An uspecified endpoint in the web server of the switch does not properly authenticate the user identity, and may allow downloading a config page with the password to the switch in clear text.
Butterfly Button plugin may leave traces of its use on user's device. Since it is used for reporting domestic problems, this may lead to spouse knowing about its use.
Sunell DVR, latest version, CWE-200: Exposure of Sensitive Information to an Unauthorized Actor through an unspecified request.
Priority Windows may allow Command Execution via SQL Injection using an unspecified method.
Priority Web version 19.1.0.68, parameter manipulation on an unspecified end-point may allow authentication bypass.
Libpeconv – access violation, before commit b076013 (30/11/2022).
Libpeconv – integer overflow, before commit 75b1565 (30/11/2022).
Sunell DVR, latest version, Insufficiently Protected Credentials (CWE-522) may be exposed through an unspecified request.
Media CP Media Control Panel latest version. A Permissive Flash Cross-domain Policy may allow information disclosure.
Media CP Media Control Panel latest version. CSRF possible through unspecified endpoint.