CVE-2025-6531: Improper Access Control

A vulnerability was found in SIFUSM/MZZYG BD S1 up to 20250611. It has been declared as problematic. This vulnerability affects unknown code of the component RTSP Live Video Stream Endpoint. The manipulation leads to improper access controls. Access to the local network is required for this attac...

CVE-2025-6532: Improper Access Control

A vulnerability classified as problematic was found in NOYAFA/Xiami LF9 Pro up to 20250611. Affected by this vulnerability is an unknown functionality of the component RTSP Live Video Stream Endpoint. The manipulation leads to improper access controls. The attack can only be initiated within the...

CVE-2025-6531 SIFUSM/MZZYG BD S1 RTSP Live Video Stream Endpoint access control

A vulnerability was found in SIFUSM/MZZYG BD S1 up to 20250611. It has been declared as problematic. This vulnerability affects unknown code of the component RTSP Live Video Stream Endpoint. The manipulation leads to improper access controls. Access to the local network is required for this attac...

CVE-2025-6531

CVE-2025-6531 concerns SIFUSM/MZZYG BD S1 (up to 20250611) and affects the RTSP Live Video Stream Endpoint. The root issue is improper access controls in the RTSP live stream component, requiring access to the local network for exploitation. The vulnerability impacts dashcams distributed by multi...

CVE-2025-6531 SIFUSM/MZZYG BD S1 RTSP Live Video Stream Endpoint access control

A vulnerability was found in SIFUSM/MZZYG BD S1 up to 20250611. It has been declared as problematic. This vulnerability affects unknown code of the component RTSP Live Video Stream Endpoint. The manipulation leads to improper access controls. Access to the local network is required for this attac...

SUSE CVE-2025-6375

A vulnerability was found in poco up to 1.14.1. It has been rated as problematic. Affected by this issue is the function MultipartInputStream of the file Net/src/MultipartReader.cpp. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The exploit has bee...

CVE-2025-6528

A vulnerability has been found in 70mai M300 up to 20250611 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /livestream/12 of the component RTSP Live Video Stream Endpoint. The manipulation leads to improper authentication. The attack needs to...

CVE-2025-6528 70mai M300 RTSP Live Video Stream Endpoint 12 improper authentication

A vulnerability has been found in 70mai M300 up to 20250611 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /livestream/12 of the component RTSP Live Video Stream Endpoint. The manipulation leads to improper authentication. The attack needs to...

CVE-2025-6528

CVE-2025-6528 affects the RTSP Live Video Stream Endpoint on the 70mai M300, impacting an unknown functionality at /livestream/12. The issue enables improper authentication and requires access from within the local network. Public disclosure of the exploit is noted, and the vendor was contacted w...

getml-mlflow (>=0.1.1, <=0.1.2), stream-pose-ml (>=0.2.1, <=0.3.1) potentially affected by CVE-2025-52967 via mlflow (2.20.4)

mlflow PYPI version 2.20.4 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - getml-mlflow =0.1.1, =0.2.1, =0.3.1 Source cves: CVE-2025-52967 Source advisory: OSV:PYSEC-2025-52...

PT-2025-26654 · Unknown · Sifusm/Mzzyg Bd S1

Name of the Vulnerable Software and Affected Versions: SIFUSM/MZZYG BD S1 up to 20250611 Description: A vulnerability was found in the component RTSP Live Video Stream Endpoint, leading to improper access controls. Access to the local network is required for this attack to succeed. The exploit ha...

PT-2025-26651

Name of the Vulnerable Software and Affected Versions: 70mai M300 up to 20250611 Description: A vulnerability has been found in the RTSP Live Video Stream Endpoint of the 70mai M300, affecting an unknown functionality of the file /livestream/12. This leads to improper authentication. The attack...

CVE-2025-6528: Improper Authentication

A vulnerability has been found in 70mai M300 up to 20250611 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /livestream/12 of the component RTSP Live Video Stream Endpoint. The manipulation leads to improper authentication. The attack needs to...

USB Stream Heap Buffer Overflow DoS

The vulnerability of the usbstreamfree function in the sound/usb/usx2y/usbstream.c module, which handles USB audio devices in Linux operating systems, is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via the MultipartInputStream function in the file Net/src/MultipartReader.cpp. An attacker can cause a denial of service by triggering a null pointer dereference through crafted input processed locally...

DEBIAN-CVE-2025-6375

A vulnerability was found in poco up to 1.14.1. It has been rated as problematic. Affected by this issue is the function MultipartInputStream of the file Net/src/MultipartReader.cpp. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The exploit has bee...

CVE-2025-6375

A vulnerability was found in poco up to 1.14.1. It has been rated as problematic. Affected by this issue is the function MultipartInputStream of the file Net/src/MultipartReader.cpp. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The exploit has bee...

POCO security vulnerabilities

POCO is a cross-platform C++ library open-sourced by POCO. It is used to build web and internet based applications that run on desktop, server, mobile, IoT and embedded systems. A security vulnerability exists in POCO 1.14.1 and earlier versions, which stems from a null pointer dereference due to...

CVE-2022-50079

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check correct bounds for stream encoder instances for DCN303 Why & How engid for DCN303 cannot be more than 1, since we have only two instances of stream encoders. Check the correct boundary condition for engine ...

SUSE CVE-2022-50079

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check correct bounds for stream encoder instances for DCN303 Why & How engid for DCN303 cannot be more than 1, since we have only two instances of stream encoders. Check the correct boundary condition for engine ...