# Product Security **URL:** https://rossvideo.community/c/general-discussion/product-security/44.md?page=1 [Latest](https://rossvideo.community/latest.md) · [Categories](https://rossvideo.community/categories.md) · [Tags](https://rossvideo.community/tags.md) **Page:** 2 --- ## [CVE-2025-1984 High Vulnerability in Eclipse Jetty: Closure](https://rossvideo.community/t/cve-2025-1984-high-vulnerability-in-eclipse-jetty-closure/12982)
**Author:** [@system](https://rossvideo.community/u/system)\ **Replies:** 0\ **Last updated:** [June 10, 2025, 7:33pm UTC](https://rossvideo.community/t/cve-2025-1984-high-vulnerability-in-eclipse-jetty-closure/12982 "2025-06-10T19:33:27Z")
Vulnerability Advisories A high-severity vulnerability has been identified in Eclipse Jetty, specifically affecting versions 12.0.0 through 12.0.16. This vulnerability, CVE-2025-1948, allows an HTTP/2 client to specify … --- ## [CVE-2025-3600 (Telerik UI for ASP.NET AJAX) High Vulnerability - Closure](https://rossvideo.community/t/cve-2025-3600-telerik-ui-for-asp-net-ajax-high-vulnerability-closure/12983)
**Author:** [@system](https://rossvideo.community/u/system)\ **Replies:** 0\ **Last updated:** [June 10, 2025, 7:30pm UTC](https://rossvideo.community/t/cve-2025-3600-telerik-ui-for-asp-net-ajax-high-vulnerability-closure/12983 "2025-06-10T19:30:21Z")
Vulnerability Advisories A high severity vulnerability has been disclosed in Progress® Telerik® UI for ASP.NET AJAX affecting versions 2011.2.712 through 2025.1.218. This vulnerability, identified as CVE-2025-3600, invo… --- ## [Please welcome Michael Udoh from JPMorganChase](https://rossvideo.community/t/please-welcome-michael-udoh-from-jpmorganchase/10167)
**Author:** [@gauravsaxena](https://rossvideo.community/u/gauravsaxena)\ **Replies:** 0\ **Last updated:** [January 17, 2025, 5:06pm UTC](https://rossvideo.community/t/please-welcome-michael-udoh-from-jpmorganchase/10167 "2025-01-17T17:06:00Z")
--- ## [0.0.0.0 Browser vulnerability - Closure](https://rossvideo.community/t/0-0-0-0-browser-vulnerability-closure/12987)
**Author:** [@system](https://rossvideo.community/u/system)\ **Replies:** 0\ **Last updated:** [December 6, 2024, 4:33pm UTC](https://rossvideo.community/t/0-0-0-0-browser-vulnerability-closure/12987 "2024-12-06T16:33:45Z")
Vulnerability Advisories Based on our assessment Dashboard does DB does not reference 0.0.0.0 for the web server rather do it through “localhost” hence the vulnerability doesn’t affect any of the DB product 0.0.0.0 Da… --- ## [Multiple Vulnerabilities in CUPS](https://rossvideo.community/t/multiple-vulnerabilities-in-cups/12988)
**Author:** [@system](https://rossvideo.community/u/system)\ **Replies:** 0\ **Last updated:** [October 15, 2024, 3:50pm UTC](https://rossvideo.community/t/multiple-vulnerabilities-in-cups/12988 "2024-10-15T15:50:15Z")
Vulnerability Advisories The Ross Video ProdSec team responded to several high-severity security vulnerabilities affecting CUPS (Common Unix Printing System) CVE-2024-47176 CVE-2024-47076 CVE-2024-47175 CVE-2024-4… --- ## [Please welcome Joe Wheate from Sinclair Inc.](https://rossvideo.community/t/please-welcome-joe-wheate-from-sinclair-inc/10166)
**Author:** [@gauravsaxena](https://rossvideo.community/u/gauravsaxena)\ **Replies:** 0\ **Last updated:** [September 12, 2024, 3:47pm UTC](https://rossvideo.community/t/please-welcome-joe-wheate-from-sinclair-inc/10166 "2024-09-12T15:47:00Z")
--- ## [0.0.0.0 Browser vulnerability - Containment](https://rossvideo.community/t/0-0-0-0-browser-vulnerability-containment/12989)
