Lucene search
+L

242 matches found

Positive Technologies
Positive Technologies
added 2025/07/01 12:0 a.m.5 views

PT-2025-27544 · Avtech · Avtech Dvr +2

Name of the Vulnerable Software and Affected Versions: AVTECH IP camera, DVR, and NVR devices affected versions not specified Description: An authentication bypass issue exists in the streamd web server of AVTECH devices. The strstr function allows unauthenticated access to any request containing...

6.9CVSS6.6AI score0.00538EPSS
Exploits0References7
CNNVD
CNNVD
added 2025/07/01 12:0 a.m.4 views

AVTECH IP camera、AVTECH DVR和AVTECH NVR 安全漏洞

AVTECH IP camera and others are products of AVTECH Corporation, USA.AVTECH IP camera is a series of network security cameras.AVTECH DVR is a digital video recording host.AVTECH NVR is a network video recorder. A security vulnerability exists in AVTECH IP camera, AVTECH DVR and AVTECH NVR that...

6.9CVSS6.7AI score0.0055EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2025/07/01 12:0 a.m.6 views

PT-2025-27538

Name of the Vulnerable Software and Affected Versions: AVTECH DVR devices affected versions not specified Description: An unauthenticated command injection issue exists in AVTECH DVR devices. This is due to the lack of input sanitization when using wget in the "Search.cgi?action=cgi query"...

10CVSS7.2AI score0.02709EPSS
Exploits0References14
CNNVD
CNNVD
added 2025/07/01 12:0 a.m.6 views

编号撤回

AVTECH IP camera and others are products of AVTECH Corporation.AVTECH IP camera is a series of network security cameras.AVTECH DVR is a digital video recording host.AVTECH NVR is a network video recorder. This CVE number has been withdrawn...

6.8AI score
Exploits0References8
CNNVD
CNNVD
added 2025/07/01 12:0 a.m.8 views

AVTECH IP camera、AVTECH DVR和AVTECH NVR 安全漏洞

AVTECH IP camera and others are products of AVTECH Corporation, USA.AVTECH IP camera is a series of network security cameras.AVTECH DVR is a digital video recording host.AVTECH NVR is a network video recorder. A security vulnerability exists in AVTECH IP camera, AVTECH DVR, and AVTECH NVR that...

5.1CVSS6.6AI score0.00246EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2025/07/01 12:0 a.m.5 views

PT-2025-27536 · Avtech · Avtech Ip Cameras +2

Name of the Vulnerable Software and Affected Versions: AVTECH IP cameras, DVRs, and NVRs affected versions not specified Description: An unauthenticated information disclosure issue exists, allowing access to sensitive internal device information such as firmware version, MAC address, and codec...

6.9CVSS6.2AI score
Exploits0References7
Positive Technologies
Positive Technologies
added 2025/07/01 12:0 a.m.12 views

PT-2025-27534 · Avtech · Avtech Dvr +2

Name of the Vulnerable Software and Affected Versions: AVTECH IP camera, DVR, and NVR devices affected versions not specified Description: A cross-site request forgery CSRF issue exists in the web interface of the devices. An attacker can craft malicious requests that, when executed in the contex...

5.1CVSS6.2AI score0.00246EPSS
Exploits0References8
CNNVD
CNNVD
added 2025/07/01 12:0 a.m.7 views

AVTECH IP camera、AVTECH DVR和AVTECH NVR 安全漏洞

AVTECH IP camera and others are products of AVTECH Corporation, U.S.A. AVTECH IP camera is a series of network security cameras.AVTECH DVR is a digital video recording host.AVTECH NVR is a network video recorder. A security vulnerability exists in AVTECH IP camera, AVTECH DVR, and AVTECH NVR that...

8.3CVSS6.7AI score0.00269EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2025/07/01 12:0 a.m.9 views

PT-2025-27535 · Avtech · Avtech Dvr

Name of the Vulnerable Software and Affected Versions: AVTECH DVR devices affected versions not specified Description: A server-side request forgery issue exists in AVTECH DVR devices, exposing the "/cgi-bin/nobody/Search.cgi?action=cgi query" endpoint without authentication. An attacker can...

