Lucene search
K

6 matches found

NVD
NVD
added 2026/04/29 8:16 p.m.0 views

CVE-2018-25310

VideoFlow Digital Video Protection DVP 2.10 contains an authenticated remote code execution vulnerability that allows authenticated attackers to execute arbitrary system commands by exploiting a cross-site request forgery flaw in the web management interface. Attackers with valid credentials can...

5.3CVSS0.00043EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/04/29 7:25 p.m.2 views

CVE-2018-25311 VideoFlow Digital Video Protection DVP 2.10 Authenticated Directory Traversal

VideoFlow Digital Video Protection DVP 2.10 contains an authenticated directory traversal vulnerability that allows attackers with valid credentials to disclose arbitrary files by injecting path traversal sequences in the ID parameter. Attackers can submit requests to downloadsys.pl,...

7.1CVSS5.9AI score0.0043EPSS
Exploits0References3
CVE
CVE
added 2026/04/29 7:25 p.m.4 views

CVE-2018-25311

VideoFlow Digital Video Protection DVP 2.10 is affected by an authenticated directory traversal vulnerability. An authenticated attacker can disclose arbitrary files by injecting path traversal sequences into the ID parameter when issuing requests to downloadsys.pl, download_xml.pl, download.pl, ...

7.1CVSS5.9AI score0.0043EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/12/24 7:28 p.m.22 views

CVE-2019-25255 VideoFlow Digital Video Protection DVP 2.10 Authenticated Remote Code Execution

VideoFlow Digital Video Protection DVP 2.10 contains an authenticated remote code execution vulnerability that allows attackers to execute system commands with root privileges. Attackers can exploit the vulnerability through a cross-site request forgery CSRF mechanism to gain unauthorized system...

8.7CVSS0.00088EPSS
Exploits1References3
CVE
CVE
added 2025/12/24 7:28 p.m.4 views

CVE-2019-25255

CVE-2019-25255 affects VideoFlow Digital Video Protection DVP 2.10. The issue is an authenticated remote code execution vulnerability caused by a cross-site request forgery (CSRF) mechanism, allowing an attacker with authenticated access to execute system commands with root privileges. The availa...

8.7CVSS8.2AI score0.00088EPSS
Exploits1References3
Zero Science Lab
Zero Science Lab
added 2018/03/31 12:0 a.m.545 views

VideoFlow Digital Video Protection DVP 10 Authenticated Directory Traversal

Summary VideoFlow's Digital Video Protection DVP product is used by leading companies worldwide to boost the reliability of IP networks, including the public Internet, for professional live broadcast. DVP enables broadcast companies to confidently contribute and distribute live video over IP with...

7.1CVSS5.8AI score0.00362EPSS
Exploits1
Rows per page
Query Builder