Lucene search
+L

594 matches found

NVD
NVD
added 2023/12/17 7:15 a.m.25 views

CVE-2023-6893

A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.320201113RELEASEHIK and classified as problematic. Affected by this issue is some unknown functionality of the file /php/exportrecord.php. The manipulation of the argument downname with the input...

7.5CVSS0.70224EPSS
SaveExploits1References3
OSV
OSV
added 2023/12/17 7:15 a.m.5 views

CVE-2023-6893

A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.320201113RELEASEHIK and classified as problematic. Affected by this issue is some unknown functionality of the file /php/exportrecord.php. The manipulation of the argument downname with the input...

7.5CVSS4.7AI score
SaveExploits0References3
Prion
Prion
added 2023/12/17 7:15 a.m.23 views

Path traversal

A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.320201113RELEASEHIK and classified as problematic. Affected by this issue is some unknown functionality of the file /php/exportrecord.php. The manipulation of the argument downname with the input...

3.3CVSS7.1AI score0.70224EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2023/12/17 6:31 a.m.49 views

CVE-2023-6893

Hikvision Intercom Broadcasting System 3.0.3 has a path traversal flaw in /php/exportrecord.php via the downname parameter (input like C:\ICPAS\Wnmp\WWW\php\conversion.php). The vulnerability is publicly disclosed; impact is path traversal. Upgrading to version 4.1.0 mitigates the issue. Some con...

7.5CVSS5.9AI score0.70224EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2023/12/17 6:31 a.m.35 views

CVE-2023-6893 Hikvision Intercom Broadcasting System exportrecord.php path traversal

A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.320201113RELEASEHIK and classified as problematic. Affected by this issue is some unknown functionality of the file /php/exportrecord.php. The manipulation of the argument downname with the input...

4.3CVSS7.7AI score0.70224EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/12/17 12:0 a.m.12 views

Hikvision Intercom Broadcasting System Information Disclosure Vulnerability

Hikvision Intercom Broadcasting System is an intercom broadcasting system from Hikvision China. An information disclosure vulnerability exists in Hikvision Intercom Broadcasting System version 3.0.320201113RELEASE HIK, which originates from the file access/html/system.html that can lead to...

6.5CVSS6.2AI score0.00984EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/12/17 12:0 a.m.7 views

Hikvision Intercom Broadcasting System Path Traversal Vulnerability

Hikvision Intercom Broadcasting System is an intercom broadcasting system from Hikvision China. A path traversal vulnerability exists in Hikvision Intercom Broadcasting System version 3.0.320201113RELEASE HIK, which stems from a path traversal caused by the downname parameter in file...

7.5CVSS6.9AI score0.70224EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2023/12/17 12:0 a.m.58 views

PT-2023-32805

Name of the Vulnerable Software and Affected Versions Hikvision Intercom Broadcasting System versions 3.0.3 20201113 RELEASEHIK Description A critical issue exists in Hikvision Intercom Broadcasting System. The issue affects unknown code within the /php/ping.php file. Manipulating the jsondataip...

9.8CVSS7AI score0.89138EPSS
SaveExploits2References18
CNNVD
CNNVD
added 2023/12/17 12:0 a.m.6 views

Hikvision Intercom Broadcasting System Operating System Command Injection Vulnerability

Hikvision Intercom Broadcasting System is an intercom broadcasting system from Hikvision China. An operating system command injection vulnerability exists in Hikvision Intercom Broadcasting System version 3.0.320201113RELEASE HIK, which stems from the parameter jsondataip in the file /php/ping.ph...

9.8CVSS7.6AI score0.89138EPSS
SaveExploits2References4
BDU FSTEC
BDU FSTEC
added 2023/11/29 12:0 a.m.9 views

The vulnerability of the password-reset function in Hikvision’s NVR/DVR video recorders allows intruders to trigger a service failure.

The vulnerability of the password restoration function in Hikvision’s NVR/DVR video recorders is related to errors in the password restoration mechanism. Exploiting this vulnerability could allow an intruder to cause a service failure...

