430 matches found
CVE-2022-26479
An issue was discovered in Poly EagleEye Director II before 2.2.2.1. Existence of a certain file which can be created via an rsync backdoor causes all API calls to execute as admin without authentication...
CVE-2022-26482
An issue was discovered in Poly EagleEye Director II before 2.2.2.1. os.system command injection can be achieved by an admin...
CVE-2024-41912
A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The firmware flaw does not properly implement access controls...
CVE-2024-41913
A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The firmware flaw does not properly sanitize User input...
CVE-2023-4468
A vulnerability was found in Poly Trio 8500, Trio 8800 and Trio C60. It has been classified as problematic. This affects an unknown part of the component Poly Lens Management Cloud Registration. The manipulation leads to missing authorization. It is possible to launch the attack on the physical...
CVE-2023-4467
A vulnerability was found in Poly Trio 8800 7.2.6.0019 and classified as critical. Affected by this issue is some unknown functionality of the component Test Automation Mode. The manipulation leads to backdoor. It is possible to launch the attack on the physical device. The exploit has been...
CVE-2023-4464
A vulnerability, which was classified as critical, has been found in Poly Trio 8300, Trio 8500, Trio 8800, Trio C60, CCX 350, CCX 400, CCX 500, CCX 505, CCX 600, CCX 700, EDGE E100, EDGE E220, EDGE E300, EDGE E320, EDGE E350, EDGE E400, EDGE E450, EDGE E500, EDGE E550, VVX 101, VVX 150, VVX 201,...
The vulnerability of the software for configuring Poly Lens Desktop devices stems from improper control of resource identifiers, allowing attackers to escalate their privileges.
The vulnerability of the software for configuring Poly Lens Desktop devices is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability can allow an attacker to enhance their privileges...
CVE-2025-14432 Poly Video - Sensitive Data Might Be Written to Log File
In limited scenarios, sensitive data might be written to the log file if an admin uses Microsoft Teams Admin Center TAC to make device configuration changes. The affected log file is visible only to users with admin credentials. This is limited to Microsoft TAC and does not affect configuration...
CVE-2025-14432
CVE-2025-14432 affects HP video conferencing products (HP TC8/TC10 noted in CNNVD) with a data-leakage issue where sensitive data could be written to log files when an admin uses Microsoft Teams Admin Center (TAC) to apply device configuration changes. The log file is restricted to admins but exp...
Poly Video - Sensitive Data Might Be Written to Log File
In limited scenarios, sensitive data might be written to the log file if an admin uses Microsoft Teams Admin Center TAC to make device configuration changes. The affected log file is visible only to users with admin credentials. This is limited to Microsoft TAC and does not affect configuration...
The vulnerability of the Poly Clariti Manager platform for managing, planning, and maintaining audio-visual systems lies in the lack of measures taken to protect its website structure, allowing attackers to carry out cross-site scripting attacks.
The vulnerability of the Poly Clariti Manager platform for managing, planning, and maintaining audiovisual systems is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
The vulnerability of the Poly Clariti Manager platform for managing, planning, and maintaining audio-visual systems lies in the lack of measures taken to protect its website structure, allowing attackers to carry out cross-site scripting attacks.
The vulnerability of the Poly Clariti Manager platform for managing, planning, and maintaining audio-visual systems is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to bypass security restrictions remotely...
The vulnerability of the Poly Clariti Manager platform for managing, planning, and maintaining audio-visual systems is related to deficiencies in the deserialization mechanism, allowing attackers to circumvent security restrictions.
The vulnerability of the Poly Clariti Manager platform for managing, planning, and maintaining audio-visual systems is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions from a remote location...
The vulnerability of the Poly Clariti Manager platform for managing, planning, and maintaining audio-visual systems lies in its lack of access control mechanisms, allowing attackers to escalate their privileges.
The vulnerability of the Poly Clariti Manager platform for managing, planning, and maintaining audiovisual systems is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...
The vulnerability of the Poly Clariti Manager platform for managing, planning, and maintaining audiovisual systems lies in its ability to disclose information through registration files, allowing unauthorized access to protected information.
The vulnerability of the Poly Clariti Manager platform for managing, planning, and maintaining audiovisual systems is related to the disclosure of information through registration files. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to...
The vulnerability of the Poly Clariti Manager platform for managing, planning, and maintaining audio-visual systems lies in the lack of measures taken to protect its website structure, allowing attackers to carry out cross-site scripting attacks.
The vulnerability of the Poly Clariti Manager platform for managing, planning, and maintaining audiovisual systems is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
EUVD-2018-9617
Malware in sbrugna...