TI-2024-17374 CVE-2024-26293 · GHSA-c6jm-c2gh-rmrv
Unauthenticated Path Traversal affecting Avid NEXIS
Priority HIGH 77
The Avid Nexis Agent uses a vulnerable gSOAP version.
Vulnerabilities
5 records
TI-2024-17373 CVE-2024-26292 · GHSA-gwhr-w2cq-85f2
Authenticated Arbitrary File Deletion affecting Avid NEXIS
Priority MEDIUM 64
An authenticated Arbitrary File Deletion vulnerability enables an attacker to delete critical files.
TI-2024-17372 CVE-2024-26291 · GHSA-ppfc-qhxq-94wr
Authenticated Arbitrary File Read affecting Avid NEXIS
Priority HIGH 77
An Unauthenticated Arbitrary File Read vulnerability affects the Agent when installed on a system.
TI-2024-17371 CVE-2024-26290 · GHSA-j695-2cjc-466g
Authenticated Remote Command Injection affecting Avid NEXIS
Priority HIGH 73
Improper Input Validation vulnerability in Avid Avid NEXIS E-series on Linux, Avid Avid NEXIS F-series on Linux, Avid Avid NEXIS PRO+ on Linux, Avid System Director Appliance (SDA+) on Linux allows code execution on unde…
TI-2011-04285 CVE-2011-5003 · GHSA-mxg3-5hmw-28wr
Stack-based buffer overflow in the Phonetic Indexer (AvidPhoneticIndexer.exe) in Avid…
Priority HIGH 78
Stack-based buffer overflow in the Phonetic Indexer (AvidPhoneticIndexer.exe) in Avid Media Composer 5.5.3 and earlier allows remote attackers to execute arbitrary code via a long request to TCP port 4659.