**Author:** [@system](https://rossvideo.community/u/system)\ **Replies:** 0\ **Last updated:** [August 27, 2024, 2:08pm UTC](https://rossvideo.community/t/0-0-0-0-browser-vulnerability-containment/12989 "2024-08-27T14:08:52Z")
Vulnerability Advisories A critical 18-year-old vulnerability, known as “0.0.0.0 Day,” has been identified in major web browsers including Chromium, Firefox, and Safari. This flaw enables attackers to bypass browser sec… --- ## [SLUBStick Linux Kernel vulnerability - Closure](https://rossvideo.community/t/slubstick-linux-kernel-vulnerability-closure/12990)
**Author:** [@system](https://rossvideo.community/u/system)\ **Replies:** 0\ **Last updated:** [August 27, 2024, 2:05pm UTC](https://rossvideo.community/t/slubstick-linux-kernel-vulnerability-closure/12990 "2024-08-27T14:05:13Z")
Vulnerability Advisories SLUBStick Linux Kernel Vulnerabilities No Ross products are affected by these vulnerabilities. Therefore, we’re closing our response to this vulnerability. SLUBStick Linux Kernel - Product Sec… --- ## [RootKit vulnerability bypassing Secure Boot - Assessment](https://rossvideo.community/t/rootkit-vulnerability-bypassing-secure-boot-assessment/12991)
**Author:** [@system](https://rossvideo.community/u/system)\ **Replies:** 0\ **Last updated:** [August 19, 2024, 2:08pm UTC](https://rossvideo.community/t/rootkit-vulnerability-bypassing-secure-boot-assessment/12991 "2024-08-19T14:08:02Z")
Vulnerability Advisories A vulnerability named PKFail has been revealed, which completely compromises the secure boot on more than 200 device models sold by SuperMicro and Dell that we might have shipped to our customer… --- ## [Responding to multiple vulnerabilities - Assessment](https://rossvideo.community/t/responding-to-multiple-vulnerabilities-assessment/12993)
**Author:** [@system](https://rossvideo.community/u/system)\ **Replies:** 0\ **Last updated:** [August 19, 2024, 2:05pm UTC](https://rossvideo.community/t/responding-to-multiple-vulnerabilities-assessment/12993 "2024-08-19T14:05:18Z")
Vulnerability Advisories Ross Product Security Team is actively working on addressing two newly identified vulnerabilities that may impact our products. Your awareness and cooperation are essential during this process. … --- ## [CVE-2024-21147 High Vulnerability in Java: Containment](https://rossvideo.community/t/cve-2024-21147-high-vulnerability-in-java-containment/12992)
**Author:** [@system](https://rossvideo.community/u/system)\ **Replies:** 0\ **Last updated:** [August 19, 2024, 2:02pm UTC](https://rossvideo.community/t/cve-2024-21147-high-vulnerability-in-java-containment/12992 "2024-08-19T14:02:25Z")
Vulnerability Advisories This is an update to the high vulnerability discovered in Java. The Product Security team has completed their evaluation and identified a few affected products. Product teams are currently work… --- ## [CVE-2024-21147 High Vulnerability in Java: Assessment](https://rossvideo.community/t/cve-2024-21147-high-vulnerability-in-java-assessment/12994)
**Author:** [@system](https://rossvideo.community/u/system)\ **Replies:** 0\ **Last updated:** [July 23, 2024, 3:31pm UTC](https://rossvideo.community/t/cve-2024-21147-high-vulnerability-in-java-assessment/12994 "2024-07-23T15:31:32Z")
Vulnerability Advisories A High vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise Java instances. Successful attacks of this vulnerability can result in unauthori… --- ## [EBU Penetration Tests](https://rossvideo.community/t/ebu-penetration-tests/12995)
