Stack overflow

TRENDnet ProView Wireless camera TV-IP512WN 1.0R 1.0.4 is vulnerable to an unauthenticated stack-based buffer overflow in handling RTSP packets. This may result in remote code execution or denial of service. The issue is in the binary rtspd in /sbin when parsing a long "Authorization: Basic" RTSP...

CVE-2020-12763

TRENDnet ProView Wireless camera TV-IP512WN 1.0R 1.0.4 is vulnerable to an unauthenticated stack-based buffer overflow in handling RTSP packets. This may result in remote code execution or denial of service. The issue is in the binary rtspd in /sbin when parsing a long "Authorization: Basic" RTSP...

CVE-2020-12763

TRENDnet ProView Wireless camera TV-IP512WN 1.0R 1.0.4 is vulnerable to an unauthenticated stack-based buffer overflow in RTSP header parsing within the rtspd binary (/sbin). The flaw occurs when handling a long Authorization: Basic header and can lead to remote code execution or denial of servic...

CVE-2020-12763: Out-of-bounds Write

TRENDnet ProView Wireless camera TV-IP512WN 1.0R 1.0.4 is vulnerable to an unauthenticated stack-based buffer overflow in handling RTSP packets. This may result in remote code execution or denial of service. The issue is in the binary rtspd in /sbin when parsing a long "Authorization: Basic" RTSP...

PT-2020-13251

Name of the Vulnerable Software and Affected Versions TRENDnet ProView Wireless camera TV-IP512WN version 1.0R 1.0.4 Description The issue is an unauthenticated stack-based buffer overflow in handling RTSP packets, potentially resulting in remote code execution or denial of service. This occurs...

TP-Link NC260 and NC450 OS Command Injection Vulnerability

TP-Link NC260 and TP-Link NC450 are both a webcam from China P&L TP-Link. An operating system command injection vulnerability exists in the httpSetEncryptKeyRpm method of the ipcamera binary in the TP-Link NC260 version 1.5.2 build 200304 and the NC450 version 1.5.3 build 200304. A remote attacke...

Ubuntu 16.04 LTS / 18.04 LTS : Linux kernel vulnerabilities (USN-4345-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4345-1 advisory. Al Viro discovered that the Linux kernel for s390x systems did not properly perform page table upgrades for kernel sections that use secondar...

USN-4345-1: Linux kernel vulnerabilities

Al Viro discovered that the Linux kernel for s390x systems did not properly perform page table upgrades for kernel sections that use secondary address mode. A local attacker could use this to cause a denial of service system crash or execute arbitrary code. CVE-2020-11884 It was discovered that t...

USN-4345-1 linux, linux-aws, linux-aws-hwe, linux-azure, linux-gcp, linux-gke-4.15, linux-hwe, linux-kvm, linux-oem, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities

Al Viro discovered that the Linux kernel for s390x systems did not properly perform page table upgrades for kernel sections that use secondary address mode. A local attacker could use this to cause a denial of service system crash or execute arbitrary code. CVE-2020-11884 It was discovered that t...

Netatmo Smart Indoor Camera Injection Vulnerability

Netatmo Smart Indoor Camera is a smart webcam from the French company Netatmo. An injection vulnerability exists in Netatmo Smart Indoor Camera. An attacker can exploit this vulnerability to execute commands...

CVE-2019-17101

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in firmware versions prior to x.xx of Netatmo Smart Indoor Camera allows an attacker to execute commands on the device. This issue affects: Netatmo Smart Indoor Camera version and prior versions...

CVE-2019-17101

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in firmware versions prior to x.xx of Netatmo Smart Indoor Camera allows an attacker to execute commands on the device. This issue affects: Netatmo Smart Indoor Camera version and prior versions...

Command injection

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in firmware versions prior to x.xx of Netatmo Smart Indoor Camera allows an attacker to execute commands on the device. This issue affects: Netatmo Smart Indoor Camera version and prior versions...

CVE-2019-17101 Command execution due to unsanitized input in Netatmo Smart Indoor Security Camera

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in firmware versions prior to x.xx of Netatmo Smart Indoor Camera allows an attacker to execute commands on the device. This issue affects: Netatmo Smart Indoor Camera version and prior versions...

CVE-2019-17101

Netatmo CVE-2019-17101 is a Command Injection vulnerability in Netatmo Smart Indoor Camera firmware prior to an unspecified x.xx release. The issue stems from improper neutralization of special elements, allowing an attacker to execute commands on the device. Affected product: Netatmo Smart Indoo...

PT-2020-9873

Name of the Vulnerable Software and Affected Versions Netatmo Smart Indoor Camera versions prior to x.xx Description The issue is related to an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. This allows an attacker to execute commands on the devic...

CVE-2019-17101: Improper Neutralization of Special Elements used in a Command

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in firmware versions prior to x.xx of Netatmo Smart Indoor Camera allows an attacker to execute commands on the device. This issue affects: Netatmo Smart Indoor Camera version and prior versions...

CVE-2020-11668

A NULL pointer dereference flaw was found in the Xirlink camera USB driver 'xirlink-cit' in the Linux kernel. The driver mishandles invalid descriptors leading to a denial-of-service DoS. This could allow a local attacker with user privilege to crash the system or leak kernel internal information...

Multiple Dahua Products Input Validation Error Vulnerability (CNVD-2020-22980)

Dahua SD6AL Series and so on are the products of Dahua, China.SD6AL Series is a network camera of SD6AL series.NVR 5x Series is a network video recorder of 5x series.IPC-HX2XXX Series is a network camera of IPC-HX2XXX series.NVR 5x Series is a network video recorder of 5x series.NVR 5x Series is ...

Active camera is switched unexpectedly when you review photos in Camera app in Windows 8.1 or Windows Server 2012 R2

Active camera is switched unexpectedly when you review photos in Camera app in Windows 8.1 or Windows Server 2012 R2 Symptoms Consider the following scenario: You have a computer that is running Windows 8.1, Windows RT 8.1, or Windows Server 2012 R2. The computer has two or more cameras, such as...