Vulnerabilities

TI-2024-32483 CVE-2024-48743 · GHSA-58v4-rwx9-c9g3

Cross Site Scripting vulnerability in Sentry v.6.0.9 allows a remote attacker to execute…

MEDIUM 62

Cross Site Scripting vulnerability in Sentry v.6.0.9 allows a remote attacker to execute arbitrary code via the z parameter.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00444 Published 2024-10-25 No fix listed CWE-79

TI-2024-09521 CVE-2024-10276 · GHSA-pmv3-8v62-99pj

Telestream Sentry Reports Page page cross site scripting

MEDIUM 57

A vulnerability has been found in Telestream Sentry 6.0.9 and classified as problematic.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00388 Published 2024-10-23 No fix listed CWE-79

TI-2020-07139 CVE-2020-8887

Telestream Tektronix Medius before 10.7.5 and Sentry before 10.7.5 have a SQL injection…

LOW 36

Telestream Tektronix Medius before 10.7.5 and Sentry before 10.7.5 have a SQL injection vulnerability allowing an unauthenticated attacker to dump database contents via the page parameter in a page=login request to index…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01454 Published 2020-09-22 No fix listed CWE-89

TI-2007-00453 CVE-2007-0466 · GHSA-8223-6xqr-mf5f

Telestream Flip4Mac Windows Media Components for Quicktime 2.1.0.33 allows remote…

MEDIUM 52

Telestream Flip4Mac Windows Media Components for Quicktime 2.1.0.33 allows remote attackers to execute arbitrary code via a crafted ASF_File_Properties_Object size field in a WMV file, which triggers memory corruption.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06243 Published 2007-01-31 No fix listed

Vulnerabilities

Filters

Cross Site Scripting vulnerability in Sentry v.6.0.9 allows a remote attacker to execute…

Telestream Sentry Reports Page page cross site scripting

Telestream Tektronix Medius before 10.7.5 and Sentry before 10.7.5 have a SQL injection…

Telestream Flip4Mac Windows Media Components for Quicktime 2.1.0.33 allows remote…