1162 matches found
CVE-2013-3613
Dahua DVR appliances do not properly restrict UPnP requests, which makes it easier for remote attackers to obtain access via vectors involving a replay attack against the TELNET port...
CVE-2013-4982
AVTECH AVN801 DVR has a security bypass via the administration login captcha...
CVE-2018-10676
CeNova, Night OWL, Novo, Pulnix, QSee, Securus, and TBK Vision DVR devices allow remote attackers to download a file and obtain sensitive credential information via a direct request for the download.rsp URI...
CVE-2013-3614
Dahua DVR appliances have a small value for the maximum password length, which makes it easier for remote attackers to obtain access via a brute-force attack...
CVE-2013-7487
On Swann DVR04B, DVR08B, DVR-16CIF, and DVR16B devices, raysharpdvr application has a vulnerable call to “system”, which allows remote attackers to execute arbitrary code via TCP port 9000...
CVE-2013-3612
Dahua DVR appliances have a hardcoded password for 1 the root account and 2 an unspecified "backdoor" account, which makes it easier for remote attackers to obtain administrative access via authorization requests involving a ActiveX, b a standalone client, or c unknown other vectors...
CVE-2013-3615
Dahua DVR appliances use a password-hash algorithm with a short hash length, which makes it easier for context-dependent attackers to discover cleartext passwords via a brute-force attack...
CVE-2016-20016
MVPower CCTV DVR models, including TV-7104HE 1.8.4 115215B9 and TV7108HE, contain a web shell that is accessible via a /shell URI. A remote unauthenticated attacker can execute arbitrary operating system commands as root. This vulnerability has also been referred to as the "JAWS webserver RCE"...
CVE-2013-5754
The authorization implementation on Dahua DVR appliances accepts a hash string representing the current date for the role of a master password, which makes it easier for remote attackers to obtain administrative access and change the administrator password via requests involving 1 ActiveX, 2 a...
MAL-2025-3305 Malicious code in @sas-dvr/ltjs-sasicu (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @sas-dvr/ltjs-sasicu (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-3304 Malicious code in @sas-dvr/ltjs-commons (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @sas-dvr/ltjs-commons (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-3303 Malicious code in @sas-dvr/internal-va-react-core (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @sas-dvr/internal-va-react-core (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @sas-dvr/ltjs-vav (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f112f9f091de3ef1cc3a38c7a9cbb0bccc1949f7e38f8bb633cf9d5a06c646d7 The OpenSSF Package Analysis project identified '@sas-dvr/ltjs-vav' @ 132.0.0 npm as malicious. It is considered malicious because: - The packag...
Malicious code in @sas-dvr/ltjs-bird (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bed916c128062e6e46a4741aecf296a1d3898ba06f3f0a818b19c8e90cd69f5b The OpenSSF Package Analysis project identified '@sas-dvr/ltjs-bird' @ 132.0.0 npm as malicious. It is considered malicious because: - The packa...
Malicious code in @sas-dvr/nova-graph (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2ee49dd296a0db13b0118e5424d00aac99ea70cc3664bba504af096916e31998 The OpenSSF Package Analysis project identified '@sas-dvr/nova-graph' @ 132.0.0 npm as malicious. It is considered malicious because: - The...
Malicious code in @sas-dvr/ltjs-gtl (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 590d9654b9fef2a4c23a65543bd772d8aa4c0b3262912a102d66720d6cd50b78 The OpenSSF Package Analysis project identified '@sas-dvr/ltjs-gtl' @ 132.0.0 npm as malicious. It is considered malicious because: - The packag...
Dahua Security Digital Video Recorders Credentials Management Errors (CVE-2013-3615)
Dahua DVR appliances use a password-hash algorithm with a short hash length, which makes it easier for context-dependent attackers to discover cleartext passwords via a brute-force attack. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...