7806 matches found
CVE-2018-7828
CVE-2018-7828 is a CSRF vulnerability in Schneider Electric’s Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera. The issue stems from a web interface that does not adequately validate requests from trusted users, enabling an authenticated user to perform unintended actions by visiting a...
CVE-2018-7827
CVE-2018-7827 is a publicly documented Cross-Site Scripting (XSS) vulnerability in Schneider Electric 1st Gen Pelco Sarix Enhanced Cameras and Spectra Enhanced PTZ Cameras. Multiple connected sources (NVD, Red Hat, CNVD, CVE listing) describe an XSS that allows a remote attacker to cause arbitrar...
CVE-2018-7826
A Command Injection vulnerability exists in the web-based GUI of the 1st Gen Pelco Sarix Enhanced Camera that could allow a remote attacker to execute arbitrary commands...
CVE-2018-7826
The CVE-2018-7826 entry concerns a Command Injection vulnerability in the web-based GUI of the Schneider Electric 1st Gen Pelco Sarix Enhanced Camera . Connected sources describe the root cause as insufficient input validation during construction of executable commands in the web interface, enabl...
CVE-2018-7825
CVE-2018-7825 affects Schneider Electric’s 1st Gen Pelco Sarix Enhanced Camera, with a vulnerability in the web-based GUI that allows remote command injection due to improper handling of input used to construct executable commands. This could let an attacker execute arbitrary commands on the devi...
CVE-2018-7825
A Command Injection vulnerability exists in the web-based GUI of the 1st Gen PelcoSarix Enhanced Camera that could allow a remote attacker to execute arbitrary commands...
CVE-2018-7816
Technical details about CVE-2018-7816 are not provided in the connected documents. The available sources reiterate a permissions/privilege issue in the web GUI of the 1st Gen Pelco Sarix Enhanced Camera without specifics on affected versions or exploitability. Monitor for updates.
DeviceViewer suffers from a password field overflow vulnerability
DeviceViewer is a Windows-based IP camera viewing application. DeviceViewer suffers from a password field overflow vulnerability that can be exploited by an attacker to gain privileges on a user's system...
TP-Link IP Cameras Default Credentials (HTTP)
The remote installation of TP-Link Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either...
EulerOS Virtualization for ARM 64 3.0.1.0 : kernel (EulerOS-SA-2019-1517)
According to the versions of the kernel packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - A memory corruption flaw was found in the way the USB ConnectTech WhiteHEAT serial driver processed completion command...
Novatek NT9665X XML_GetScreen Strncmp denial-of-service vulnerability
Summary An exploitable denial-of-service vulnerability exists in the XMLGetScreen Wi-Fi command of the NT9665X Chipset firmware, running on the Anker Roav A1 Dashcam, version “RoavA1SWV1.9.” A specially crafted set of packets can cause an invalid memory dereference, resulting in a device reboot...
CVE-2019-11878
An issue was discovered on XiongMai Besder IP20H1 V4.02.R12.00035520.12012.047500.00200 cameras. An attacker on the same local network as the camera can craft a message with a size field larger than 0x80000000 and send it to the camera, related to an integer overflow or use of a negative number...
CVE-2019-11878
An issue was discovered on XiongMai Besder IP20H1 V4.02.R12.00035520.12012.047500.00200 cameras. An attacker on the same local network as the camera can craft a message with a size field larger than 0x80000000 and send it to the camera, related to an integer overflow or use of a negative number...
Integer overflow
An issue was discovered on XiongMai Besder IP20H1 V4.02.R12.00035520.12012.047500.00200 cameras. An attacker on the same local network as the camera can craft a message with a size field larger than 0x80000000 and send it to the camera, related to an integer overflow or use of a negative number...
CVE-2019-11878
An issue was discovered on XiongMai Besder IP20H1 V4.02.R12.00035520.12012.047500.00200 cameras. An attacker on the same local network as the camera can craft a message with a size field larger than 0x80000000 and send it to the camera, related to an integer overflow or use of a negative number...
CVE-2019-11878
The vulnerability CVE-2019-11878 affects XiongMai Besder IP20H1 devices (versions including V4.02.R12.00035520.12012.047500.00200). An attacker on the same local network can craft a message with a size field larger than 0x80000000, relating to an integer overflow or negative-number handling, whic...
DeviceViewer Buffer Overflow Vulnerability
DeviceViewer is a Windows-based IP camera viewing application. A buffer overflow vulnerability exists in DeviceViewer version 3.12.0.1, which can be exploited by an attacker to cause a buffer overflow or heap overflow...
Airbnb Superhost Secretly Recorded Guests with Hidden Bedroom Camera
An Airbnb “superhost” in China has been arrested after a guest staying in his house found a hidden camera recording her in the bedroom. The guest, an unnamed woman who was staying in the Airbnb in eastern China last week, said she discovered the camera after spotting a light that looked unusual i...