**Author:** [@system](https://rossvideo.community/u/system)\ **Replies:** 0\ **Last updated:** [July 1, 2024, 1:15pm UTC](https://rossvideo.community/t/ebu-penetration-tests/12995 "2024-07-01T13:15:11Z")
Vulnerability Advisories Vulnerability Incident Response Advisory EBU.pdf (238 KB) --- ## [Please welcome Daniel from Sky UK](https://rossvideo.community/t/please-welcome-daniel-from-sky-uk/10165)
**Author:** [@gauravsaxena](https://rossvideo.community/u/gauravsaxena)\ **Replies:** 0\ **Last updated:** [March 26, 2024, 8:25pm UTC](https://rossvideo.community/t/please-welcome-daniel-from-sky-uk/10165 "2024-03-26T20:25:00Z")
--- ## [Multiple vulnerabilities CVE-2024-22860, 22861, 22862 - FFMPEG : Resolution](https://rossvideo.community/t/multiple-vulnerabilities-cve-2024-22860-22861-22862-ffmpeg-resolution/12997)
**Author:** [@system](https://rossvideo.community/u/system)\ **Replies:** 0\ **Last updated:** [February 27, 2024, 10:25pm UTC](https://rossvideo.community/t/multiple-vulnerabilities-cve-2024-22860-22861-22862-ffmpeg-resolution/12997 "2024-02-27T22:25:29Z")
Vulnerability Advisories FFmpeg, a widely used open-source project for handling multimedia files, has recently been identified for its vulnerabilities. Discovered through Google’s OSS-Fuzz service, three security vulner… --- ## [CVE-2023-6246 glibc : Resolution](https://rossvideo.community/t/cve-2023-6246-glibc-resolution/12996)
**Author:** [@system](https://rossvideo.community/u/system)\ **Replies:** 0\ **Last updated:** [February 16, 2024, 6:48pm UTC](https://rossvideo.community/t/cve-2023-6246-glibc-resolution/12996 "2024-02-16T18:48:16Z")
Vulnerability Advisories Unprivileged attackers can get root access on multiple major Linux distributions in default configurations by exploiting a newly disclosed local privilege escalation (LPE) vulnerability in the G… --- ## [Multiple vulnerabilities CVE-2024-22860, 22861, 22862 - FFMPEG : Assessment](https://rossvideo.community/t/multiple-vulnerabilities-cve-2024-22860-22861-22862-ffmpeg-assessment/12999)
**Author:** [@system](https://rossvideo.community/u/system)\ **Replies:** 0\ **Last updated:** [February 8, 2024, 4:23pm UTC](https://rossvideo.community/t/multiple-vulnerabilities-cve-2024-22860-22861-22862-ffmpeg-assessment/12999 "2024-02-08T16:23:29Z")
Vulnerability Advisories FFmpeg, a widely used open-source project for handling multimedia files, has recently been identified for its vulnerabilities. Discovered through Google’s OSS-Fuzz service, three security vulner… --- ## [CVE-2023-6246 glibc : Assessment](https://rossvideo.community/t/cve-2023-6246-glibc-assessment/12998)
**Author:** [@system](https://rossvideo.community/u/system)\ **Replies:** 0\ **Last updated:** [February 7, 2024, 3:04pm UTC](https://rossvideo.community/t/cve-2023-6246-glibc-assessment/12998 "2024-02-07T15:04:25Z")
Vulnerability Advisories Unprivileged attackers can get root access on multiple major Linux distributions in default configurations by exploiting a newly disclosed local privilege escalation (LPE) vulnerability in the G… --- ## [Please welcome James from Game Creek Video.](https://rossvideo.community/t/please-welcome-james-from-game-creek-video/10164)
**Author:** [@gauravsaxena](https://rossvideo.community/u/gauravsaxena)\ **Replies:** 0\ **Last updated:** [January 4, 2024, 7:38pm UTC](https://rossvideo.community/t/please-welcome-james-from-game-creek-video/10164 "2024-01-04T19:38:00Z")
--- ## [CVE-2023-50164 Apache Struts2 : Containment](https://rossvideo.community/t/cve-2023-50164-apache-struts2-containment/13004)
