Lucene search
K

21 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 11:13 p.m.11 views

CVE-2022-34138

Insecure direct object references IDOR in the web server of Biltema IP and Baby Camera Software v124 allows attackers to access sensitive information...

7.5CVSS6.8AI score0.00583EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/07 9:46 a.m.13 views

CVE-2024-49833

Memory corruption can occur in the camera when an invalid CID is used...

7.8CVSS7AI score0.00097EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2024/11/26 12:0 a.m.5 views

The vulnerability of the Microprogrammed Software for the Avigilon VideoIQ iCVR HD camera, related to incorrect restrictions on the path name to the restricted access directory, allows a violator to disclose protected information.

The vulnerability of the Microprogrammed Software of the Avigilon VideoIQ iCVR HD camera is related to an incorrect restriction on the path name to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to disclose protected information...

7.8CVSS5.5AI score0.00511EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2024/11/06 12:0 a.m.3 views

The vulnerability of the HTTP protocol implementation in DynDNS and NO-IP microprogramming-based IP camera software from Hikvision allows attackers to carry out “man-in-the-middle” attacks.

The vulnerability of the HTTP protocol implementation in DynDNS and NO-IP microprogramming-based IP camera software from Hikvision involves the transmission of confidential information in an unencrypted form. Exploiting this vulnerability could allow a malicious actor to carry out a...

10CVSS5.5AI score
Exploits0References3
CNNVD
CNNVD
added 2023/10/20 12:0 a.m.5 views

QNAP Systems QUSBCam2 Operating System Command Injection Vulnerability

QNAP Systems QUSBCam2 is an application from QNAP Systems, Inc. allows the use of a USB webcam as a remotely manageable IP ONVIF camera for cheaper and easier deployment of surveillance systems in the home or small office. The QNAP Systems QUSBCam2 version 2.0.x vulnerability stems from the...

8.8CVSS7.5AI score0.01141EPSS
Exploits0References2
NVD
NVD
added 2023/02/03 3:15 p.m.19 views

CVE-2022-34138

Insecure direct object references IDOR in the web server of Biltema IP and Baby Camera Software v124 allows attackers to access sensitive information...

7.5CVSS7.5AI score0.00583EPSS
Exploits0References2
OSV
OSV
added 2023/02/03 3:15 p.m.3 views

CVE-2022-34138

Insecure direct object references IDOR in the web server of Biltema IP and Baby Camera Software v124 allows attackers to access sensitive information...

7.5CVSS5.8AI score0.00583EPSS
Exploits0References2
Prion
Prion
added 2023/02/03 3:15 p.m.16 views

Information disclosure

Insecure direct object references IDOR in the web server of Biltema IP and Baby Camera Software v124 allows attackers to access sensitive information...

5CVSS7.5AI score0.00583EPSS
Exploits0References2Affected Software2
Cvelist
Cvelist
added 2023/02/03 12:0 a.m.28 views

CVE-2022-34138

Insecure direct object references IDOR in the web server of Biltema IP and Baby Camera Software v124 allows attackers to access sensitive information...

7.7AI score0.00583EPSS
Exploits0References2
CVE
CVE
added 2023/02/03 12:0 a.m.42 views

CVE-2022-34138

CVE-2022-34138 describes an insecure direct object reference (IDOR) in the web server of Biltema IP and Baby Camera Software version v124. The vulnerability allows an attacker to access sensitive information via the product’s web server. The CVSS v3.1 vector is AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N...

7.5CVSS7.4AI score0.00583EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/29 12:0 a.m.4 views

The vulnerability of Owl Labs Meeting Owl Pro’s microprogramming software, related to the use of pre-installed credentials, allows a hacker to activate the “tethering Mode” and increase their privileges.

The vulnerability of Owl Labs Meeting Owl Pro’s camera software-related microprogramming system lies in the use of pre-installed credentials. Exploiting this vulnerability allows a remote attacker to activate the “tethering Mode” mode and increase their privileges...

7.4CVSS7.6AI score0.03408EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/29 12:0 a.m.4 views

The vulnerability of the Bluetooth Low Energy (BLE) implementation of the camera software for video conferencing, Meeting Owl Pro, allows a intruder to select passwords.

