4476 matches found
CVE-2019-19453
Affected software: Wowza Streaming Engine (pre-4.8.5). Vulnerability: Cross-site scripting (XSS) where an authenticated user with access to proxy license editing can inject a payload that is executed on the main page of server settings. Root cause / mechanism: Insufficient input validation in the...
PT-2020-10162 · Wowza · Wowza Streaming Engine
Name of the Vulnerable Software and Affected Versions: Wowza Streaming Engine versions prior to 4.8.5 Description: The issue allows an authenticated user with access to proxy license editing to insert a malicious payload that will be triggered in the main page of server settings. This is a case o...
The Streaming Wars: A Cybercriminal’s Perspective
Cyberthreats are not relegated to the world of big businesses and large-scale campaigns. The most frequent attacks are not APTs and massive data breaches: they are the daily encounters with malware and spam by common users. And, one of the areas where we are most vulnerable is...
Security Bulletin: OpenSSL vulnerabilites impacting IBM Aspera Streaming for Video 3.8.0 and earlier (CVE-2019-1552)
Summary The OpenSSL vulnerability CVE-2019-1552 impacts IBM Aspera Streaming for Video 3.8.0 and earlier. The fix was first delivered in IBM Aspera Streaming 3.9.6. Vulnerability Details CVEID: CVE-2019-1552 DESCRIPTION: OpenSSL could allow a local attacker to bypass security restrictions, caused...
SQL Injection Vulnerability in sewise Live Streaming Server of Shenzhen Siliconware Technology Co.
Shenzhen Siwei Zhi Technology Co., Ltd. is a national high-tech enterprise focusing on streaming media cloud platform technology research and development. Shenzhen Siliconware Technology Co., Ltd. sewise live server SQL injection vulnerability, attackers can use the vulnerability to obtain databa...
SQL Injection Vulnerability in Streaming Media System Platform of Beijing Century Sunflower Digital Media Technology Co.
Sunflower streaming media service system is a complete set of IP network-based audio and video application platform, she integrated the Century Sunflower video broadcasting system, video-on-demand system, video broadcasting system, as well as data distribution, business management and other...
DEBIAN-CVE-2020-14033
An issue was discovered in janus-gateway aka Janus WebRTC Server through 0.10.0. janusstreamingrtspparsesdp in plugins/janusstreaming.c has a Buffer Overflow via a crafted RTSP server...
Unauthorized Access Vulnerability in TVHeadend Streaming Server
Tvheadend is a streaming media server software installed under LINUX based systems. An unauthorized access vulnerability exists in the TVHeadend streaming server, which can be exploited by attackers to obtain sensitive information...
Fedora: Security Advisory for libarchive (FEDORA-2020-d8278fe24d)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 31 Update: libarchive-3.4.3-1.fc31
Libarchive is a programming library that can create and read several differ ent streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives...
streaming-clips.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1177282 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
[SECURITY] Fedora 32 Update: libarchive-3.4.3-1.fc32
Libarchive is a programming library that can create and read several differ ent streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives...
The vulnerability of the streaming service (default port 5410/tcp) of the SiNVR 3 video server, which allows a perpetrator to gain access to protected information.
The vulnerability of the streaming service port 5410/tcp by default of the SiNVR 3 video server is related to weak cryptography for passwords. Exploiting this vulnerability could allow a malicious actor to gain access to protected information...
The vulnerability of the streaming service (default port 5410/tcp) of the SiNVR 3 video server, which allows a intruder to cause a service failure.
The vulnerability of the streaming service port 5410/tcp by default of the SiNVR 3 video server is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures through specially crafted HTTP requests...
The Internet Didn't Break. Now What?
Even though it was only November, it seems like an eternity ago that Akamai CEO Tom Leighton discussed the then-forthcoming "streaming explosion" on Variety's "Strictly Business" podcast. Tom spoke with Variety Co-Editor-in-Chief Andrew Wallenstein about the upcoming launches of streaming service...
Wowza Media Systems Streaming Engine Arbitrary File Download Vulnerability
Wowza Media Systems Streaming Engine is a suite of streaming media server software from Wowza Media Systems in the United States. A security vulnerability exists in the download logging feature in Wowza Media Systems Streaming Engine 4.x.x and prior versions. An attacker can exploit the...
Wowza Media Systems Streaming Engine Cross-Site Scripting Vulnerability
Wowza Media Systems Streaming Engine is a suite of streaming media server software from Wowza Media Systems in the United States. A cross-site scripting vulnerability exists in the server selection box on the login page of enginemanager/loginfailed.html in Wowza Media Systems Streaming Engine 4.x...
CVE-2019-19456
A Reflected XSS was found in the server selection box inside the login page at: enginemanager/loginfailed.html in Wowza Streaming Engine = 4.x.x. This issue was resolved in Wowza Streaming Engine 4.8.0...