**Author:** [@system](https://rossvideo.community/u/system)\ **Replies:** 0\ **Last updated:** [December 20, 2023, 3:48pm UTC](https://rossvideo.community/t/cve-2023-50164-apache-struts2-containment/13004 "2023-12-20T15:48:01Z")
Vulnerability Advisories On December 7, 2023, a Remote Execution vulnerability in Apache Struts was disclosed. CVE-2023-50164 may allow an attacker to manipulate file upload parameters to enable path traversal . Unde… --- ## [CVE-2023-50164 Apache Struts2 : Assessment](https://rossvideo.community/t/cve-2023-50164-apache-struts2-assessment/13003)
**Author:** [@system](https://rossvideo.community/u/system)\ **Replies:** 0\ **Last updated:** [December 13, 2023, 9:16pm UTC](https://rossvideo.community/t/cve-2023-50164-apache-struts2-assessment/13003 "2023-12-13T21:16:02Z")
Vulnerability Advisories On December 7, 2023, a Remote Execution vulnerability in Apache Struts was disclosed. CVE-2023-50164 may allow an attacker to manipulate file upload parameters to enable path traversal . Unde… --- ## [CVE-2023-4863, CVE-2023-36735 Multiple vulnerabilities affecting LibWebP-Resolution](https://rossvideo.community/t/cve-2023-4863-cve-2023-36735-multiple-vulnerabilities-affecting-libwebp-resolution/13002)
**Author:** [@system](https://rossvideo.community/u/system)\ **Replies:** 0\ **Last updated:** [December 12, 2023, 5:12pm UTC](https://rossvideo.community/t/cve-2023-4863-cve-2023-36735-multiple-vulnerabilities-affecting-libwebp-resolution/13002 "2023-12-12T17:12:11Z")
Vulnerability Advisories On Friday, September 15, 2023, a privilege escalation vulnerability was made public in Microsoft Edge which is chromium-based. A successful exploit could allow a remote attacker to gain elevate… --- ## [CVE-2023-46604 - Apache ActiveMQ Critical Vulnerability: Resolution](https://rossvideo.community/t/cve-2023-46604-apache-activemq-critical-vulnerability-resolution/13001)
**Author:** [@system](https://rossvideo.community/u/system)\ **Replies:** 0\ **Last updated:** [December 12, 2023, 5:02pm UTC](https://rossvideo.community/t/cve-2023-46604-apache-activemq-critical-vulnerability-resolution/13001 "2023-12-12T17:02:53Z")
Vulnerability Advisories A critical remote code execution (RCE) flaw, CVE-2023-46604 , in the Apache ActiveMQ open-source message broker service, has been identified. The flaw lets malicious actors execute arbitrary s… --- ## [CVE-2023-36478 Eclipse Jetty HIGH Vulnerability : Resolution](https://rossvideo.community/t/cve-2023-36478-eclipse-jetty-high-vulnerability-resolution/13000)
**Author:** [@system](https://rossvideo.community/u/system)\ **Replies:** 0\ **Last updated:** [December 12, 2023, 4:56pm UTC](https://rossvideo.community/t/cve-2023-36478-eclipse-jetty-high-vulnerability-resolution/13000 "2023-12-12T16:56:06Z")
Vulnerability Advisories A vulnerability \[CVE-2023-36478\] has been identified in Eclipse Jetty {Java HTTP server and Java Servlet container} which could be exploited potentially by a malicious user to compromise an affe… --- ## [CVE-2023-46604 - Apache ActiveMQ Critical Vulnerability: Assessment](https://rossvideo.community/t/cve-2023-46604-apache-activemq-critical-vulnerability-assessment/13006)
