42270 matches found
CVE-2026-93853
Unverified ownership in Barman snapshot backup deletion allows a principal who can write the backup catalog to cause Barman to delete unrelated cloud snapshots. When a snapshot backup is deleted, either explicitly or by retention policy enforcement, Barman reads the snapshot identifiers from the...
CVE-2026-96587 Use of Hard-coded Credentials in Viidure Dashcam Android Application
The Viidure Android application embeds permanent, plaintext cloud storage credentials within its compiled code. These credentials provide full access to critical platform storage, including the ability to read, modify, or delete operational files such as firmware and application binaries...
CVE-2026-96587
The Viidure Dashcam Android application contains a critical vulnerability where permanent, plaintext cloud storage credentials are embedded within its compiled code. This flaw allows unauthorized entities to gain full access to critical platform storage, enabling them to read, modify, or delete o...
EUVD-2026-89458
The Viidure Android application embeds permanent, plaintext cloud storage credentials within its compiled code. These credentials provide full access to critical platform storage, including the ability to read, modify, or delete operational files such as firmware and application binaries...
CVE-2026-94204 Incorrect Permission Assignment for Critical Resource in Viidure Dashcam Android Application
The central cloud storage backend for the entire dashcam platform is misconfigured with public-read permissions, allowing unrestricted access to all stored objects. Because this bucket serves as shared storage for the platform, sensitive user records, live dashcam footage, application packages, a...
CVE-2026-94204
The Viidure Dashcam Android Application suffers from a critical misconfiguration where the central cloud storage backend is assigned public-read permissions . This flaw allows anyone on the internet unrestricted access to the shared storage bucket, exposing sensitive user records , live dashcam f...
CVE-2026-100293
In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, both the local and cloud update mechanisms apply new firmware without any cryptographic verification, relying only on basic hashing. This design allows an attacker who can reach the update routine to introduce untrusted firmware images that the...
CVE-2026-100294
In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the firmware embeds hardcoded cloud‑API credentials that are shared across deployed devices. Anyone obtaining the public firmware package can reuse these values to interact with the cloud service in ways not intended for normal operation...
CVE-2026-102879 ClaraVerse through 0.3.1 SSRF Protection Bypass
ClaraVerse through 0.3.1 contains server-side request forgery protection bypasses in the downloadfile and scrapeweb agent tools. Authenticated users can bypass hostname validation and IPv6 transition address filtering to make the server request internal services and cloud instance metadata...
CVE-2026-102879
The ClaraVerse software, up to version 0.3.1 , is vulnerable to a Server-Side Request Forgery (SSRF) protection bypass within the download_file and scrape_web agent tools. The root cause allows authenticated users to circumvent hostname validation and IPv6 transition address filtering. This enabl...
CVE-2026-100294 Use of Hard-coded Credentials in Anjvision YSSD-RTMP-H5
In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the firmware embeds hardcoded cloud‑API credentials that are shared across deployed devices. Anyone obtaining the public firmware package can reuse these values to interact with the cloud service in ways not intended for normal operation...
CVE-2026-100294
The Anjvision YSSD‑RTMP‑H5 firmware, specifically version 3.3.2.4 , contains hardcoded cloud‑API credentials that are shared across all deployed devices. An attacker who obtains the public firmware package can extract these credentials to interact with the cloud service in unauthorized ways. No s...
EUVD-2026-89369
In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the firmware embeds hardcoded cloud‑API credentials that are shared across deployed devices. Anyone obtaining the public firmware package can reuse these values to interact with the cloud service in ways not intended for normal operation...
CVE-2026-100294 Use of Hard-coded Credentials in Anjvision YSSD-RTMP-H5
In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the firmware embeds hardcoded cloud‑API credentials that are shared across deployed devices. Anyone obtaining the public firmware package can reuse these values to interact with the cloud service in ways not intended for normal operation...
EUVD-2026-89368
In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, both the local and cloud update mechanisms apply new firmware without any cryptographic verification, relying only on basic hashing. This design allows an attacker who can reach the update routine to introduce untrusted firmware images that the...
CVE-2026-100293 Improper verification of cryptographic signature in Anjvision YSSD-RTMP-H5
In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, both the local and cloud update mechanisms apply new firmware without any cryptographic verification, relying only on basic hashing. This design allows an attacker who can reach the update routine to introduce untrusted firmware images that the...
CVE-2026-84421
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of paths during archive extraction...
CVE-2026-84421
IBM DataStage on Cloud Pak for Data 5.4.0.0 is vulnerable to remote code execution because of improper path validation during archive extraction . This flaw, categorized under CWE-22: Path Traversal , allows a remote authenticated attacker to execute arbitrary code. To remediate this vulnerabilit...
CVE-2026-84421 DataStage on Cloud Pak for Data has several vulnerabilities
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of paths during archive extraction...