UBUNTU-CVE-2025-27809

Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arbitrary hostnames unless the TLS client application calls mbedtlssslsethostname...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15626)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the "Set Hostname" method in Quest DR Series Disk Backup Software before 4.0.3.1. An attacker could exploit this vulnerability to execute commands...

Foscam camera ONVIF SetHostname Stored Cross-Site Scripting Vulnerability

Foscam camera is a webcam that pushes messages to your phone and also enables video Baidu cloud storage directly via WIFI. A stored cross-site scripting vulnerability exists in Foscam camera ONVIF SetHostname. An unauthenticated attacker is able to trigger a persistent cross-site scripting attack...