https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T16:38:53.956423+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/4hzm000603 4HZM000603 — ABB Ability Camera Connect Vulnerabilities in outdated 3rd party component (VLC) 2026-10-03T16:38:54.085336+00:00

ABB is aware of public reports of vulnerabilities in a 3rd party component VLC media player Version 2.2.4 which was delivered together with the installation package of Camera Connect Version 1.5.0.14 and below. An update is available that resolves a privately reported outdated 3rd party component with vulnerabilities in the product versions listed as affected in this advisory.

An attacker who successfully exploited any of these vulnerabilities in the 3rd party component could potentially compromise the system in different ways.

 https://cve.radiocsirt.org/vuln/cnvd-2017-08122 cnvd-2017-08122 2026-10-03T16:38:54.085433+00:00 cnvd-2017-08122 https://cve.radiocsirt.org/vuln/euvd-2026-75258 EUVD-2026-75258 2026-10-03T16:38:54.085461+00:00 EUVD-2026-75258 https://cve.radiocsirt.org/vuln/fkie_cve-2017-8311 fkie_cve-2017-8311 2026-10-03T16:38:54.085482+00:00

Potential heap based buffer overflow in ParseJSS in VideoLAN VLC before 2.2.5 due to skipping NULL terminator in an input string allows attackers to execute arbitrary code via a crafted subtitles file.

 https://cve.radiocsirt.org/vuln/ghsa-h3gx-7f25-5jxg GHSA-h3gx-7f25-5jxg 2026-10-03T16:38:54.085515+00:00

Potential heap based buffer overflow in ParseJSS in VideoLAN VLC before 2.2.5 due to skipping NULL terminator in an input string allows attackers to execute arbitrary code via a crafted subtitles file.

 https://cve.radiocsirt.org/vuln/gsd-2017-8311 gsd-2017-8311 2026-10-03T16:38:54.085540+00:00 gsd-2017-8311 https://cve.radiocsirt.org/vuln/icsa-26-146-05 ICSA-26-146-05 — ABB Ability Camera Connect 2026-10-03T16:38:54.085558+00:00

ABB is aware of public reports of vulnerabilities in a 3rd party component VLC media player Version 2.2.4 which was delivered together with the installation package of Camera Connect Version 1.5.0.14 and below. An update is available that resolves a privately reported outdated 3rd party component with vulnerabilities in the product versions listed as affected in this advisory.

An attacker who successfully exploited any of these vulnerabilities in the 3rd party component could potentially compromise the system in different ways.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-8311 UBUNTU-CVE-2017-8311 2026-10-03T16:38:54.085609+00:00

Affected: Ubuntu:14.04:LTS: vlc, Ubuntu:16.04:LTS: vlc

Potential heap based buffer overflow in ParseJSS in VideoLAN VLC before 2.2.5 due to skipping NULL terminator in an input string allows attackers to execute arbitrary code via a crafted subtitles file.