to 13.4 iOS versions prior to 15.7.6 and prior to 16.5 iPadOS versions prior to 15.7.6 and prior to 16.5 macOS Big Sur versions prior to 11.7.7 macOS...
CVE-2023-29862
An issue found in Agasio-Camera device version not specified allows a remote attacker to execute arbitrary code via the check and authLevel parameters...
Code injection
An issue found in Agasio-Camera device version not specified allows a remote attacker to execute arbitrary code via the check and authLevel parameters...
CVE-2023-29862
An issue found in Agasio-Camera device version not specified allows a remote attacker to execute arbitrary code via the check and authLevel parameters...
CVE-2023-29862
An issue found in Agasio-Camera device version not specified allows a remote attacker to execute arbitrary code via the check and authLevel parameters...
Teledyne FLIR FLIR-DVTEL camera security vulnerabilities
Teledyne FLIR FLIR-DVTEL camera is a series of camera surveillance devices from Teledyne FLIR USA. A security vulnerability exists in Teledyne FLIR FLIR-DVTEL camera that originates from an attacker being able to remotely execute arbitrary code via a crafted request to the device's administration...
Agasio-Camera security vulnerabilities
Dericam Agasio-Camera is a series of camera surveillance devices from Dericam Technology Dericam, a Chinese company. A security vulnerability exists in Agasio-Camera that originates from allowing remote attackers to execute arbitrary code via the check and authLevel parameters...
PT-2023-22453 · Unknown · Agasio-Camera
Name of the Vulnerable Software and Affected Versions: Agasio-Camera affected versions not specified Description: An issue in the Agasio-Camera device allows a remote attacker to execute arbitrary code via the check and authLevel parameters. Recommendations: At the moment, there is no information...
CVE-2023-29862
CVE-2023-29862 affects the Agasio-Camera device (vendor/brand: Dericam) with a remote code execution condition triggered by manipulating the check and authLevel parameters. The linked Red Hat/NVD/CVE entries reaffirm the vulnerability description but do not provide concrete patch versions or vend...
CVE-2023-29862: Improper Control of Generation of Code
An issue found in Agasio-Camera device version not specified allows a remote attacker to execute arbitrary code via the check and authLevel parameters...
