PT-2022-7252 · Libde265 +3 · Libde265 +3

Name of the Vulnerable Software and Affected Versions: Libde265 version 1.0.8 Description: The issue is related to a heap-buffer-overflow vulnerability via the ff hevc put hevc qpel h 2 v 1 sse function in sse-motion.cc. This allows attackers to cause a Denial of Service DoS via a crafted video...

PT-2022-7254 · Libde265 +3 · Libde265 +3

Name of the Vulnerable Software and Affected Versions: Libde265 versions prior to 1.0.11 Description: The issue is related to a heap-buffer-overflow in the put weighted pred avg 16 fallback function, located in fallback-motion.cc, which can be exploited by attackers to cause a Denial of Service D...

PT-2022-7261 · Libde265 +3 · Libde265 +3

Name of the Vulnerable Software and Affected Versions: Libde265 version 1.0.8 Description: The issue is related to a heap-buffer-overflow vulnerability in the put epel 16 fallback function of the Libde265 video codec implementation for h.265. This vulnerability can be exploited by a remote attack...

PT-2022-7262 · Libde265 +3 · Libde265 +3

Name of the Vulnerable Software and Affected Versions: Libde265 version 1.0.8 Description: The issue is related to the ff hevc put hevc qpel h 3 v 3 sse function in the Libde265 video codec implementation, which can cause a buffer overflow in memory. This can be exploited by a remote attacker usi...

CVE-2022-2471

Stack-based Buffer Overflow vulnerability in the EZVIZ Motion Detection component as used in camera models CS-CV248, CS-C6N-A0-1C2WFR, CS-DB1C-A0-1E2W2FR, CS-C6N-B0-1G2WF, CS-C3W-A0-3H4WFRL allows a remote attacker to execute remote code on the device. This issue affects: EZVIZ CS-CV248 versions...

CVE-2022-2471

Stack-based Buffer Overflow vulnerability in the EZVIZ Motion Detection component as used in camera models CS-CV248, CS-C6N-A0-1C2WFR, CS-DB1C-A0-1E2W2FR, CS-C6N-B0-1G2WF, CS-C3W-A0-3H4WFRL allows a remote attacker to execute remote code on the device. This issue affects: EZVIZ CS-CV248 versions...

Stack overflow

Stack-based Buffer Overflow vulnerability in the EZVIZ Motion Detection component as used in camera models CS-CV248, CS-C6N-A0-1C2WFR, CS-DB1C-A0-1E2W2FR, CS-C6N-B0-1G2WF, CS-C3W-A0-3H4WFRL allows a remote attacker to execute remote code on the device. This issue affects: EZVIZ CS-CV248 versions...

CVE-2022-2471

CVE-2022-2471 describes a stack-based buffer overflow in EZVIZ’s Motion Detection component used by multiple EZVIZ cameras (CS-CV248, CS-C6N-A0-1C2WFR, CS-DB1C-A0-1E2W2FR, CS-C6N-B0-1G2WF, CS-C3W-A0-3H4WFRL). The underlying flaw allows a remote attacker to execute arbitrary code on the affected d...

CVE-2022-2471

Stack-based Buffer Overflow vulnerability in the EZVIZ Motion Detection component as used in camera models CS-CV248, CS-C6N-A0-1C2WFR, CS-DB1C-A0-1E2W2FR, CS-C6N-B0-1G2WF, CS-C3W-A0-3H4WFRL allows a remote attacker to execute remote code on the device. This issue affects: EZVIZ CS-CV248 versions...

EZVIZ 安全漏洞

EZVIZ CS-C6N-A0-1C2WFR and so on are products of China Fluorite EZVIZ Company.EZVIZ CS-C6N-A0-1C2WFR is a security camera.EZVIZ CS-CV248 is a security camera.EZVIZ CS-DB1C-A0-1E2W2FR is a powerful visual doorbell. A security vulnerability exists in the EZVIZ CS-CV248, CS-C6N-A0-1C2WFR,...

CVE-2022-2471: Stack-based Buffer Overflow

Stack-based Buffer Overflow vulnerability in the EZVIZ Motion Detection component as used in camera models CS-CV248, CS-C6N-A0-1C2WFR, CS-DB1C-A0-1E2W2FR, CS-C6N-B0-1G2WF, CS-C3W-A0-3H4WFRL allows a remote attacker to execute remote code on the device. This issue affects: EZVIZ CS-CV248 versions...

GLSA-202208-18 : Motion: Denial of service

The remote host is affected by the vulnerability described in GLSA-202208-18 Motion: Denial of service - A Denial of Service condition in Motion-Project Motion 3.2 through 4.3.1 allows remote unauthenticated users to cause a webu.c segmentation fault and kill the main process via a crafted HTTP...

Motion: Denial of service

Background Motion is a program that monitors the video signal from one or more cameras and is able to detect motions. Description The Motion HTTP server does not correctly perform URL decoding. If the HTTP server receives a request for a URL containing an incomplete percent-encoded character, a...

USN-5515-1: Linux kernel vulnerabilities

Eric Biederman discovered that the cgroup process migration implementation in the Linux kernel did not perform permission checks correctly in some situations. A local attacker could possibly use this to gain administrative privileges. CVE-2021-4197 Jann Horn discovered that the FUSE file system i...

多款Omron产品安全漏洞

Omron Machine automation controller NX7 series and so on are the products of Omron Corporation of Japan.Omron Machine automation controller NX7 series is a series of machine automation controllers.Omron Machine Omron Machine automation controller NX1 series is a series of machine automation...

DEBIAN-CVE-2021-41490

Memory leaks in LazyPRM.cpp of OMPL v1.5.0 can cause unexpected behavior...

UBUNTU-CVE-2021-41490

Memory leaks in LazyPRM.cpp of OMPL v1.5.0 can cause unexpected behavior...

OMPL 安全漏洞

OMPL is an open source motion planning library from OMPL. A security vulnerability exists in OMPL v1.5.0, which stems from a memory leak in LazyPRM.cpp...

Mechanize 信息泄露漏洞

Mechanize is an open source ruby library from Sparkle Motion. It is used to automate interactions with websites. A security vulnerability exists in versions of Mechanize prior to 2.8.5 that stems from an authorization header that leaks after redirecting to a different port on the same site...

@trovo/components (>=5.0.2, <=5.3.0), @trovo/motion (>=5.0.2, <=6.0.0) +9 more potentially affected by CVE-2020-28277 via dset (1.0.1)

dset NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on dset and may be impacted: - @trovo/components =5.0.2, =5.0.2, =5.0.0, =1.0.15, =1.1.4, =1.0.0, =2.2.0, =1.0.0, =0.0.1, =0.0.2, =0.0.11 Source cves: CVE-2020-28277 Source advisory:...