9371 matches found
CVE-2019-13953
An exploitable authentication bypass vulnerability exists in the Bluetooth Low Energy BLE authentication module of YI M1 Mirrorless Camera V3.2-cn. An attacker can send a set of BLE commands to trigger this vulnerability, resulting in sensitive data leakage e.g., personal photos. An attacker can...
CVE-2019-13953
An exploitable authentication bypass vulnerability exists in the Bluetooth Low Energy BLE authentication module of YI M1 Mirrorless Camera V3.2-cn. An attacker can send a set of BLE commands to trigger this vulnerability, resulting in sensitive data leakage e.g., personal photos. An attacker can...
CVE-2019-13953
CVE-2019-13953 affects the BLE authentication module in the YI M1 Mirrorless Camera V3.2-cn. The vulnerability allows an attacker to bypass authentication by sending a sequence of BLE commands, enabling sensitive data leakage (e.g., personal photos) and the ability to control the camera to record...
CVE-2019-13953
An exploitable authentication bypass vulnerability exists in the Bluetooth Low Energy BLE authentication module of YI M1 Mirrorless Camera V3.2-cn. An attacker can send a set of BLE commands to trigger this vulnerability, resulting in sensitive data leakage e.g., personal photos. An attacker can...
CVE-2019-13953: Undefined Security Weakness
An exploitable authentication bypass vulnerability exists in the Bluetooth Low Energy BLE authentication module of YI M1 Mirrorless Camera V3.2-cn. An attacker can send a set of BLE commands to trigger this vulnerability, resulting in sensitive data leakage e.g., personal photos. An attacker can...
PT-2019-13492
Name of the Vulnerable Software and Affected Versions YI M1 Mirrorless Camera version V3.2-cn Description An authentication bypass issue exists in the Bluetooth Low Energy BLE authentication module, allowing an attacker to send a set of BLE commands and trigger the issue. This results in sensitiv...
Unspecified Vulnerability in Mozilla Firefox (CNVD-2019-30442)
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. An unspecified vulnerability exists in Mozilla Firefox prior to version 69, which can be exploited by attackers to bypass security restrictions and access microphone and camera resources...
Mozilla: Camera information available without prompting using getUserMedia
A vulnerability exists in WebRTC where malicious web content can use probing techniques on the getUserMedia API using constraints to reveal device properties of cameras on the system without triggering a user prompt or notification. This allows for the potential fingerprinting of users. This...
Mozilla: Persistence of WebRTC permissions in a third party context
WebRTC in Firefox will honor persisted permissions given to sites for access to microphone and camera resources even when in a third-party context. In light of recent high profile vulnerabilities in other software, a decision was made to no longer persist these permissions. This avoids the...
CVE-2019-11748
WebRTC in Firefox will honor persisted permissions given to sites for access to microphone and camera resources even when in a third-party context. In light of recent high profile vulnerabilities in other software, a decision was made to no longer persist these permissions. This avoids the...
UBUNTU-CVE-2019-11749
A vulnerability exists in WebRTC where malicious web content can use probing techniques on the getUserMedia API using constraints to reveal device properties of cameras on the system without triggering a user prompt or notification. This allows for the potential fingerprinting of users. This...
CVE-2019-11748
WebRTC in Firefox will honor persisted permissions given to sites for access to microphone and camera resources even when in a third-party context. In light of recent high profile vulnerabilities in other software, a decision was made to no longer persist these permissions. This avoids the...
UBUNTU-CVE-2019-11748
WebRTC in Firefox will honor persisted permissions given to sites for access to microphone and camera resources even when in a third-party context. In light of recent high profile vulnerabilities in other software, a decision was made to no longer persist these permissions. This avoids the...
Security fix for the ALT Linux 10 package firefox-esr version 68.1.0-alt1
Sept. 4, 2019 Andrey Cherepanov 68.1.0-alt1 - New ESR version 68.1.0. - Fixed: + CVE-2019-11751 Malicious code execution through command line parameters + CVE-2019-11746 Use-after-free while manipulating video + CVE-2019-11744 XSS by breaking out of title and textarea elements using innerHTML +...
FreeBSD : mozilla -- multiple vulnerabilities (05463e0a-abd3-4fa4-bd5f-cd5ed132d4c6)
Mozilla Foundation reports : CVE-2019-11751: Malicious code execution through command line parameters CVE-2019-11746: Use-after-free while manipulating video CVE-2019-11744: XSS by breaking out of title and textarea elements using innerHTML CVE-2019-11742: Same-origin policy violation with SVG...
PT-2019-5156
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 69 Firefox ESR versions prior to 68.1 Description The issue is related to the improper assignment of access permissions for critical resources in Firefox, specifically concerning WebRTC permissions for microphone and...
AndroVideo Advan VD-1 Access Control Error Vulnerability
The AndroVideo Advan VD-1 is a security camera from AndroVideo Taiwan, China. An access control error vulnerability exists in AndroVideo Advan VD-1. The vulnerability can be exploited to install arbitrary APKs without authentication by sending a POST request to the cgibin/ApkUpload.cgi file...
AndroVideo Advan VD-1 Access Control Error Vulnerability (CNVD-2019-34624)
The AndroVideo Advan VD-1 is a security camera from AndroVideo, a Taiwan, China-based company. The AndroVideo Advan VD-1 suffers from an access control error vulnerability for which no detailed vulnerability details are available at this time...
AndroVideo Advan VD-1 Path Traversal Vulnerability
The AndroVideo Advan VD-1 is a security camera from AndroVideo Taiwan, China. A path traversal vulnerability exists in AndroVideo Advan VD-1. An attacker can exploit this vulnerability to access locations outside of a restricted directory...
Threat Source newsletter (Aug. 22)
Newsletter compiled by Jon Munshaw. Welcome to this week’s Threat Source newsletter — the perfect place to get caught up on all things Talos from the past week. A lot of people may think that cyber insurance is this new, unexplored field that carries a lot of questions. But did you know that thes...