CVE-2018-18244

Cross-site scripting in syslog.html in VIVOTEK Network Camera Series products with firmware 0x06x to 0x08x allows remote attackers to execute arbitrary JavaScript code via an HTTP Referer Header...

CVE-2018-18005

Cross-site scripting in eventscript.js in VIVOTEK Network Camera Series products with firmware 0x06x to 0x08x allows remote attackers to execute arbitrary JavaScript via a URL query string parameter...

CVE-2018-18244

Cross-site scripting in syslog.html in VIVOTEK Network Camera Series products with firmware 0x06x to 0x08x allows remote attackers to execute arbitrary JavaScript code via an HTTP Referer Header...

CVE-2018-18004

Incorrect Access Control in modinetd.cgi in VIVOTEK Network Camera Series products with firmware before XXXXXX-VVTK-0X09a allows remote attackers to enable arbitrary system services via a URL parameter...

CVE-2018-18004

CVE-2018-18004 affects VIVOTEK Network Camera Series via mod_inetd.cgi in firmware before XXXXXX-VVTK-0X09a. Root cause: incorrect access control that permits remote attackers to trigger arbitrary system services through a URL parameter. Impact: potential partial integrity impact by enabling unin...

CVE-2018-18005

Summary: CVE-2018-18005 affects VIVOTEK Network Camera Series devices. The vulnerability is a cross-site scripting (XSS) flaw in the JavaScript file event_script.js, exploitable on firmware versions 0x06x to 0x08x. A remote attacker can cause arbitrary JavaScript execution by supplying a crafted ...

Guardzilla GZ621W Buffer Overflow Vulnerability

The Guardzilla GZ621W is a home security surveillance camera. A buffer overflow vulnerability exists in the 'TKsetdeviceModelreqhandle' function of the cloud communication component in the Guardzilla GZ621W using firmware version 0.5.1.4. A remote attacker could exploit this vulnerability to...

Brickcom Network Camera Default Credentials (HTTP)

The remote Brickcom IP camera is using known default credentials for the HTTP login. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

CVE-2018-18602

The Cloud API on Guardzilla smart cameras allows user enumeration, with resultant arbitrary camera access and monitoring...

Code injection

The Cloud API on Guardzilla smart cameras allows user enumeration, with resultant arbitrary camera access and monitoring...

CVE-2018-18602

The Cloud API on Guardzilla smart cameras allows user enumeration, with resultant arbitrary camera access and monitoring...

CVE-2018-18602

The Cloud API on Guardzilla smart cameras allows user enumeration, with resultant arbitrary camera access and monitoring...

Google Android Buffer Overflow Vulnerability (CNVD-2019-24167)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which the camera subsystem is a subsystem. A buffer overflow vulnerability exists in the Camera subsystem in Android. An attacker could exploit this vulnerability to execute...

CVE-2018-20342

The Floureon IP Camera SP012 provides a root terminal on a UART serial interface without proper access control. This allows attackers with physical access to execute arbitrary commands with root privileges...

Improper access control

The Floureon IP Camera SP012 provides a root terminal on a UART serial interface without proper access control. This allows attackers with physical access to execute arbitrary commands with root privileges...

CVE-2018-20342

The CVE-2018-20342 entry concerns the Floureon IP Camera SP012, where a root terminal is exposed via a UART serial interface without proper access control. The underlying issue is lack of access control on the UART interface, enabling attackers with physical access to execute arbitrary commands w...

CVE-2018-20342

The Floureon IP Camera SP012 provides a root terminal on a UART serial interface without proper access control. This allows attackers with physical access to execute arbitrary commands with root privileges...

D-Link myDlink Baby App Information Disclosure Vulnerability

D-Link myDlink Baby App is an application from AUO D-Link for managing and controlling D-Link baby monitors. The information disclosure vulnerability in the D-Link myDlink Baby App version 2.04.06 arises from the fact that when an operation is performed using the app e.g., modifying the camera...

Arecont Vision NVR Detection

Detection of Arecont Vision SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.114050";...

CVE-2018-18767

An issue was discovered in D-Link 'myDlink Baby App' version 2.04.06. Whenever actions are performed from the app e.g., change camera settings or play lullabies, it communicates directly with the Wi-Fi camera D-Link 825L firmware 1.08 with the credentials username and password in base64 cleartext...