Lucene search
+L

9238 matches found

Zero Day Initiative
Zero Day Initiative
•added 2024/01/11 12:00 a.m.•38 views

D-Link DCS-8300LHV2 ONVIF SetSystemDateAndTime Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DCS-8300LHV2 IP cameras. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8CVSS7.6AI score0.01707EPSS
SaveExploits0References1
NVD
NVD
•added 2024/01/10 10:15 p.m.•40 views

CVE-2023-41994

A logic issue was addressed with improved checks This issue is fixed in macOS Sonoma 14. A camera extension may be able to access the camera view from apps other than the app for which it was granted permission...

5.5CVSS4.5AI score0.00222EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2024/01/10 10:15 p.m.•22 views

CVE-2023-41994

A logic issue was addressed with improved checks This issue is fixed in macOS Sonoma 14. A camera extension may be able to access the camera view from apps other than the app for which it was granted permission...

5.5CVSS5.8AI score0.00222EPSS
SaveExploits0References2
Prion
Prion
•added 2024/01/10 10:15 p.m.•30 views

Design/Logic Flaw

A logic issue was addressed with improved checks This issue is fixed in macOS Sonoma 14. A camera extension may be able to access the camera view from apps other than the app for which it was granted permission...

1.9CVSS6AI score0.00222EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2024/01/10 10:03 p.m.•93 views

CVE-2023-41994

CVE-2023-41994 affects macOS via a logic issue in CoreMedia where a camera extension may access the camera view from apps other than the one granted permission. The issue is fixed in macOS Sonoma 14. Root cause: insufficient access checks in CoreMedia. Impact: potential exposure of camera view; e...

5.5CVSS5.2AI score0.00222EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2024/01/10 10:03 p.m.•7 views

CVE-2023-41994

A logic issue was addressed with improved checks This issue is fixed in macOS Sonoma 14. A camera extension may be able to access the camera view from apps other than the app for which it was granted permission...

4.8AI score0.00222EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/01/10 10:03 p.m.•47 views

CVE-2023-41994

A logic issue was addressed with improved checks This issue is fixed in macOS Sonoma 14. A camera extension may be able to access the camera view from apps other than the app for which it was granted permission...

6.3AI score0.00222EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/01/10 12:00 a.m.•20 views

Apple macOS Sonoma Security Vulnerability

Apple macOS Sonoma is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Sonoma version 14, which stems from a camera extension that may be able to access the camera view from an application other than the one to which permission has be...

5.5CVSS6.5AI score0.00222EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/01/10 12:00 a.m.•18 views

Teledyne FLIR AX8 Path Traversal Vulnerability

The Teledyne FLIR AX8 is a series of thermal surveillance cameras from Teledyne FLIR USA. The Teledyne FLIR AX8 is vulnerable to a path traversal vulnerability that stems from the presence of a path traversal vulnerability...

7.5CVSS6.8AI score0.01254EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/10 12:00 a.m.•5 views

CVE-2023-41994: Incorrect Authorization

A logic issue was addressed with improved checks This issue is fixed in macOS Sonoma 14. A camera extension may be able to access the camera view from apps other than the app for which it was granted permission...

5.5CVSS5.9AI score0.00222EPSS
SaveExploits0References2
NVD
NVD
•added 2024/01/02 8:15 a.m.•30 views

CVE-2023-47857

in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia camera crash through modify a released pointer...

5.5CVSS4.7AI score0.00154EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/01/02 8:15 a.m.•25 views

CVE-2023-47857

in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia camera crash through modify a released pointer...

5.5CVSS5.8AI score0.00154EPSS
SaveExploits0References1
Prion
Prion
•added 2024/01/02 8:15 a.m.•33 views

Null pointer dereference

in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia camera crash through modify a released pointer...

1.7CVSS7AI score0.00154EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/01/02 7:24 a.m.•11 views

CVE-2023-47857 multimedia camera has a UAF vulnerability

in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia camera crash through modify a released pointer...

4CVSS5.5AI score0.00154EPSS
SaveExploits0References1
Mend
Mend
•added 2024/01/02 7:24 a.m.•11 views

CVE-2023-47857

in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia camera crash through modify a released pointer...

5.5CVSS0.00154EPSS
SaveExploits0References1
CVE
CVE
•added 2024/01/02 7:24 a.m.•79 views

CVE-2023-47857

CVE-2023-47857 affects OpenHarmony v3.2.2 and earlier. The issue is a use-after-release of a multimedia camera component pointer, enabling a local attacker to crash the camera. Root cause: pointer is released and then reused, leading to a crash (UAF) in the camera subsystem. Public references des...

5.5CVSS5.5AI score0.00154EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2024/01/02 12:00 a.m.•26 views

PT-2024-13520 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 3.2.2 Description: The issue allows a local attacker to cause a multimedia camera crash by modifying a released pointer. Recommendations: For OpenHarmony versions prior to 3.2.2, update to a version that contains...

5.5CVSS6.7AI score0.00154EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2024/01/02 12:00 a.m.•19 views

OpenHarmony Resource Management Error Vulnerability

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom Foundation OpenAtom Foundation Foundation. A security vulnerability exists in OpenHarmony version v3.2.2 and earlier versions, which originates from the reuse of a multimedia camera component pointer after...

5.5CVSS6.7AI score0.00154EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/02 12:00 a.m.•10 views

CVE-2023-47857: Use After Free

in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia camera crash through modify a released pointer...

5.5CVSS5.9AI score0.00154EPSS
SaveExploits0References3
osv_asb
osv_asb
•added 2024/01/01 12:00 a.m.•58 views

ASB-A-285142084

In shouldUseNoOpLocation of CameraActivity.java, there is a possible confused deputy due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

5.5CVSS5.8AI score0.00105EPSS
SaveExploits0References2
Rows per page
Query Builder