**Author:** [@system](https://rossvideo.community/u/system)\ **Replies:** 0\ **Last updated:** [November 6, 2023, 5:20pm UTC](https://rossvideo.community/t/cve-2023-46604-apache-activemq-critical-vulnerability-assessment/13006 "2023-11-06T17:20:05Z")
Vulnerability Advisories A critical remote code execution (RCE) flaw, CVE-2023-46604 , in the Apache ActiveMQ open-source message broker service, has been identified. The flaw lets malicious actors execute arbitrary s… --- ## [CVE-2023-36478 Eclipse Jetty HIGH Vulnerability : Containment](https://rossvideo.community/t/cve-2023-36478-eclipse-jetty-high-vulnerability-containment/13007)
**Author:** [@system](https://rossvideo.community/u/system)\ **Replies:** 0\ **Last updated:** [November 2, 2023, 6:13pm UTC](https://rossvideo.community/t/cve-2023-36478-eclipse-jetty-high-vulnerability-containment/13007 "2023-11-02T18:13:28Z")
Vulnerability Advisories A vulnerability \[CVE-2023-36478\] has been identified in Eclipse Jetty {Java HTTP server and Java Servlet container} which could be exploited potentially by a malicious user to compromise an affe… --- ## [CVE-2023-42753 – Netfilter HIGH Vulnerability : Containment](https://rossvideo.community/t/cve-2023-42753-netfilter-high-vulnerability-containment/13008)
**Author:** [@system](https://rossvideo.community/u/system)\ **Replies:** 0\ **Last updated:** [November 2, 2023, 6:11pm UTC](https://rossvideo.community/t/cve-2023-42753-netfilter-high-vulnerability-containment/13008 "2023-11-02T18:11:56Z")
Vulnerability Advisories A vulnerability (CVE-2023-42753) has been identified in the Netfilter subsystem of the Linux Kernel which could be exploited by sending a request that submits malicious input to a targeted syste… --- ## [CVE-2023-35002 & CVE-2023-40163 - Accusoft ImageGear 20.1 Critical Vulnerability : Closure](https://rossvideo.community/t/cve-2023-35002-cve-2023-40163-accusoft-imagegear-20-1-critical-vulnerability-closure/13009)
**Author:** [@system](https://rossvideo.community/u/system)\ **Replies:** 0\ **Last updated:** [November 2, 2023, 6:06pm UTC](https://rossvideo.community/t/cve-2023-35002-cve-2023-40163-accusoft-imagegear-20-1-critical-vulnerability-closure/13009 "2023-11-02T18:06:19Z")
Vulnerability Advisories Multiple vulnerabilities have been identified in Accusoft ImageGear \[image processing SDK for C and C++\], leading to code execution and buffer overflow errors. CVE-2023-35002 : The heap-based … --- ## [CVE-2023-36478 Eclipse Jetty HIGH Vulnerability](https://rossvideo.community/t/cve-2023-36478-eclipse-jetty-high-vulnerability/13010)
**Author:** [@system](https://rossvideo.community/u/system)\ **Replies:** 0\ **Last updated:** [October 18, 2023, 4:21pm UTC](https://rossvideo.community/t/cve-2023-36478-eclipse-jetty-high-vulnerability/13010 "2023-10-18T16:21:53Z")
Vulnerability Advisories A vulnerability \[CVE-2023-36478\] has been identified in Eclipse Jetty {Java HTTP server and Java Servlet container} which could be exploited potentially by a malicious user to compromise an affe… --- ## [CVE-2023-42753 – Netfilter HIGH Vulnerability](https://rossvideo.community/t/cve-2023-42753-netfilter-high-vulnerability/13011)
**Author:** [@system](https://rossvideo.community/u/system)\ **Replies:** 0\ **Last updated:** [October 18, 2023, 4:19pm UTC](https://rossvideo.community/t/cve-2023-42753-netfilter-high-vulnerability/13011 "2023-10-18T16:19:28Z")
Vulnerability Advisories A vulnerability (CVE-2023-42753) has been identified in netfilter subsystem of the Linux Kernel which could be exploited by sending a request that submits malicious input to a targeted system. … [Previous page](https://rossvideo.community/c/general-discussion/product-security/44.md) [Next page](https://rossvideo.community/c/general-discussion/product-security/44.md?page=2)