CVE

Id
69195  
CVE No.
CVE-2014-1900  
Status
Candidate  
Description
Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall YCEB03; Bullet VGA YCBL03 and YCBLB3; Bullet HD 720 YCBLHD5; Y-cam Classic Range YCB002, YCK002, and YCW003; and Y-cam Original Range YCB001, YCW001, running firmware 4.30 and earlier, allow remote attackers to bypass authentication and obtain sensitive information via a leading "/./" in a request to en/account/accedit.asp.  
Phase
Assigned (20140207)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
664714 69195 CVE-2014-1900 MISC:https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2014-007/?fid=3850  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
18561 JVNDB-2014-007436 WordPress 用 VideoWhisper Live Streaming Integration プラグインの error-handling 機能における重要な情報を取得される脆弱性 WordPress 用 VideoWhisper Live Streaming Integration プラグインの (1) bp.php、(2) videowhisper_streaming.php、および (3) ls/rtmp.inc.php の error-handling 機能には、重要な情報を取得される脆弱性が存在します。 CVE-2014-1908 69195 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007436.html  View