NUUO NVRmini2访问控制错误漏洞

NUUO NVRMini2 is a small network DVR device from NUUO, Taiwan, China. The NUUO NVRmini2 suffers from an authorization issue vulnerability that can be exploited by attackers to upload encrypted TAR archives...

NUUO Network Video Recorder NVRsolo Cross-Site Scripting Vulnerability

NUUO Network Video Recorder NVR is a network video recorder from NUUO, Taiwan, China. A cross-site scripting vulnerability exists in NUUO Network Video Recorder NVRsolo version 3.9.1, which stems from the lack of effective filtering and escaping of user-submitted request parameters, and can be...

CVE-2021-45812

NUUO Network Video Recorder NVRsolo 3.9.1 is affected by a Cross Site Scripting XSS vulnerability. An attacker can steal the user's session by injecting malicious JavaScript codes which leads to session hijacking...

CVE-2021-45812: Improper Neutralization of Input During Web Page Generation

NUUO Network Video Recorder NVRsolo 3.9.1 is affected by a Cross Site Scripting XSS vulnerability. An attacker can steal the user's session by injecting malicious JavaScript codes which leads to session hijacking...

PT-2021-24299

Name of the Vulnerable Software and Affected Versions: NUUO Network Video Recorder NVRsolo version 3.9.1 Description: The issue allows an attacker to steal a user's session by injecting malicious JavaScript codes, leading to session hijacking. This is achieved through a Cross Site Scripting XSS...

Multiple vulnerabilities in QNAP VioStar NVR

Overview VioStar series NVR provided by QNAP Systems contains multiple vulnerabilities listed below. Command injection CWE-77 - CVE-2021-38685 Improper authentication CWE-287 - CVE-2021-38686 Impact An arbitrary command may be executed by a remote attacker. - CVE-2021-38685 A remote attacker can...

CVE-2021-20844

Improper neutralization of HTTP request headers for scripting syntax vulnerability in the Web GUI of RTX830 Rev.15.02.17 and earlier, NVR510 Rev.15.01.18 and earlier, NVR700W Rev.15.00.19 and earlier, and RTX1210 Rev.14.01.38 and earlier allows a remote authenticated attacker to obtain sensitive...

VulnCheck KEV: CVE-2020-5735

Amcrest cameras and NVR contain a stack-based buffer overflow vulnerability through port 37777 that allows an unauthenticated, remote attacker to crash the device and possibly execute code...

Sensormatic Electronics VideoEdge

1. EXECUTIVE SUMMARY CVSS v3 6.1 ATTENTION: Exploitable remotely/low attack complexity Vendor: Sensormatic Electronics, LLC, a subsidiary of Johnson Controls, Inc. Equipment: VideoEdge Vulnerability: Cross-site Scripting 2. RISK EVALUATION Successful exploitation of this vulnerability could allow...

CVE-2021-34346

A stack buffer overflow vulnerability has been reported to affect QNAP device running NVR Storage Expansion. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of NVR Storage Expansion: NVR Storage...

CVE-2021-34345

A stack buffer overflow vulnerability has been reported to affect QNAP device running NVR Storage Expansion. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of NVR Storage Expansion: NVR Storage...

Ubiquiti Networks UniFi Protect授权问题漏洞

Ubiquiti Networks UniFi Protect is a network video recorder from Ubiquiti Networks, Inc. A security vulnerability exists in Ubiquiti Networks UniFi Protect application version 1.18.1 and prior, which can be exploited by attackers to A malicious actor who gains access to the network can take contr...

Ubiquiti Networks UniFi Protect Access Control Error Vulnerability

An access control error vulnerability exists in Ubiquiti Networks UniFi Protect, a network video recorder from Ubiquiti Networks, Inc. The vulnerability is caused by the product not adding effective privilege control for accessers with view-only access, network access. An attacker could use this...

Weak Password Vulnerability in Network Video Server of Shenzhen Longchamp Xintron Technology Co. Ltd (CNVD-2021-54075)

Ltd. is a leading provider of intelligent inspection robots and intelligent infrared thermal imaging products and solutions in China. Ltd. Network Video Server has a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in Axis AXIS-PrintServer

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in Axis AXIS-PrintServer, which can be exploited by attackers to obtain sensitive information...

Binary Vulnerability in Movie Star Comet Music

Movie Star Comet Music is a pure green universal audio and video player with a simple and easy-to-use interface that supports most of the network video formats. AV Star Comet Music has a binary vulnerability that can be exploited by attackers to cause a denial of service...

SQL Injection Vulnerability in Network Video Surveillance System of Tianmai Technology

Zhengzhou Tianmai Technology Co., Ltd. was founded in 2004, is located in Zhengzhou City, National High-tech Industrial Development Zone, is specializing in public transportation intelligent system solutions provider, is the "city intelligent bus solutions" and "3G/4G video, Beidou/GPS monitoring...

Weak Password Vulnerability in Network Video Server of Shenzhen Longchamp Xintron Technology Co.

Shenzhen Longchamp Xintron Technology Co., Ltd. is a leading intelligent service robot solution provider in China. Ltd. Network Video Server has a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in AXIS Q7424-R Video Encoder

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in the AXIS Q7424-R Video Encoder, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in AXIS P5522-E Network Camera

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in the AXIS P5522-E Network Camera, which can be exploited by attackers to obtain sensitive information...