CVE
Vendors
Products
Updated
CVSS v2
CVSS v3
In Philips (formerly Carestream) Vue MyVue PACS through 12.2.x.x, the VideoStream function allows Path Traversal by authenticated users to access files stored outside of the web root.
Canon Oce Print Exec Workgroup 1.3.2 allows XSS via the lang parameter.
Canon Oce Print Exec Workgroup 1.3.2 allows Host header injection.
In GNOME grilo though 0.3.13, grl-net-wc.c does not enable TLS certificate verification on the SoupSessionAsync objects it creates, leaving users vulnerable to network MITM attacks. NOTE: this is similar to CVE-2016-20011.
Hbd3pr2_firmware, Hbd3pr2, H4d3prv3_firmware, H4d3prv3, Hed3pr3_firmware, Hed3pr3, H4d3prv2_firmware, H4d3prv2, Hbd3pr1_firmware, Hbd3pr1
2022-03-09
N/A
7.5 HIGH
Honeywell HDZP252DI 1.00.HW02.4 and HBW2PER1 1.000.HW01.3 devices allow command spoofing (for camera control) after ARP cache poisoning has been achieved.
Hbd3pr2_firmware, Hbd3pr2, H4d3prv3_firmware, H4d3prv3, Hed3pr3_firmware, Hed3pr3, H4d3prv2_firmware, H4d3prv2, Hbd3pr1_firmware, Hbd3pr1
2022-03-09
N/A
9.8 CRITICAL
Honeywell HDZP252DI 1.00.HW02.4 and HBW2PER1 1.000.HW01.3 devices allow a video replay attack after ARP cache poisoning has been achieved.
An XSS issue was discovered in ReCaptcha Solver 5.7. A response from Anti-Captcha.com, RuCaptcha.com, 2captcha.com, DEATHbyCAPTCHA.com, ImageTyperz.com, or BestCaptchaSolver.com in setCaptchaCode() is inserted into the DOM as HTML, resulting in full control over the user's browser by these servers.
In GNOME evolution-rss through 0.3.96, network-soup.c does not enable TLS certificate verification on the SoupSessionSync objects it creates, leaving users vulnerable to network MITM attacks. NOTE: this is similar to CVE-2016-20011.
In GNOME libzapojit through 0.0.3, zpj-skydrive.c does not enable TLS certificate verification on the SoupSessionSync objects it creates, leaving users vulnerable to network MITM attacks. NOTE: this is similar to CVE-2016-20011.
In GNOME libgda through 6.0.0, gda-web-provider.c does not enable TLS certificate verification on the SoupSessionSync objects it creates, leaving users vulnerable to network MITM attacks. NOTE: this is similar to CVE-2016-20011.