Lucene search
+L

1667 matches found

Positive Technologies
Positive Technologies
•added 2025/12/16 12:00 a.m.•20 views

PT-2025-51361

Name of the Vulnerable Software and Affected Versions Ningyuanda TC155 version 57.0.2.0 Description A flaw exists in the RTSP Live Video Stream Endpoint component of Ningyuanda TC155, specifically related to improper authentication. This issue allows for authentication bypass when the attack is...

6.5CVSS4.5AI score0.00884EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/16 12:00 a.m.•3 views

CVE-2025-14747: Improper Resource Shutdown or Release

A vulnerability was found in Ningyuanda TC155 57.0.2.0. The impacted element is an unknown function of the component RTSP Service. Performing manipulation results in denial of service. The attack must originate from the local network. The exploit has been made public and could be used. The vendor...

6.5CVSS5.2AI score0.00715EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/12/16 12:00 a.m.•13 views

Ningyuanda TC155 授权问题漏洞

The Ningyuanda TC155 is an IP camera from the Chinese company Ningyuanda. An authorization issue vulnerability exists in the Ningyuanda TC155 version 57.0.2.0, which stems from improper authentication of the RTSP real-time video streaming endpoint component, which could lead to unauthorized acces...

6.5CVSS5AI score0.00884EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2025/12/16 12:00 a.m.•17 views

PT-2025-51362

Name of the Vulnerable Software and Affected Versions Ningyuanda TC155 version 57.0.2.0 Description A flaw exists in the RTSP Service component of Ningyuanda TC155 version 57.0.2.0. Manipulation of an unknown function within this service can lead to a denial of service. The attack requires local...

6.5CVSS4.4AI score0.00715EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/16 12:00 a.m.•4 views

CVE-2025-14746: Improper Authentication

A vulnerability has been found in Ningyuanda TC155 57.0.2.0. The affected element is an unknown function of the component RTSP Live Video Stream Endpoint. Such manipulation leads to improper authentication. The attack must be carried out from within the local network. The exploit has been disclos...

6.5CVSS5.2AI score0.00884EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/12/10 9:16 p.m.•15 views

CVE-2021-47707

COMMAX CVD-Axx DVR 5.1.4 contains weak default administrative credentials that allow remote password attacks and disclose RTSP stream. Attackers can exploit this by sending a POST request with the 'passkey' parameter set to '1234', allowing them to access the web control panel...

9.3CVSS7.1AI score0.00369EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/09 9:31 p.m.•20 views

EUVD-2021-34732

COMMAX CVD-Axx DVR 5.1.4 contains weak default administrative credentials that allow remote password attacks and disclose RTSP stream. Attackers can exploit this by sending a POST request with the 'passkey' parameter set to '1234', allowing them to access the web control panel...

9.3CVSS6.6AI score0.00369EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2025/12/09 8:40 p.m.•10 views

CVE-2021-47710 COMMAX Smart Home Ruvie CCTV Bridge DVR Service RTSP Credentials Disclosure

COMMAX Smart Home System is a smart IoT home solution that allows an unauthenticated attacker to disclose RTSP credentials in plain-text by exploiting the /overview.asp endpoint. Attackers can access sensitive information, including login credentials and DVR settings, by submitting a GET request ...

8.7CVSS6.5AI score0.0035EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2025/12/09 8:39 p.m.•8 views

CVE-2021-47707 COMMAX CVD-Axx DVR Weak Default Credentials Stream Disclosure

COMMAX CVD-Axx DVR 5.1.4 contains weak default administrative credentials that allow remote password attacks and disclose RTSP stream. Attackers can exploit this by sending a POST request with the 'passkey' parameter set to '1234', allowing them to access the web control panel...

9.3CVSS6.7AI score0.00369EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/09 12:00 a.m.•3 views

CVE-2021-47707: Use of Default Credentials

COMMAX CVD-Axx DVR 5.1.4 contains weak default administrative credentials that allow remote password attacks and disclose RTSP stream. Attackers can exploit this by sending a POST request with the 'passkey' parameter set to '1234', allowing them to access the web control panel...

9.3CVSS5.8AI score0.00369EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/09 12:00 a.m.•1 views

CVE-2021-47727: Missing Authentication for Critical Function

Selea Targa IP OCR-ANPR Camera contains an unauthenticated vulnerability that allows remote attackers to access live video streams without authentication. Attackers can directly connect to RTP/RTSP or M-JPEG streams by requesting specific endpoints like p1.mjpg or p1.264 to view camera footage...

8.7CVSS5.9AI score0.00472EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/09 12:00 a.m.•2 views

CVE-2021-47710: Missing Authentication for Critical Function

COMMAX Smart Home System is a smart IoT home solution that allows an unauthenticated attacker to disclose RTSP credentials in plain-text by exploiting the /overview.asp endpoint. Attackers can access sensitive information, including login credentials and DVR settings, by submitting a GET request ...

8.7CVSS5.8AI score0.0035EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/20 12:00 a.m.•1 views

CVE-2025-62674: Missing Authentication for Critical Function

The affected product allows unauthenticated access to Real Time Streaming Protocol RTSP services, which may allow an attacker unauthorized access to camera configuration information...

7CVSS5.8AI score0.00172EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/11/20 12:00 a.m.•16 views

iCam365 P201和iCam365 QC021 访问控制错误漏洞

The iCam365 P201 and iCam365 QC021 are both a network surveillance camera from the Chinese company iCam365. An access control error vulnerability exists in the iCam365 P201 and iCam365 QC021 that stems from the product allowing unauthenticated access to the RTSP service, which could lead to...

7CVSS6.6AI score0.00172EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2007-6592

Malware in sbrugna...

7.5CVSS6.4AI score0.0376EPSS
SaveExploits1References9
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2017-17362

Malware in sbrugna...

10CVSS9.2AI score0.05625EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2007-6648

Malware in sbrugna...

5CVSS6.1AI score0.02234EPSS
SaveExploits0References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2006-1460

Malware in sbrugna...

7.5CVSS6.1AI score0.06171EPSS
SaveExploits0References9
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2009-0014

Malware in sbrugna...

9.3CVSS8.6AI score0.06803EPSS
SaveExploits0References9
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2018-10791

Malware in sbrugna...

9.8CVSS9.5AI score0.01852EPSS
SaveExploits1References2
Rows per page
Query Builder