CVE-2017-10934

All versions prior to V5.09.02.02T4 of the ZTE ZXIPTV-EPG product use the Java RMI service in which the servers use the Apache Commons Collections ACC library that may result in Java deserialization vulnerabilities. An unauthenticated remote attacker can exploit the vulnerabilities by sending a...

CVE-2017-10934

All versions prior to V5.09.02.02T4 of the ZTE ZXIPTV-EPG product use the Java RMI service in which the servers use the Apache Commons Collections ACC library that may result in Java deserialization vulnerabilities. An unauthenticated remote attacker can exploit the vulnerabilities by sending a...

Deserialization of untrusted data

All versions prior to V5.09.02.02T4 of the ZTE ZXIPTV-EPG product use the Java RMI service in which the servers use the Apache Commons Collections ACC library that may result in Java deserialization vulnerabilities. An unauthenticated remote attacker can exploit the vulnerabilities by sending a...

CVE-2017-10934

All versions prior to V5.09.02.02T4 of the ZTE ZXIPTV-EPG product use the Java RMI service in which the servers use the Apache Commons Collections ACC library that may result in Java deserialization vulnerabilities. An unauthenticated remote attacker can exploit the vulnerabilities by sending a...

CVE-2017-10934

This CVE (CVE-2017-10934) affects ZTE ZXIPTV-EPG prior to version 5.09.02.02T4. The issue stems from the Java RMI service using the Apache Commons Collections library, leading to Java deserialization vulnerabilities. An unauthenticated remote attacker could trigger code execution on the target ho...

epg search result viewer buffer overflow vulnerability

epg search result viewer kkcald is a TV program search result viewer. A buffer overflow vulnerability exists in epg search result viewer kkcald version 0.7.19 and earlier. A remote attacker can exploit this vulnerability to cause a denial of service...

epg search result viewer cross-site request forgery vulnerability

epg search result viewer kkcald is a TV program search result viewer. A cross-site request forgery vulnerability exists in epg search result viewer kkcald version 0.7.21 and earlier. A remote attacker can exploit this vulnerability to perform unauthorized operations via a malicious page...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in epg search result viewer kkcald 0.7.21 and earlier allows an attacker to hijack the authentication of administrators via unspecified vectors...

Cross site scripting

Cross-site scripting vulnerability in epg search result viewer kkcald 0.7.21 and earlier allows an attacker to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0510

Buffer overflow in epg search result viewer kkcald 0.7.19 and earlier allows remote attackers to perform unintended operations or execute DoS denial of service attacks via unspecified vectors...

CVE-2018-0508

Cross-site scripting vulnerability in epg search result viewer kkcald 0.7.21 and earlier allows an attacker to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0509

Cross-site request forgery CSRF vulnerability in epg search result viewer kkcald 0.7.21 and earlier allows an attacker to hijack the authentication of administrators via unspecified vectors...

CVE-2018-0509

Cross-site request forgery CSRF vulnerability in epg search result viewer kkcald 0.7.21 and earlier allows an attacker to hijack the authentication of administrators via unspecified vectors...

CVE-2018-0510

Buffer overflow in epg search result viewer kkcald 0.7.19 and earlier allows remote attackers to perform unintended operations or execute DoS denial of service attacks via unspecified vectors...

Buffer overflow

Buffer overflow in epg search result viewer kkcald 0.7.19 and earlier allows remote attackers to perform unintended operations or execute DoS denial of service attacks via unspecified vectors...

CVE-2018-0508

Cross-site scripting vulnerability in epg search result viewer kkcald 0.7.21 and earlier allows an attacker to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0510

Buffer overflow in epg search result viewer kkcald 0.7.19 and earlier allows remote attackers to perform unintended operations or execute DoS denial of service attacks via unspecified vectors...

CVE-2018-0508

CVE-2018-0508 affects the epg search result viewer (kkcald) up to version 0.7.21. The vulnerability is a cross-site scripting (CWE-79) that allows an attacker to inject arbitrary web script or HTML via unspecified vectors, potentially enabling arbitrary script execution in the logged-in user’s br...

CVE-2018-0510

CVE-2018-0510 affects the epg search result viewer (kkcald). A buffer overflow exists in version 0.7.19 and earlier, allowing remote attackers to cause unintended operations or a denial of service. Connected sources jointly confirm this vulnerability and list the affected product as kkcald’s epg ...

CVE-2018-0509

CVE-2018-0509 is a CSRF vulnerability in the epg search result viewer (kkcald) affecting version 0.7.21 and earlier. The exposed issue allows an attacker to hijack the authentication of administrators via unspecified vectors. The related CNVD/JVN records corroborate this CSRF flaw and cite the af...