All CVEs — page 400 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The Anjvision YSSD-RTMP-H5 firmware contains hardcoded cloud API credentials that are shared across all deployed devices, allowing anyone with access to the firmware package to reuse these credentials for unauthorized cloud service interactions.
The flaw in Anjvision YSSD-RTMP-H5 firmware version 3.3.2.4 allows an attacker to introduce untrusted firmware, leading to potential device compromise.
The flaw allows an authenticated user to enable a hidden debug interface, potentially leading to remote code execution or unauthorized access to system-level functionality.
The flaw allows an unauthorized attacker to access sensitive device operations by bypassing required authentication, potentially leading to full device compromise.
A remote attacker can execute arbitrary code via the chat input field in the course module of GUnet Open eClass Platform v.3.15, allowing for a critical security breach.
This flaw allows an attacker to paste code cells into JupyterLab that can mark HTML output as trusted, bypassing output sanitization and executing scripts in the authenticated JupyterLab origin.
The flaw allows attackers to bypass safety checks and execute arbitrary commands via Git push operations, posing a significant risk.
The flaw allows an attacker to load an attacker-controlled configuration file, setting executable Git options that can be invoked during the clone operation with the Node.js process privileges, leading to potential Remote Code Execution (RCE).
The Russh SSH library has a channel validation flaw where client callbacks receive lifecycle events for channels that were never opened or established by the client, potentially leading to application panics or incorrect exit code tracking when a malicious server sends fake channel events.
This flaw involves improper input validation in Google Chrome's printing feature, allowing a remote attacker to execute arbitrary code outside the sandbox if the renderer process is compromised.
A type confusion vulnerability in V8 of Google Chrome prior to 154.0.8037.57 could allow a remote attacker to execute arbitrary code within the sandbox via a crafted HTML page, leveraging social engineering.