CVE-2019-6958

The CVE-2019-6958 entry concerns Bosch BVMS and related systems (BVMS v9.0 and earlier; DIVAR IP 2000–7000; Configuration Manager; BIS with Video Engine; APE; AEC; BVC; VSDK). The root cause is improper access control via the RCP+ network port allowing access without authentication. This could en...

PT-2019-18377 · Bosch · Video Sdk +9

Name of the Vulnerable Software and Affected Versions: Bosch Video Management System BVMS versions 9.0 and below DIVAR IP versions 2000 through 7000 Video Recording Manager VRM Video Streaming Gateway VSG Configuration Manager Building Integration System BIS with Video Engine Access Professional...

CVE-2019-8952

A Path Traversal vulnerability located in the webserver affects several Bosch hardware and software products. The vulnerability potentially allows a remote authorized user to access arbitrary files on the system via the network interface. Affected hardware products: Bosch DIVAR IP 2000 vulnerable...

CVE-2019-8951

An Open Redirect vulnerability located in the webserver affects several Bosch hardware and software products. The vulnerability potentially allows a remote attacker to redirect users to an arbitrary URL. Affected hardware products: Bosch DIVAR IP 2000 vulnerable versions: 3.10; 3.20; 3.21; 3.50;...

File Upload Vulnerability in Jfinal cms Backend Video Management Service

Jfinal cms, using a simple and powerful JFinal as a web framework, template engine with beetl, database with mysql, front-end bootstrap, flat ui and other frameworks. Jfinal cms background video management system file upload vulnerability , its background article video at the existence of arbitra...

exacqVision 9.8 Unquoted Service Path Privilege Escalation

exacqVision 9.8 Unquoted Service Path Privilege Escalation Vendor: Exacq Technologies, Inc. Product web page: https://www.exacq.com Affected version: 9.8.4.150001 Summary: The exacqVision VMS Video Management System software records surveillance video from thousands of IP camera models and displa...

Bosch Video Management System 8.0 Denial Of Service

Exploit Title: Bosch Video Management System 8.0-Configuration Client-Denial of Service Poc Discovery by: Daniel Discovery Date: 2018-11-12 Software Name: Bosch Video Management System Software Version: 8.0 Vendor Homepage: https://www.boschsecurity.com/xc/en/products/management-software/bvms/...

Bosch Video Management System 8.0 - Configuration Client Denial of Service (PoC)

Bosch Video Management System 8.0 - Configuration Client Denial of Service PoC Exploit Title: Bosch Video Management System 8.0-Configuration Client-Denial of Service Poc Discovery by: Daniel Discovery Date: 2018-11-12 Software Name: Bosch Video Management System Software Version: 8.0 Vendor...

Bosch Video Management System 8.0 - Configuration Client Denial of Service Exploit

Exploit for windows platform in category dos / poc Exploit Title: Bosch Video Management System 8.0-Configuration Client-Denial of Service Poc Discovery by: Daniel Software Name: Bosch Video Management System Software Version: 8.0 Vendor Homepage:...

Bosch Video Management System 8.0 - Configuration Client Denial of Service (PoC)

Exploit Title: Bosch Video Management System 8.0-Configuration Client-Denial of Service Poc Discovery by: Daniel Discovery Date: 2018-11-12 Software Name: Bosch Video Management System Software Version: 8.0 Vendor Homepage: https://www.boschsecurity.com/xc/en/products/management-software/bvms/...

ICSA-18-128-02 Siemens Siveillance VMS (Update A)

1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION : Exploitable remotely Vendor : Siemens Equipment : Siveillance Video Management Software VMS Vulnerability : Deserialization of Untrusted Data 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-18-128-02...

Siemens Milestone XProtect Video Management Software Deserialization Elevation of Privilege Vulnerability

Siemens Milestone XProtect Video Management Software is a suite of video management software for managing surveillance video and other content. A deserialization elevation of privilege vulnerability exists in a .NET remote endpoint in multiple versions of Milestone XProtect Video Management...

CVE-2018-7891

The Milestone XProtect Video Management Software Corporate, Expert, Professional+, Express+, Essential+ 2016 R1 10.0.a to 2018 R1 12.1a contains .NET Remoting endpoints that are vulnerable to deserialization attacks resulting in remote code execution...

CVE-2018-7891

The Milestone XProtect Video Management Software Corporate, Expert, Professional+, Express+, Essential+ 2016 R1 10.0.a to 2018 R1 12.1a contains .NET Remoting endpoints that are vulnerable to deserialization attacks resulting in remote code execution...

Deserialization of untrusted data

The Milestone XProtect Video Management Software Corporate, Expert, Professional+, Express+, Essential+ 2016 R1 10.0.a to 2018 R1 12.1a contains .NET Remoting endpoints that are vulnerable to deserialization attacks resulting in remote code execution...

CVE-2018-7891

The CVE-2018-7891 issue affects Milestone XProtect Video Management Software (VMS) versions 2016 R1 to 2018 R1. It is a deserialization vulnerability in .NET Remoting endpoints that could lead to remote code execution. The vulnerability is tied to vulnerable endpoints on the Recording/Management ...

CVE-2018-7891

The Milestone XProtect Video Management Software Corporate, Expert, Professional+, Express+, Essential+ 2016 R1 10.0.a to 2018 R1 12.1a contains .NET Remoting endpoints that are vulnerable to deserialization attacks resulting in remote code execution...

AxxonSoft Axxon Next Directory Traversal Vulnerability

Axxon Next is a new generation of open platform video management software. AxxonSoft Axxon Next suffers from a directory traversal vulnerability that can be exploited by an attacker to perform directory traversal via a string in a URL...

Ubiquiti UniFi Video 3.7.3 - Local Privilege Escalation

RCE Security Advisory https://www.rcesecurity.com 1. ADVISORY INFORMATION ======================= Product: Ubiquiti UniFi Video Windows Vendor URL: https://www.ubnt.com Type: Improper Handling of Insufficient Permissions or Privileges CWE-280 Date found: 2016-05-24 Date published: 2017-12-20 CVSS...

Mirasys Video Management System Information Disclosure Vulnerability

Mirasys Video Management System VMS is a surveillance video management system from Mirasys, Finland. A security vulnerability exists in Mirasys VMS versions 6.x prior to 6.4.6, 7.x prior to 7.5.15, and 8.x prior to 8.1.1, which originates when the program sends data in cleartext form from the...