7.4CVSS6.5AI score0.00394EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/11/28 12:0 a.m.10 views

PT-2023-30706 · Ezviz +1 · Ezviz Cs-C6Cn +3

Name of the Vulnerable Software and Affected Versions: Ezviz CS-C6N-xxx versions prior to v5.3.x build 20230401 Ezviz CS-CV310-xxx versions prior to v5.3.x build 20230401 Ezviz CS-C6CN-xxx versions prior to v5.3.x build 20230401 Ezviz CS-C3N-xxx versions prior to v5.3.x build 20230401 Hikvision...

5.3CVSS5.4AI score0.00832EPSS
SaveExploits0References11
OSV
OSV
added 2023/11/23 7:15 a.m.8 views

CVE-2023-28811

There is a buffer overflow in the password recovery feature of Hikvision NVR/DVR models. If exploited, an attacker on the same local area network LAN could cause the device to malfunction by sending specially crafted packets to an unpatched device...

6.5CVSS6.1AI score0.00394EPSS
SaveExploits0References1
NVD
NVD
added 2023/11/23 7:15 a.m.29 views

CVE-2023-28811

There is a buffer overflow in the password recovery feature of Hikvision NVR/DVR models. If exploited, an attacker on the same local area network LAN could cause the device to malfunction by sending specially crafted packets to an unpatched device...

7.4CVSS0.00394EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/23 7:15 a.m.29 views

Buffer overflow

There is a buffer overflow in the password recovery feature of Hikvision NVR/DVR models. If exploited, an attacker on the same local area network LAN could cause the device to malfunction by sending specially crafted packets to an unpatched device...

3.3CVSS7.6AI score0.00394EPSS
SaveExploits0References1Affected Software40
CVE
CVE
added 2023/11/23 6:42 a.m.110 views

CVE-2023-28811

CVE-2023-28811 affects Hikvision NVR/DVR devices; a buffer overflow in the password recovery feature can be triggered by specially crafted LAN packets to an unpatched device, potentially causing malfunction. Documented impact is availability loss; root cause is a buffer overflow in password recov...

7.4CVSS6.7AI score0.00394EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/11/23 6:42 a.m.33 views

CVE-2023-28811

There is a buffer overflow in the password recovery feature of Hikvision NVR/DVR models. If exploited, an attacker on the same local area network LAN could cause the device to malfunction by sending specially crafted packets to an unpatched device...

7.4CVSS7.8AI score0.00394EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/11/23 12:0 a.m.8 views

PT-2023-21986 · Hikvision · Localservicecomponents

Name of the Vulnerable Software and Affected Versions: plug-in affected versions not specified Description: The issue allows an attacker to exploit it by sending crafted messages to computers with the plug-in installed, modifying plug-in parameters. This could cause affected computers to download...

8.1CVSS7.3AI score0.00627EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/11/23 12:0 a.m.9 views

Hikvision NVR/DVR Devices Security Breach

Hikvision NVR/DVR Devices is a series of network cameras from Hikvision, a Chinese company. A security vulnerability exists in Hikvision NVR/DVR Devices, which stems from the presence of a buffer overflow issue that could allow an attacker to cause a device failure by sending specially crafted...

7.4CVSS7.1AI score0.00394EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/11/23 12:0 a.m.7 views

Hikvision Web Browser Plug-in LocalServiceComponents Security Vulnerability

Hikvision Web Browser Plug-in LocalServiceComponents is a web browser plug-in from Hikvision, a Chinese company. A security vulnerability exists in Hikvision Web Browser Plug-in LocalServiceComponents, which stems from a buffer overflow vulnerability that could allow an attacker to send a crafted...

9.8CVSS7.9AI score0.00974EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/11/23 12:0 a.m.6 views

Hikvision Web Browser Plug-in LocalServiceComponents Security Vulnerability

Hikvision Web Browser Plug-in LocalServiceComponents is a web browser plug-in from Hikvision, a Chinese company. A security vulnerability exists in Hikvision Web Browser Plug-in LocalServiceComponents, which stems from a buffer overflow vulnerability that could allow an attacker to send a crafted...

8.1CVSS7AI score0.00627EPSS
SaveExploits0References2
Rows per page
Query Builder