8785 matches found
CVE-2008-4390
The CVE-2008-4390 entry affects Cisco Linksys WVC54GC/GCAs (wireless video cameras) prior to firmware 1.25. The issue is that, in response to a Setup Wizard remote-management command, the device sends cleartext configuration data over the network, enabling remote attackers to obtain sensitive det...
Linksys WVC54GC wireless video camera vulnerable to information disclosure
Overview The Linksys WVC54GC wireless video camera insecurely sends initial configuration information over the network, which can allow a remote, unauthenticated attacker to intercept video streams, access wireless network authentication credentials, modify the device firmware, or cause a...
Adobe Flash Player clickjacking
The Settings Manager in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to cause victims to unknowingly click on a link or dialog via access control dialogs disguised as normal graphical elements, as demonstrated by hijacking the camera or microphone, and related to "clickjacking...
Adobe Flash Player clickjacking
The Settings Manager in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to cause victims to unknowingly click on a link or dialog via access control dialogs disguised as normal graphical elements, as demonstrated by hijacking the camera or microphone, and related to "clickjacking...
Adobe Flash Player Multiple Security Bypass Vulnerabilities - Windows
Adobe Flash Player is prone to multiple security bypass vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
OpenSSL 'zlib'压缩内存泄漏远程拒绝服务漏洞
BUGTRAQ ID: 31692 CVE ID：CVE-2008-1678 CNCVE ID：CNCVE-20081678 OpenSSL是一种开放源码的SSL实现，用来实现网络通信的高强度加密。 OpenSSL 'zlib'压缩库存在一个内存泄漏问题，远程攻击者可以利用漏洞消耗大量内存而对服务程序进行拒绝服务攻击。 目前没有详细漏洞细节提供。 Axis Communications 2130 PTZ Network Camera 0.9.8h Axis Communications 2130 PTZ Network Camera 0.9.8g Axis Communications...
Design/Logic Flaw
The Settings Manager in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to cause victims to unknowingly click on a link or dialog via access control dialogs disguised as normal graphical elements, as demonstrated by hijacking the camera or microphone, and related to "clickjacking...
CVE-2008-4503
CVE-2008-4503 : Adobe Flash Player before 9.0.124.0 has a Settings Manager display flaw enabling clickjacking, where malicious content can disguise dialogs to trick the user into interacting with a link or dialog, potentially granting camera/microphone access. Multiple sources (Gentoo GLSA, OpenV...
Camera Life 2.6.2b4 - SQL Injection Cross-Site Scripting
Camera Life 2.6.2b4 - SQL Injection Cross-Site Scripting Cameralife 2.6.2b4 SQL/XSS Multiple Remote Vulnerabilities Script:Cameralife 2.6.2b4 Download:http://nchc.dl.sourceforge.net/sourceforge/fdcl/cameralife-2.6.2b4.zip Author:BackDoor Bug 1;album.php Remote SQL Injection Vulnerability...
CVE-2008-4366
CVE-2008-4366 is an unrestricted file upload in the image upload component of Camera Life 2.6.2b4. According to the connected documents, remote authenticated users can upload a file with an executable extension and then access it via a direct URL under images/photos/upload, potentially executing ...
CVE-2008-4366: Improper Input Validation
Unrestricted file upload vulnerability in the image upload component in Camera Life 2.6.2b4 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in a user directory under images/photos/uplo...
Camera Life 2.6.2b4 Arbitrary File Upload Vulnerability
Exploit for unknown platform in category web applications ======================================================= Camera Life 2.6.2b4 Arbitrary File Upload Vulnerability ======================================================= + CameraLife-2.6.2b4 Arbitrary File Upload Vulnerability +...
Siemens Gigaset WLAN Camera不安全默认密码漏洞
BUGTRAQ ID: 30973 CNCAN ID：CNCAN-2008090308 Siemens Gigaset WLAN Camera是一款基于LAN和WLAN的摄像头设备。 Siemens Gigaset WLAN Camera存在不安全默认密码，远程攻击者可以利用此密码未授权访问应用程序 Siemens Gigaset WLAN Camera 1.27 目前没有解决方案提供：...
Cross site scripting
Cross-site scripting XSS vulnerability in the error page feature in Panasonic Network Camera BL-C111, BL-C131, BB-HCM511, BB-HCM531, BB-HCM580, BB-HCM581, BB-HCM527, and BB-HCM515 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2008-3482
Cross-site scripting XSS vulnerability in the error page feature in Panasonic Network Camera BL-C111, BL-C131, BB-HCM511, BB-HCM531, BB-HCM580, BB-HCM581, BB-HCM527, and BB-HCM515 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2008-3482
Cross-site scripting XSS vulnerability in the error page feature in Panasonic Network Camera BL-C111, BL-C131, BB-HCM511, BB-HCM531, BB-HCM580, BB-HCM581, BB-HCM527, and BB-HCM515 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2008-3482
CVE-2008-3482 is a cross-site scripting (XSS) vulnerability in the error page feature of Panasonic Network Cameras (BL-C111, BL-C131, BB-HCM511, BB-HCM531, BB-HCM580, BB-HCM581, BB-HCM527, BB-HCM515). The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2008-3482: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the error page feature in Panasonic Network Camera BL-C111, BL-C131, BB-HCM511, BB-HCM531, BB-HCM580, BB-HCM581, BB-HCM527, and BB-HCM515 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...