12539 matches found
PT-2020-7440
Name of the Vulnerable Software and Affected Versions: Media Player Classic - Home Cinema MPC-HC versions prior to 1.7.0.7858 Description: The issue allows remote attackers to execute arbitrary code via a crafted MPEG-2 Transport Stream M2TS file. This is due to a stack-based buffer overflow...
Debian DLA-2087-1 : suricata security update
Two vulnerabilities have recently been discovered in the stream-tcp code of the intrusion detection and prevention tool Suricata. CVE-2019-18625 It was possible to bypass/evade any tcp based signature by faking a closed TCP session using an evil server. After the TCP SYN packet, it was possible t...
CVE-2013-3488: Buffer Copy without Checking Size of Input
Stack-based buffer overflow in Media Player Classic - Home Cinema MPC-HC before 1.7.0.7858 allows remote attackers to execute arbitrary code via a crafted MPEG-2 Transport Stream M2TS file...
CVE-2013-2569
A Security Bypass vulnerability exists in Zavio IP Cameras through 1.6.3 because the RTSP protocol authentication is disabled by default, which could let a malicious user obtain unauthorized access to the live video stream...
CVE-2013-2569
A Security Bypass vulnerability exists in Zavio IP Cameras through 1.6.3 because the RTSP protocol authentication is disabled by default, which could let a malicious user obtain unauthorized access to the live video stream...
CVE-2013-2569
CVE-2013-2569 affects Zavio IP Cameras (firmware ≤ 1.6.03) where RTSP authentication is disabled by default, allowing remote unauthenticated access to the live video stream. Core Security advisory describes mitigations (enable RTSP authentication, review CGI access) but does not specify an exact ...
PT-2020-7393
Name of the Vulnerable Software and Affected Versions: Zavio IP Cameras versions 1.6.3 and earlier Description: A security issue exists due to the RTSP protocol authentication being disabled by default, which could allow a malicious user to obtain unauthorized access to the live video stream...
Hardcoded credentials
An Authentication vulnerability exists in D-LINK WCS-1100 1.02, TESCO DCS-2121 1.05TESCO, TESCO DCS-2102 1.05TESCO, DCS-7510 1.00, DCS-7410 1.00, DCS-6410 1.00, DCS-5635 1.01, DCS-5605 1.01, DCS-5230L 1.02, DCS-5230 1.02, DCS-3430 1.02, DCS-3411 1.02, DCS-3410 1.02, DCS-2121 1.06FR, DCS-2121 1.06...
CVE-2013-1603
Summary of CVE-2013-1603 and related D-Link IP Camera vulnerabilities (CVE‑2013‑1599, -1600, -1601, -1602, -1603): Core Security’s CORE-2013-0303 advisory documents OS command injection, several authentication issues, information leakage, and hard-coded credentials affecting D‑Link IP cameras (mo...
CVE-2013-1601
An Information Disclosure vulnerability exists due to a failure to restrict access on the lums.cgi script when processing a live video stream in D-LINK An Information Disclosure vulnerability exists due to a failure to restrict access on the lums.cgi script when processing a live video stream in...
CVE-2013-1601
CVE-2013-1601 is an information-disclosure vulnerability in D-Link IP cameras where an unauthenticated attacker can access an ASCII output of the live video stream via /md/lums.cgi. Connected sources (CoreLabs CORE-2013-0303) confirm this vulnerability alongside related CVEs (1599, 1600, 1602, 16...
CVE-2013-1601: Exposure of Sensitive Information to an Unauthorized Actor
An Information Disclosure vulnerability exists due to a failure to restrict access on the lums.cgi script when processing a live video stream in D-LINK An Information Disclosure vulnerability exists due to a failure to restrict access on the lums.cgi script when processing a live video stream in...
PT-2020-7363
Name of the Vulnerable Software and Affected Versions: DCS-1100 version 1.02 DCS-1100 version 1.03 DCS-1100 version 1.04 DCS-1100L version 1.04 DCS-1130 version 1.03 DCS-1130 version 1.04 DCS-1130L version 1.04 DCS-2121 version 1.05 RU DCS-2121 version 1.06 DCS-2121 version 1.06 FR TESCO DCS-2121...
CVE-2013-1603: Use of Hard-coded Credentials
An Authentication vulnerability exists in D-LINK WCS-1100 1.02, TESCO DCS-2121 1.05TESCO, TESCO DCS-2102 1.05TESCO, DCS-7510 1.00, DCS-7410 1.00, DCS-6410 1.00, DCS-5635 1.01, DCS-5605 1.01, DCS-5230L 1.02, DCS-5230 1.02, DCS-3430 1.02, DCS-3411 1.02, DCS-3410 1.02, DCS-2121 1.06FR, DCS-2121 1.06...
git: Arbitrary path overwriting via export-marks in-stream command feature
A flaw was found in the git fast-import command where it provides the export-marks feature that may unexpectedly overwrite arbitrary paths. An attacker can abuse this flaw if they can control the input passed to the fast-import command by using the export-marks feature and overwrite arbitrary...
CVE-2019-16026 Cisco Mobility Management Entity Denial of Service Vulnerability
A vulnerability in the implementation of the Stream Control Transmission Protocol SCTP on Cisco Mobility Management Entity MME could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an eNodeB that is connected to an affected device. The vulnerability is due ...
ALPINE-CVE-2019-1348
An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. The --export-marks option of git fast-import is exposed also via the in-stream command feature export-marks=... and it allows overwriting arbitrary paths...
DEBIAN-CVE-2019-1348
An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. The --export-marks option of git fast-import is exposed also via the in-stream command feature export-marks=... and it allows overwriting arbitrary paths...
CVE-2019-1348
An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. The --export-marks option of git fast-import is exposed also via the in-stream command feature export-marks=... and it allows overwriting arbitrary paths...
arrow:arrow-ipc-stream-fuzz: Crash in arrow::ipc::internal::FieldFromFlatbuffer
Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5185274653179904 Project: arrow Fuzzing Engine: afl Fuzz Target: arrow-ipc-stream-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61c100f9e0b8 Crash State:...