The vulnerability of the Bluetooth Low Energy BLE implementation of the Meeting Owl Pro camera’s microsoftware solution is related to a deficiency in processing the value "c": 10 when using the cryptographic algorithm SHA-1. Exploiting this vulnerability could allow an attacker to select password...

7.4CVSS7.3AI score0.00791EPSS
Exploits1References6Affected Software1
CNVD
CNVD
added 2021/06/09 12:0 a.m.30 views

Unauthorized Access Vulnerability in Yawcam

YawcamWin7 Camera Software official version is a camera capture, YawcamWin7 Camera Software easily help users to outdoor accurate live playback, and YawcamWin7 Camera Software official version can also be played on the screen for fast interception, and save it in a local file and other functions...

6.7AI score
Exploits0
CNNVD
CNNVD
added 2021/01/27 12:0 a.m.7 views

Accfly Wireless Security IR Camera System 720P Software 缓冲区错误漏洞

Accfly Wireless Security IR Camera System 720P Software is an application from Accfly USA for controlling this camera. A buffer overflow vulnerability exists in Accfly Wireless Security IR Camera System 720P software versions v3.10.73 through v4.15.77, which stems from an unauthenticated...

9.8CVSS7.6AI score0.01672EPSS
Exploits2References2
OSV
OSV
added 2021/01/26 6:15 p.m.2 views

CVE-2020-27539

Heap overflow with full parsing of HTTP respose in Rostelecom CS-C2SHW 5.0.082.1. AgentUpdater service has a self-written HTTP parser and builder. HTTP parser has a heap buffer overflow OOB write. In default configuration camera parses responses only from HTTPS URLs from config file, so vulnerabl...

9.8CVSS7.6AI score0.01261EPSS
Exploits1References1
Packet Storm
Packet Storm
added 2018/08/29 12:0 a.m.398 views

Argus Surveillance DVR 4.0.0.0 SYSTEM Privilege Escalation

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/ARGUS-SURVEILLANCE-DVR-v4-SYSTEM-PRIVILEGE-ESCALATION.txt + ISR: ApparitionSec Greetz: Greetz: indoushka | Eduardo | GGA Vendor www.argussurveillance.com Product Argus...

0.8AI score
Exploits0
0day.today
0day.today
added 2018/08/29 12:0 a.m.68 views

Argus Surveillance DVR 4.0.0.0 Privilege Escalation Vulnerability

Exploit for cgi platform in category web applications + Credits: John Page aka hyp3rlinx + Source: http://hyp3rlinx.altervista.org/advisories/ARGUS-SURVEILLANCE-DVR-v4-SYSTEM-PRIVILEGE-ESCALATION.txt + ISR: ApparitionSec Greetz: Greetz: indoushka | Eduardo | GGA Vendor www.argussurveillance.com...

0.6AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2018/05/11 12:0 a.m.4 views

The vulnerability of the microprogrammed software of the Infinia Hawkeye 4 gamma camera, related to the use of pre-set credentials, allows a intruder to gain access to the device.

The vulnerability of the microprogrammed software of the Infinia Hawkeye 4 gamma camera is related to the use of pre-set credentials. Exploiting this vulnerability can allow a remote attacker to gain access to the device...

10CVSS5.5AI score0.04894EPSS
Exploits0References3
Packet Storm
Packet Storm
added 2017/03/16 12:0 a.m.62 views

AXIS Cross Site Request Forgery / Cross Site Scripting

Introduction ============ Vulnerabilities were identified in the camera software by Axis. These were discovered during a black box assessment and therefore the vulnerability list should not be considered exhaustive; observations suggest that it is likely that further vulnerabilities exist. Affect...

0.4AI score
Exploits0
Positive Technologies
Positive Technologies
added 2012/10/06 12:0 a.m.4 views

PT-2012-5905 · D Link · Dcsclictrl.Dll +2

Name of the Vulnerable Software and Affected Versions: D-Link DCS-5605 PTZ IP Network Camera affected versions not specified Description: The issue is related to a stack-based buffer overflow in the SelectDirectory method in DcsCliCtrl.dll, which is part of the Camera Stream Client ActiveX Contro...

9.3CVSS7.2AI score0.12118EPSS
Exploits1References8
Rows per page
Query Builder