Skip to contentSound4 Ltd. Stream vulnerabilities
- kantar media wm2, sound4 big voice2 firmware, big voice4 firmware +12 more +14 moreSOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated Remote Code Execution via upload.cgiCVE-2022-507969.3 Critical
- kantar media wm2, sound4 big voice2 firmware, big voice4 firmware +12 more +14 moreSOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Conditional Command Injection via traceroute.phpCVE-2022-507958.5 High
- kantar media wm2, sound4 big voice2 firmware, big voice4 firmware +12 more +14 moreSOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated Command Injection via UsernameCVE-2022-507949.3 Critical
- kantar media wm2, sound4 big voice2 firmware, big voice4 firmware +12 more +14 moreSOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Authenticated Command Injection via www-data-handler.phpCVE-2022-507938.7 High
- kantar media wm2, sound4 big voice2 firmware, big voice4 firmware +12 more +14 moreSOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated File Disclosure VulnerabilityCVE-2022-507928.7 High
- kantar media wm2, sound4 big voice2 firmware, big voice4 firmware +12 more +14 moreSOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Conditional Command Injection via ping.phpCVE-2022-507918.5 High
- sound4 ltd. stream, kantar media wm2, sound4 big voice2 firmware +12 more +14 moreSOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated Radio Stream DisclosureCVE-2022-507906.9 Medium
- kantar media wm2, sound4 big voice2 firmware, big voice4 firmware +12 more +14 moreSOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Conditional Command Injection via dns.phpCVE-2022-507898.5 High
- kantar media wm2, sound4 big voice2 firmware, big voice4 firmware +12 more +14 moreSOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Information Disclosure via Log DirectoryCVE-2022-507886.9 Medium
- kantar media wm2, sound4 big voice2 firmware, big voice4 firmware +12 more +14 moreSOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated Stored Cross-Site ScriptingCVE-2022-507875.3 Medium
- kantar media wm2, sound4 big voice2 firmware, big voice4 firmware +12 more +14 moreSOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Hardcoded Credentials Authentication BypassCVE-2022-506969.3 Critical
- kantar media wm2, sound4 big voice2 firmware, big voice4 firmware +12 more +14 moreSOUND4 IMPACT/FIRST/PULSE/Eco <=2.x ICMP Flood Attack via Network CommandsCVE-2022-506958.7 High
- kantar media wm2, sound4 big voice2 firmware, big voice4 firmware +12 more +14 moreSOUND4 IMPACT/FIRST/PULSE/Eco <=2.x SQL Injection via Username ParameterCVE-2022-506948.8 High
- kantar media wm2, sound4 big voice2 firmware, big voice4 firmware +12 more +14 moreSOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Insufficient Session Expiration VulnerabilityCVE-2022-506926.9 Medium
- kantar media wm2, sound4 big voice2 firmware, big voice4 firmware +12 more +14 moreSOUND4 IMPACT/FIRST/PULSE/Eco v2.x Unauthenticated Factory Reset VulnerabilityCVE-2023-539648.8 High
- kantar media wm2, sound4 big voice2 firmware, big voice4 firmware +12 more +14 moreSOUND4 IMPACT/FIRST/PULSE/Eco v2.x Unauthenticated Remote Command InjectionCVE-2023-539639.3 Critical
- kantar media wm2, sound4 big voice2 firmware, big voice4 firmware +12 more +14 moreSOUND4 IMPACT/FIRST/PULSE/Eco v2.x Unauthenticated Directory Traversal File WriteCVE-2023-539628.8 High
- kantar media wm2, sound4 big voice2 firmware, big voice4 firmware +12 more +14 moreSOUND4 IMPACT/FIRST/PULSE/Eco v2.x Cross-Site Request ForgeryCVE-2023-539615.1 Medium
- kantar media wm2, sound4 big voice2 firmware, big voice4 firmware +12 more +14 moreSOUND4 IMPACT/FIRST/PULSE/Eco v2.x SQL Injection via Authentication BypassCVE-2023-539609.3 Critical
- kantar media wm2, sound4 big voice2 firmware, big voice4 firmware +12 more +14 moreSOUND4 IMPACT/FIRST/PULSE/Eco v2.x Authorization Bypass via Insecure Object ReferencesCVE-2023-539559.3 Critical
- sound4 ltd. streamStream <= 4.0.2 - Authenticated (Admin+) Server-Side Request ForgeryCVE-2024-138795.5 Medium
- sound4 ltd. streamStream <= 4.0.1 - Cross-Site Request Forgery to Arbitrary Options UpdateCVE-2024-74238.8 High
- sound4 ltd. streamWordPress Stream Plugin <= 3.9.2 is vulnerable to Insecure Direct Object References (IDOR)CVE-2022-434504.3 Medium
- sound4 ltd. streamWordPress Stream Plugin <= 3.9.2 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2022-434905.4 Medium
- sound4 ltd. streamStream < 3.9.2 - Subscriber+ Alert CreationCVE-2022-43846.5 Medium
- sound4 ltd. streamStream < 3.8.2 - Admin+ SQL InjectionCVE-2021-247728.8 High