6.9CVSS6.4AI score0.0051EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2025/07/01 12:0 a.m.5 views

PT-2025-27537 · Avtech · Avtech Dvr +2

Name of the Vulnerable Software and Affected Versions: AVTECH IP camera, DVR, and NVR devices affected versions not specified Description: An authentication bypass issue exists in the streamd web server of AVTECH devices. The strstr function is used to identify ".cab" requests, allowing any URL...

6.9CVSS6.5AI score0.0055EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2025/07/01 12:0 a.m.13 views

PT-2025-27539 · Avtech · Avtech Dvr +2

Name of the Vulnerable Software and Affected Versions: AVTECH DVR, NVR, and IP camera devices affected versions not specified Description: An OS command injection issue exists within the "adcommand.cgi" endpoint, which interfaces with the ActionD daemon. Authenticated users can invoke the...

9.4CVSS7.3AI score0.01531EPSS
Exploits0References9
CNNVD
CNNVD
added 2025/07/01 12:0 a.m.10 views

AVTECH IP camera、AVTECH DVR和AVTECH NVR 安全漏洞

AVTECH IP camera and others are products of AVTECH Corporation, USA.AVTECH IP camera is a series of network security cameras.AVTECH DVR is a digital video recording host.AVTECH NVR is a network video recorder. A security vulnerability exists in AVTECH IP camera, AVTECH DVR, and AVTECH NVR, which...

9.4CVSS6.9AI score0.01531EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2025/07/01 12:0 a.m.10 views

PT-2025-27545 · Avtech +1 · Avtech Ip Cameras +3

Name of the Vulnerable Software and Affected Versions: AVTECH IP cameras, DVRs, and NVRs affected versions not specified Description: An improper certificate validation issue exists due to the use of wget with --no-check-certificate in scripts like SyncCloudAccount.sh and SyncPermit.sh. This...

8.3CVSS6AI score0.00269EPSS
Exploits0References8
CNNVD
CNNVD
added 2025/07/01 12:0 a.m.6 views

AVTECH DVR 安全漏洞

AVTECH DVR is a digital video recording host from AVTECH Corporation. A security vulnerability exists in AVTECH DVR that originates from a server-side request forgery in the unauthenticated /cgi-bin/nobody/Search.cgi endpoint, which could lead to the disclosure of sensitive data...

6.9CVSS6.4AI score0.0051EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2025/05/30 12:0 a.m.8 views

PT-2025-48815

Name of the Vulnerable Software and Affected Versions AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 Description The software contains an authenticated command injection flaw within the test mail function. An attacker can execute arbitrary commands by providing a specially crafte...

9CVSS7.6AI score0.02173EPSS
Exploits2References10
Positive Technologies
Positive Technologies
added 2025/05/30 12:0 a.m.15 views

PT-2025-48820

Name of the Vulnerable Software and Affected Versions AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 Description The AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 device contains an authenticated command injection issue within the SMB server function. This allow...

9CVSS7.8AI score0.15682EPSS
Exploits2References11
RedhatCVE
RedhatCVE
added 2025/05/22 11:14 a.m.6 views

CVE-2013-4982

AVTECH AVN801 DVR has a security bypass via the administration login captcha...

9.8CVSS6.9AI score0.13117EPSS
Exploits6References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:6 a.m.9 views

CVE-2019-13379

On AVTECH Room Alert 3E devices before 2.2.5, an attacker with access to the device's web interface may escalate privileges from an unauthenticated user to administrator by performing a cmd.cgi?action=ResetDefaults=RA reset and using the default credentials to get in...

9CVSS7.4AI score0.02995EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/21 9:22 p.m.10 views

CVE-2008-3939

Directory traversal vulnerability in the web interface in AVTECH PageR Enterprise before 5.0.7 allows remote attackers to read arbitrary files via directory traversal sequences in the URI...

7.5CVSS7.1AI score0.01695EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/14 3:51 a.m.13 views

CVE-2024-33470

An issue in the SMTP Email Settings of AVTECH Room Alert 4E v4.4.0 allows attackers to gain access to credentials in plaintext via a passback attack. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

4.9CVSS7AI score0.0024EPSS
Exploits0References1
Rows per page
Query Builder