Browse CVEs

MEDIUM 5.9 CVE-2022-27930 Pexip Infinity 27.x before 27.3 allows remote attackers to trigger a software abort via single-sign-on if a random Universally Unique Identifier is g… Pexip Infinity 27.3+ Fix from $1,6002022-07-17 MEDIUM 5.3 CVE-2022-25357 Pexip Infinity 27.x before 27.2 has Improper Access Control. An attacker can sometimes join a conference (call join) if it has a lock but not a PIN. Pexip Infinity 27.2+ Fix from $1,6002022-07-17 CRITICAL 9.8 CVE-2021-29656 Pexip Infinity Connect before 1.8.0 mishandles TLS certificate validation. The allow list is not properly checked. Infinity Connect 1.8.0+ Fix from $2,3002022-02-18 HIGH 7.5 CVE-2022-23228 Pexip Infinity before 27.0 has improper WebRTC input validation. An unauthenticated remote attacker can use excessive resources, temporarily causing … Pexip Infinity 27.0+ Fix from $1,9502022-02-18 CRITICAL 9.8 CVE-2021-29655 Pexip Infinity Connect before 1.8.0 omits certain provisioning authenticity checks. Thus, untrusted code may execute. Infinity Connect 1.8.0+ Fix from $2,3002022-02-18 HIGH 7.5 CVE-2021-35969 Pexip Infinity before 26 allows temporary remote Denial of Service (abort) because of missing call-setup input validation. Infinity 26+ Fix from $1,9502022-01-15 HIGH 7.5 CVE-2021-42555 Pexip Infinity before 26.2 allows temporary remote Denial of Service (abort) because of missing call-setup input validation. Infinity 26.2+ Fix from $1,9502022-01-15 HIGH 7.5 CVE-2021-33498 Pexip Infinity before 26 allows remote denial of service because of missing H.264 input validation (issue 1 of 2). Infinity 26+ Fix from $1,9502022-01-15 HIGH 7.5 CVE-2021-33499 Pexip Infinity before 26 allows remote denial of service because of missing H.264 input validation (issue 2 of 2). Infinity 26+ Fix from $1,9502022-01-15 HIGH 7.5 CVE-2021-32545 Pexip Infinity before 26 allows remote denial of service because of missing RTMP input validation. Infinity 26+ Fix from $1,9502022-01-15 HIGH 7.5 CVE-2021-31925 Pexip Infinity 25.x before 25.4 has Improper Input Validation, and thus an unauthenticated remote attacker can cause a denial of service via the admi… Pexip Infinity 25.4+ Fix from $1,9502021-07-07 HIGH 7.5 CVE-2020-25868 Pexip Infinity 22.x through 24.x before 24.2 has Improper Input Validation for call setup. An unauthenticated remote attacker can trigger a software … Pexip Infinity 24.2+ Fix from $1,9502021-07-07 MEDIUM 5.3 CVE-2020-24615 Pexip Infinity before 24.1 has Improper Input Validation, leading to temporary denial of service via SIP. Pexip Infinity 24.1+ Fix from $1,6002020-09-25 CRITICAL 9.8 CVE-2020-11805 Pexip Reverse Proxy and TURN Server before 6.1.0 has Incorrect UDP Access Control via TURN. Pexip Infinity Mitigation only Fix from $2,3002020-09-25 HIGH 7.5 CVE-2018-10432 Pexip Infinity before 18 allows Remote Denial of Service (TLS handshakes in RTMP). Pexip Infinity 18+ Fix from $1,9502020-09-25 HIGH 7.5 CVE-2018-10585 Pexip Infinity before 18 allows remote Denial of Service (XML parsing). Pexip Infinity 18+ Fix from $1,9502020-09-25 HIGH 7.5 CVE-2020-12824 Pexip Infinity 23.x before 23.3 has improper input validation, leading to a temporary software abort via RTP. Pexip Infinity 23.3+ Fix from $1,9502020-09-25 HIGH 7.5 CVE-2020-13387 Pexip Infinity before 23.4 has a lack of input validation, leading to temporary denial of service via H.323. Pexip Infinity 23.4+ Fix from $1,9502020-09-25 HIGH 7.2 CVE-2019-7177 Pexip Infinity before 20.1 allows Code Injection onto nodes via an admin. Pexip Infinity 20.1+ Fix from $1,9502020-09-25 HIGH 7.2 CVE-2019-7178 Pexip Infinity before 20.1 allows privilege escalation by restoring a system backup. Pexip Infinity 20.1+ Fix from $1,9502020-09-25 MEDIUM 6.1 CVE-2017-17477 Pexip Infinity before 17 allows an unauthenticated remote attacker to achieve stored XSS via management web interface views. Pexip Infinity 17+ Fix from $1,6002020-09-25 CRITICAL 9.8 CVE-2015-4719 The client API authentication mechanism in Pexip Infinity before 10 allows remote attackers to gain privileges via a crafted request. Pexip Infinity 10+ Fix from $2,3002020-09-24 CRITICAL 9.8 CVE-2017-6551 Pexip Infinity before 14.2 allows remote attackers to cause a denial of service (service restart) or execute arbitrary code via vectors related to Co… Pexip Infinity after 14.1 Fix from $2,3002017-05-02 HIGH 7.1 CVE-2014-8779 Pexip Infinity before 8 uses the same SSH host keys across different customers' installations, which allows man-in-the-middle attackers to spoof Mana… Pexip Infinity after 7.0 Fix from $1,9502015-02-03