Vulnerability index

Browse CVEs

54 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Pexip Infinity MEDIUM 5.9
CVE-2022-27930

Pexip Infinity 27.x before 27.3 allows remote attackers to trigger a software abort via single-sign-on if a random Universally Unique Identifier is g…

Fix: 27.3+
Fix from $1,600 2022-07-17
Pexip Infinity MEDIUM 5.3
CVE-2022-25357

Pexip Infinity 27.x before 27.2 has Improper Access Control. An attacker can sometimes join a conference (call join) if it has a lock but not a PIN.

Fix: 27.2+
Fix from $1,600 2022-07-17
Infinity Connect CRITICAL 9.8
CVE-2021-29656

Pexip Infinity Connect before 1.8.0 mishandles TLS certificate validation. The allow list is not properly checked.

Fix: 1.8.0+
Fix from $2,300 2022-02-18
Pexip Infinity HIGH 7.5
CVE-2022-23228

Pexip Infinity before 27.0 has improper WebRTC input validation. An unauthenticated remote attacker can use excessive resources, temporarily causing …

Fix: 27.0+
Fix from $1,950 2022-02-18
Infinity Connect CRITICAL 9.8
CVE-2021-29655

Pexip Infinity Connect before 1.8.0 omits certain provisioning authenticity checks. Thus, untrusted code may execute.

Fix: 1.8.0+
Fix from $2,300 2022-02-18
Infinity HIGH 7.5
CVE-2021-35969

Pexip Infinity before 26 allows temporary remote Denial of Service (abort) because of missing call-setup input validation.

Fix: 26+
Fix from $1,950 2022-01-15
Infinity HIGH 7.5
CVE-2021-42555

Pexip Infinity before 26.2 allows temporary remote Denial of Service (abort) because of missing call-setup input validation.

Fix: 26.2+
Fix from $1,950 2022-01-15
Infinity HIGH 7.5
CVE-2021-33498

Pexip Infinity before 26 allows remote denial of service because of missing H.264 input validation (issue 1 of 2).

Fix: 26+
Fix from $1,950 2022-01-15
Infinity HIGH 7.5
CVE-2021-33499

Pexip Infinity before 26 allows remote denial of service because of missing H.264 input validation (issue 2 of 2).

Fix: 26+
Fix from $1,950 2022-01-15
Infinity HIGH 7.5
CVE-2021-32545

Pexip Infinity before 26 allows remote denial of service because of missing RTMP input validation.

Fix: 26+
Fix from $1,950 2022-01-15
Pexip Infinity HIGH 7.5
CVE-2021-31925

Pexip Infinity 25.x before 25.4 has Improper Input Validation, and thus an unauthenticated remote attacker can cause a denial of service via the admi…

Fix: 25.4+
Fix from $1,950 2021-07-07
Pexip Infinity HIGH 7.5
CVE-2020-25868

Pexip Infinity 22.x through 24.x before 24.2 has Improper Input Validation for call setup. An unauthenticated remote attacker can trigger a software …

Fix: 24.2+
Fix from $1,950 2021-07-07
Pexip Infinity MEDIUM 5.3
CVE-2020-24615

Pexip Infinity before 24.1 has Improper Input Validation, leading to temporary denial of service via SIP.

Fix: 24.1+
Fix from $1,600 2020-09-25
Pexip Infinity CRITICAL 9.8
CVE-2020-11805

Pexip Reverse Proxy and TURN Server before 6.1.0 has Incorrect UDP Access Control via TURN.

Mitigation only
Fix from $2,300 2020-09-25
Pexip Infinity HIGH 7.5
CVE-2018-10432

Pexip Infinity before 18 allows Remote Denial of Service (TLS handshakes in RTMP).

Fix: 18+
Fix from $1,950 2020-09-25
Pexip Infinity HIGH 7.5
CVE-2018-10585

Pexip Infinity before 18 allows remote Denial of Service (XML parsing).

Fix: 18+
Fix from $1,950 2020-09-25
Pexip Infinity HIGH 7.5
CVE-2020-12824

Pexip Infinity 23.x before 23.3 has improper input validation, leading to a temporary software abort via RTP.

Fix: 23.3+
Fix from $1,950 2020-09-25
Pexip Infinity HIGH 7.5
CVE-2020-13387

Pexip Infinity before 23.4 has a lack of input validation, leading to temporary denial of service via H.323.

Fix: 23.4+
Fix from $1,950 2020-09-25
Pexip Infinity HIGH 7.2
CVE-2019-7177

Pexip Infinity before 20.1 allows Code Injection onto nodes via an admin.

Fix: 20.1+
Fix from $1,950 2020-09-25
Pexip Infinity HIGH 7.2
CVE-2019-7178

Pexip Infinity before 20.1 allows privilege escalation by restoring a system backup.

Fix: 20.1+
Fix from $1,950 2020-09-25
Pexip Infinity MEDIUM 6.1
CVE-2017-17477

Pexip Infinity before 17 allows an unauthenticated remote attacker to achieve stored XSS via management web interface views.

Fix: 17+
Fix from $1,600 2020-09-25
Pexip Infinity CRITICAL 9.8
CVE-2015-4719

The client API authentication mechanism in Pexip Infinity before 10 allows remote attackers to gain privileges via a crafted request.

Fix: 10+
Fix from $2,300 2020-09-24
Pexip Infinity CRITICAL 9.8
CVE-2017-6551

Pexip Infinity before 14.2 allows remote attackers to cause a denial of service (service restart) or execute arbitrary code via vectors related to Co…

Fix: after 14.1
Fix from $2,300 2017-05-02
Pexip Infinity HIGH 7.1
CVE-2014-8779

Pexip Infinity before 8 uses the same SSH host keys across different customers' installations, which allows man-in-the-middle attackers to spoof Mana…

Fix: after 7.0
Fix from $1,950 2015-02-03