EUVD-2014-1962

Malware in sbrugna...

CVE-2014-1902

Multiple cross-site scripting XSS vulnerabilities in Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall YCEB03; Bullet VGA YCBL03 and YCBLB3; Bullet HD 720 YCBLHD5; Y-cam Classic Range YCB002, YCK002, and YCW003; and Y-cam Original Range YCB001, YCW00...

Authentication flaw

Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall YCEB03; Bullet VGA YCBL03 and YCBLB3; Bullet HD 720 YCBLHD5; Y-cam Classic Range YCB002, YCK002, and YCW003; and Y-cam Original Range YCB001, YCW001, running firmware 4.30 and earlier, allow remote...

CVE-2014-1901

CVE-2014-1901 affects Y-Cam camera models and ranges (firmware 4.30 and earlier). The vulnerability allows remote authenticated users to cause a denial of service (reboot) by sending malformed parameters to en/store_main.asp, en/account/accedit.asp, or en/smtpclient.asp. Note: the issue can be ex...

CVE-2014-1900

CVE-2014-1900 affects multiple Y-Cam models (SD, S, EyeBall, Bullet, Classic, Original ranges) with firmware 4.30 and earlier. The issue allows remote attackers to bypass authentication and obtain sensitive information by sending a request to en/account/accedit.asp with a leading "./" sequence in...