12057 matches found
Linux Distros Unpatched Vulnerability : CVE-2025-68346
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: dice: fix buffer overflow in detectstreamformats The function detectstreamformats reads the streamcount value directly from a FireWire device without...
CVE-2018-25136: Missing Authentication for Critical Function
FLIR Brickstream 3D+ 2.1.742.1842 contains an unauthenticated vulnerability that allows remote attackers to access live video streams without credentials. Attackers can retrieve video stream images by directly accessing multiple image endpoints like middleImage.jpg, rightimage.jpg, and...
CVE-2018-25141: Missing Authentication for Critical Function
FLIR thermal traffic cameras contain an unauthenticated vulnerability that allows remote attackers to access live video streams without credentials. Attackers can directly retrieve video streams by accessing specific endpoints like /live.mjpeg, /snapshot.jpg, and RTSP streaming URLs without...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an unvalidated streamcount value that could result in a buffer overflow...
FLIR Thermal Traffic Cameras security vulnerabilities
FLIR Thermal Traffic Cameras are a line of thermal traffic detection cameras from FLIR, Inc. A security vulnerability exists in the FLIR thermal traffic cameras that originates from unauthenticated access to a specific video streaming endpoint, which could result in unauthorized access to a live...
Malicious code in stream-chain-xor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be18a835c94965458ba487a88b339ad55c26ca1f3e4785daf6dabb6d60dc3903 The package stream-chain-xor was found to contain malicious code...
MAL-2025-192864 Malicious code in stream-chain-xor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be18a835c94965458ba487a88b339ad55c26ca1f3e4785daf6dabb6d60dc3903 The package stream-chain-xor was found to contain malicious code...
CVE-2025-65857
An issue was discovered in Xiongmai XM530 IP cameras on firmware V5.00.R02.000807D8.10010.346624.S.ONVIF 21.06. The GetStreamUri exposes RTSP URIs containing hardcoded credentials enabling direct unauthorized video stream access...
CVE-2025-65857
An issue was discovered in Xiongmai XM530 IP cameras on firmware V5.00.R02.000807D8.10010.346624.S.ONVIF 21.06. The GetStreamUri exposes RTSP URIs containing hardcoded credentials enabling direct unauthorized video stream access...
CVE-2025-65857: Exposure of Private Personal Information to an Unauthorized Actor
An issue was discovered in Xiongmai XM530 IP cameras on firmware V5.00.R02.000807D8.10010.346624.S.ONVIF 21.06. The GetStreamUri exposes RTSP URIs containing hardcoded credentials enabling direct unauthorized video stream access...
Xiongmai XM530 security vulnerabilities
Xiongmai XM530 is a video surveillance camera from the Chinese company Xiongmai. A security vulnerability exists in the Xiongmai XM530 IP cameras firmware version V5.00.R02.000807D8.10010.346624.S.ONVIF 21.06, which stems from GetStreamUri exposing RTSP URIs containing hard-coded credentials, whi...
CVE-2025-65857
The Xiongmai XM530 IP cameras, specifically on firmware V5.00.R02.000807D8.10010.346624.S.ONVIF 21.06 , are vulnerable to an issue where the GetStreamUri ONVIF endpoint exposes RTSP URIs containing hardcoded credentials . This flaw allows unauthorized actors to gain direct access to live video st...
Fedora 43 : cef (2025-6e776254bf)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-6e776254bf advisory. Update to cef-143.0.10+g8aed01b + chromium-143.0.7499.146 rhbz2423482 High CVE-2025-14765: Use after free in WebGPU High CVE-2025-14766: Out of boun...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the dcn401streamencodercreate function in the drivers/gpu/drm/amd/display/dc/resource/dcn401/dcn401resource.c file of the Linux kernel is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to cause a service failure...
UPF security vulnerabilities
UPF is an open source user interface from the Aether SD-Core Project. A security vulnerability exists in UPF upf-epc-pfcpiface:version 2.1.3-dev, which stems from a buffer out-of-bounds read while processing a PFCP session establishment request containing a malformed stream description, which cou...
Unity Linux 20.1050e Security Update: kernel (UTSA-2025-991279)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991279 advisory. In the Linux kernel, the following vulnerability has been resolved: net: If sock is dead don't access sock's skwq in skstreamwaitmemory Fixes the below NULL pointer...
AZL-72697 CVE-2025-68114 affecting package capstone 4.0.2-4
Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, an unchecked vsnprintf return in SStreamconcat lets a malicious csoptmem.vsnprintf drive SStream’s index negative or past the end, leading to a stack buffer underflow/overflow when the next write occurs. Commit...
CVE-2025-68114
Capstone CVE-2025-68114 affects Capstone 6.0.0-Alpha5 and earlier. The vulnerability arises from an unchecked return value from vsnprintf in SStream_concat, which can drive SStream’s index negative or past the end and cause a stack buffer underflow/overflow on the next write. The issue has a fixe...
CVE-2025-68114
Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, an unchecked vsnprintf return in SStreamconcat lets a malicious csoptmem.vsnprintf drive SStream’s index negative or past the end, leading to a stack buffer underflow/overflow when the next write occurs. Commit...
CVE-2025-68114 Capstone doesn't check vsnprintf return in SStream_concat, allows stack buffer underflow and overflow
Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, an unchecked vsnprintf return in SStreamconcat lets a malicious csoptmem.vsnprintf drive SStream’s index negative or past the end, leading to a stack buffer underflow/overflow when the next write occurs. Commit...