The vulnerability of the ZingBox Inspector, a network traffic handler, arises due to the lack of measures to neutralize special elements. This allows attackers to execute arbitrary code.

The vulnerability of the ZingBox Inspector network traffic processor exists due to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the ZingBox Inspector’s network device handlers lies in the lack of protective measures for SQL query structures, allowing attackers to disclose protected information.

The vulnerability of the ZingBox Inspector network traffic processor is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...

The vulnerability of the ZingBox Inspector, a network traffic handler, arises from the use of pre-installed credentials. This allows attackers to gain unauthorized access to the system.

The vulnerability of the ZingBox Inspector network traffic processor is related to the use of pre-set credentials. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the system...

The vulnerability of the ZingBox Inspector, a network traffic handler, arises from the use of pre-installed credentials. This allows a malicious actor to gain unauthorized access to the SSH service under the username “root”.

The vulnerability of the ZingBox Inspector network traffic processor is related to the use of pre-installed credentials. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the SSH service under the identity of the root user...

The vulnerability of the ZingBox Inspector, a network traffic handler, arises due to insufficient validation of input data. This vulnerability allows attackers to execute a type of “man-in-the-middle” attack.

The vulnerability of the ZingBox Inspector network traffic processor exists due to insufficient checking of input data. Exploiting this vulnerability can allow a remote attacker to execute a “man-in-the-middle” type attack...

Palo Alto Networks Zingbox Inspector SQL Injection Vulnerability

The Palo Alto Networks Zingbox Inspector is a locally deployed appliance in a Zingbox IoT Command Center IoT control center solution from Palo Alto Networks, USA. A SQL injection vulnerability exists in the management interface in Palo Alto Networks Zingbox Inspector version 1.288 and earlier. Th...

Palo Alto Networks Zingbox Inspector Input Validation Error Vulnerability

The Palo Alto Networks Zingbox Inspector is a locally deployed appliance in a Zingbox IoT Command Center IoT control center solution from Palo Alto Networks, USA. An input validation error vulnerability exists in Palo Alto Networks Zingbox Inspector version 1.294 and earlier. The vulnerability...

Palo Alto Networks Zingbox Inspector Command Injection Vulnerability (CNVD-2019-36667)

The Palo Alto Networks Zingbox Inspector is a locally deployed appliance in a Zingbox IoT Command Center IoT control center solution from Palo Alto Networks, USA. A security vulnerability exists in Palo Alto Networks Zingbox Inspector version 1.293 and earlier. The vulnerability arises from a...

Palo Alto Networks Zingbox Inspector Authorization Issues Vulnerability

The Palo Alto Networks Zingbox Inspector is a locally deployed appliance in a Zingbox IoT Command Center IoT control center solution from Palo Alto Networks, USA. An authorization issue vulnerability exists in Palo Alto Networks Zingbox Inspector version 1.280 and earlier. The vulnerability stems...

Palo Alto Networks Zingbox Inspector Has Unspecified Vulnerability

The Palo Alto Networks Zingbox Inspector is a locally deployed appliance in a Zingbox IoT Command Center IoT control center solution from Palo Alto Networks, USA. A security vulnerability exists in Palo Alto Networks Zingbox Inspector version 1.294 and earlier. An attacker could exploit the...

Palo Alto Networks Zingbox Inspector Information Disclosure Vulnerability

The Palo Alto Networks Zingbox Inspector is a locally deployed appliance in a Zingbox IoT Command Center IoT control center solution from Palo Alto Networks, USA. An information disclosure vulnerability exists in Palo Alto Networks Zingbox Inspector version 1.294 and earlier. The vulnerability...

Palo Alto Networks Zingbox Inspector Denial of Service Vulnerability

The Palo Alto Networks Zingbox Inspector is a locally deployed appliance in a Zingbox IoT Command Center IoT control center solution from Palo Alto Networks, USA. A denial of service vulnerability exists in Palo Alto Networks Zingbox Inspector version 1.294 and earlier. An attacker could exploit...

Palo Alto Networks Zingbox Inspector Trust Management Issues Vulnerability

The Palo Alto Networks Zingbox Inspector is a locally deployed appliance in a Zingbox IoT Command Center IoT control center solution from Palo Alto Networks, USA. A trust management issue vulnerability exists in Palo Alto Networks Zingbox Inspector version 1.294 and earlier. An attacker could...

Palo Alto Networks Zingbox Inspector Trust Management Issues Vulnerability (CNVD-2019-36674)

The Palo Alto Networks Zingbox Inspector is a locally deployed appliance in a Zingbox IoT Command Center IoT control center solution from Palo Alto Networks, USA. A vulnerability with trust management issues exists in Palo Alto Networks Zingbox Inspector version 1.294 and earlier. The vulnerabili...

Palo Alto Networks Zingbox Inspector Command Injection Vulnerability

The Palo Alto Networks Zingbox Inspector is a locally deployed appliance in a Zingbox IoT Command Center IoT control center solution from Palo Alto Networks, USA. A command injection vulnerability exists in Palo Alto Networks Zingbox Inspector version 1.286 and earlier. The vulnerability arises...

Bento4 'AP4_PrintInspector::AddField' function buffer overflow vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. A buffer overflow vulnerability exists in the 'AP4PrintInspector::AddField' function in the Core/Ap4Atom.cpp file in Bento4 version 1.5.1.0. The vulnerability stems from a networked system or product performing operations in...

UBUNTU-CVE-2019-17530

An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer over-read in AP4PrintInspector::AddField in Core/Ap4Atom.cpp when called from AP4CencSampleEncryption::DoInspectFields in Core/Ap4CommonEncryption.cpp, when called from AP4Atom::Inspect in Core/Ap4Atom.cpp...

Bento4 Null Pointer Dereference Vulnerability (CNVD-2019-40955)

Bento4 is a C++ class library and tool for reading and writing ISO-MP4 files. A null pointer dereference vulnerability exists in AP4DescriptorListInspector::Action in Core/Ap4Descriptor.h in Bento4 1.5.1.0. An attacker can exploit this vulnerability to cause a SEGV error...

CVE-2019-17452

Bento4 1.5.1.0 has a NULL pointer dereference in AP4DescriptorListInspector::Action in Core/Ap4Descriptor.h, related to AP4IodsAtom::InspectFields in Core/Ap4IodsAtom.cpp, as demonstrated by mp4dump...

UBUNTU-CVE-2019-17452

Bento4 1.5.1.0 has a NULL pointer dereference in AP4DescriptorListInspector::Action in Core/Ap4Descriptor.h, related to AP4IodsAtom::InspectFields in Core/Ap4IodsAtom.cpp, as demonstrated by mp4dump...