Lucene search
K

139 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2021-26866

Malware in sbrugna...

8.8CVSS8.6AI score0.0031EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2009-1495

Malware in sbrugna...

6.8CVSS6.4AI score0.02588EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-25597

Malicious code in bioql PyPI...

7.5CVSS6.6AI score0.00132EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2025/08/24 12:13 a.m.2 views

CVE-2025-55627

Insufficient privilege verification in Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.46622503122283 allows authenticated attackers to create accounts with elevated privileges...

5.3CVSS7.2AI score0.00058EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/08/24 12:13 a.m.2 views

CVE-2025-55626

An Insecure Direct Object Reference IDOR vulnerability in Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.46622503122283 allows unauthorized attackers to access the Admin-only settings and edit the session storage...

5.3CVSS7.2AI score0.00058EPSS
Exploits0References1
NVD
NVD
added 2025/08/22 5:15 p.m.2 views

CVE-2025-55627

Insufficient privilege verification in Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.46622503122283 allows authenticated attackers to create accounts with elevated privileges...

5.3CVSS0.00058EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/08/22 12:0 a.m.6 views

CVE-2025-55637

Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.46622503122283 was discovered to contain a command injection vulnerability via the setddnspipsystem function...

0.01729EPSS
Exploits1References2
CVE
CVE
added 2025/08/22 12:0 a.m.10 views

CVE-2025-55631

Affected product: Reolink Smart 2K+ Plug-in Wi‑Fi Video Doorbell with Chime (firmware 3.0.0.4662_2503122283). Root cause: sessions are managed system-wide rather than per-account, enabling a potential Denial of Service via resource exhaustion. Impact: DoS possibility; CVSS in documents indicates ...

4CVSS6.6AI score0.00032EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/08/22 12:0 a.m.4 views

PT-2025-34463 · Reolink · Reolink Smart 2K+ Plug-In Wi-Fi Video Doorbell With Chime

Name of the Vulnerable Software and Affected Versions: Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime version 3.0.0.4662 2503122283 Description: The Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime contains a command injection vulnerability. The issue is located in the setddns...

6.5CVSS7.8AI score0.01729EPSS
Exploits1References6
CNNVD
CNNVD
added 2025/08/22 12:0 a.m.1 views

Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime 安全漏洞

Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime is a smart wired WiFi video doorbell from Reolink USA. A security vulnerability exists in Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime version 3.0.0.46622503122283, which stems from improper session management and could lead t...

4CVSS6.5AI score0.00032EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/08/22 12:0 a.m.1 views

Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime 安全漏洞

Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime is a smart wired WiFi video doorbell from Reolink USA. A security vulnerability exists in Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime version 3.0.0.46622503122283, which stems from improperly set permissions that could result...

6.5CVSS6.8AI score0.00077EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/08/13 12:0 a.m.2 views

INSTAR 2K+和INSTAR 4K 安全漏洞

INSTAR 2K+ and INSTAR 4K are both webcams from the German company INSTAR. A security vulnerability exists in INSTAR 2K+ and INSTAR 4K version 3.11.1 Build 1124, which originates from a buffer overflow due to manipulation of the Authorization parameter by the base64decode function of the fcgiserve...

10CVSS9.6AI score0.00279EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/08/13 12:0 a.m.2 views

PT-2025-32969 · Dinstar · Instar 2K+ +1

Name of the Vulnerable Software and Affected Versions: INSTAR 2K+ and 4K version 3.11.1 Build 1124 Description: A vulnerability exists in the Backend IPC Server component that can lead to a denial of service. The attack can be initiated remotely. The exploit has been publicly disclosed...

8.7CVSS7.3AI score0.00091EPSS
Exploits0References9
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/03/03 1:24 p.m.2 views

Malicious code in editions-dev-2k-variants (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
Exploits0
Cvelist
Cvelist
added 2025/01/24 2:37 p.m.10 views

CVE-2024-9494 Uncontrolled search path can lead to DLL hijacking in CP210 VCP Win 2k installer

DLL hijacking vulnerabilities, caused by an uncontrolled search path in the CP210 VCP Win 2k installer can lead to privilege escalation and arbitrary code execution when running the impacted installer...

8.6CVSS0.00075EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/01/24 2:37 p.m.2 views

CVE-2024-9494 Uncontrolled search path can lead to DLL hijacking in CP210 VCP Win 2k installer

DLL hijacking vulnerabilities, caused by an uncontrolled search path in the CP210 VCP Win 2k installer can lead to privilege escalation and arbitrary code execution when running the impacted installer...

8.6CVSS9AI score0.00075EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/01/24 12:0 a.m.1 views

Silicon CP210 VCP Win 2k installer 代码问题漏洞

Silicon CP210 VCP Win 2k installer is a CP210 VCP Win 2k installer from Silicon. A security vulnerability exists in the Silicon CP210 VCP Win 2k installer that stems from an uncontrolled search path. An attacker could exploit the vulnerability to escalate privileges and execute arbitrary code...

8.6CVSS7.3AI score0.00075EPSS
Exploits0References2
Rapid7 Blog
Rapid7 Blog
added 2024/12/03 8:0 p.m.34 views

Lorex 2K Indoor Wi-Fi Security Camera: Multiple Vulnerabilities (FIXED)

The Lorex 2K Indoor Wi-Fi Security Camera is a consumer security device that provides cloud-based video camera surveillance capabilities. This device was a target at the 2024 Pwn2Own IoT competition. Rapid7 developed an unauthenticated remote code execution RCE exploit chain as an entry for the...

9.8CVSS8.4AI score0.00948EPSS
Exploits1
Cvelist
Cvelist
added 2024/12/03 5:29 p.m.28 views

CVE-2024-52548 Lorex 2K Indoor Wi-Fi Security Camera - Code signing bypass

An attacker who can execute arbitrary Operating Systems commands, can bypass code signing enforcements in the kernel, and execute arbitrary native code. This vulnerability has been resolved in firmware version 2.800.0000000.8.R.20241111...

6.7CVSS0.00012EPSS
Exploits1References2
CVE
CVE
added 2024/12/03 5:29 p.m.70 views

CVE-2024-52548

Lorex 2K Indoor Wi‑Fi Security Camera is affected by CVE-2024-52548 where an attacker can bypass kernel code signing enforcements and execute arbitrary native code. The issue is part of a five‑vulnerability exploit chain (CVE-2024-52544 to CVE-2024-52548) that enables unauthenticated RCE via a tw...

6.7CVSS6.9AI score0.00012EPSS
Exploits1References2
Rows per page
Query Builder