Lucene search
+L

7793 matches found

Positive Technologies
Positive Technologies
added 2023/11/01 12:0 a.m.6 views

PT-2023-15795 · Unisoc (Shanghai) Technologies Co. +1 · Sc7731E/Sc9832E/Sc9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to an incorrect bounds check in a camera driver, which could lead to a possible out of bounds write. This may result in a local...

4.4CVSS4.5AI score0.00083EPSS
SaveExploits0References4
ICS
ICS
added 2023/10/31 6:0 a.m.97 views

Zavio IP Camera

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION : Exploitable remotely/low attack complexity Vendor : Zavio Equipment : IP Camera Vulnerability : Improper Restriction of Operations within the Bounds of a Memory Buffer, OS Command Injection 2. RISK EVALUATION Successful exploitation of these...

9.8CVSS10AI score0.40396EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2023/10/30 12:0 a.m.9 views

PT-2023-29640 · Frigate · Frigate

Name of the Vulnerable Software and Affected Versions: Frigate versions prior to 0.13.0 Beta 3 Description: Frigate is an open source network video recorder. There is a reflected cross-site scripting vulnerability in any API endpoints reliant on the / base path with a / parameter, as values...

4.7CVSS4.5AI score0.01425EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2023/10/26 12:0 a.m.36 views

CVE-2018-17879

An issue was discovered on certain ABUS TVIP cameras. The CGI scripts allow remote attackers to execute code via system as root. There are several injection points in various scripts...

9.8AI score0.2185EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2023/10/26 12:0 a.m.8 views

ABUS TVIP Security Vulnerability

ABUS TVIP is a series of video surveillance cameras from the German company ABUS. A security vulnerability exists in ABUS TVIP that stems from incorrect access control, which allows an unauthenticated remote attacker to view the /video.mjpg video stream of certain cameras...

7.5CVSS6.8AI score0.0089EPSS
SaveExploits1References4
NVD
NVD
added 2023/10/25 6:17 p.m.26 views

CVE-2023-5746

A vulnerability regarding use of externally-controlled format string is found in the cgi component. This allows remote attackers to execute arbitrary code via unspecified vectors. The following models with Synology Camera Firmware versions before 1.0.5-0185 may be affected: BC500 and TC500...

9.8CVSS9.8AI score0.01701EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/25 6:17 p.m.7 views

CVE-2023-5746

A vulnerability regarding use of externally-controlled format string is found in the cgi component. This allows remote attackers to execute arbitrary code via unspecified vectors. The following models with Synology Camera Firmware versions before 1.0.5-0185 may be affected: BC500 and TC500...

9.8CVSS6AI score0.01701EPSS
SaveExploits0References1
Prion
Prion
added 2023/10/25 6:17 p.m.22 views

Format string

A vulnerability regarding use of externally-controlled format string is found in the cgi component. This allows remote attackers to execute arbitrary code via unspecified vectors. The following models with Synology Camera Firmware versions before 1.0.5-0185 may be affected: BC500 and TC500...

7.5CVSS9.6AI score0.01701EPSS
SaveExploits0References1Affected Software2
CNNVD
CNNVD
added 2023/10/25 12:0 a.m.8 views

Synology Camera Firmware Formatting String Error Vulnerability

Synology Camera Firmware is a webcam firmware from China-based Synology Inc. A formatting string error vulnerability exists in Synology Camera Firmware versions prior to 1.0.5-0185, which stems from a formatting string error vulnerability in the cgi component that allows attackers to execute...

9.8CVSS7.3AI score0.01701EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/10/24 7:32 a.m.16 views

CVE-2023-5746

A vulnerability regarding use of externally-controlled format string is found in the cgi component. This allows remote attackers to execute arbitrary code via unspecified vectors. The following models with Synology Camera Firmware versions before 1.0.5-0185 may be affected: BC500 and TC500...

9.8CVSS8AI score0.01701EPSS
SaveExploits0References1
CVE
CVE
added 2023/10/24 7:32 a.m.57 views

CVE-2023-5746

CVE-2023-5746 affects Synology Camera Firmware, specifically the BC500 and TC500 models. The issue is a vulnerability in the cgi component involving an externally-controlled format string, enabling remote code execution via unspecified vectors on firmware versions prior to 1.0.5-0185 . Public ref...

9.8CVSS9.6AI score0.01701EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/10/24 7:32 a.m.37 views

CVE-2023-5746

A vulnerability regarding use of externally-controlled format string is found in the cgi component. This allows remote attackers to execute arbitrary code via unspecified vectors. The following models with Synology Camera Firmware versions before 1.0.5-0185 may be affected: BC500 and TC500...

9.8CVSS9.8AI score0.01701EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/10/24 12:0 a.m.9 views

PT-2023-32300 · Synology · Synology Camera Firmware

Name of the Vulnerable Software and Affected Versions: Synology Camera Firmware versions prior to 1.0.5-0185 Description: A vulnerability regarding the use of externally-controlled format string is found in the cgi component. This allows remote attackers to execute arbitrary code via unspecified...

9.8CVSS9.6AI score0.01701EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2023/10/20 12:0 a.m.9 views

QNAP Systems QUSBCam2 Operating System Command Injection Vulnerability

QNAP Systems QUSBCam2 is an application from QNAP Systems, Inc. allows the use of a USB webcam as a remotely manageable IP ONVIF camera for cheaper and easier deployment of surveillance systems in the home or small office. The QNAP Systems QUSBCam2 version 2.0.x vulnerability stems from the...

8.8CVSS7.5AI score0.01141EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/10/18 12:0 a.m.9 views

PT-2023-9142 · Wyze +1 · Wyze Cam V3 +1

Name of the Vulnerable Software and Affected Versions: Roku Indoor Camera SE version 3.0.2.4679 Wyze Cam v3 version 4.36.11.5859 Description: A stack-based buffer overflow issue exists in the message parsing functionality. This can be triggered by a specially crafted message, leading to a...

8.8CVSS7.7AI score0.01022EPSS
SaveExploits1References8
BDU FSTEC
BDU FSTEC
added 2023/10/13 12:0 a.m.12 views

The vulnerability of the QVR Pro Client’s IP camera management tool, related to insufficient protection of registration data, allows a intruder to gain unauthorized access to the protected information.

The vulnerability of the QVR Pro Client’s IP camera management tool is related to insufficient protection for registration data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

6.7CVSS5.5AI score0.00169EPSS
SaveExploits0References3Affected Software1
VulnCheck KEV
VulnCheck KEV
added 2023/10/09 12:0 a.m.8 views

VulnCheck KEV: CVE-2021-33552

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...

7.2CVSS7.3AI score0.48811EPSS
SaveExploits4References1
VulnCheck KEV
VulnCheck KEV
added 2023/10/09 12:0 a.m.8 views

VulnCheck KEV: CVE-2021-33551

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...

7.2CVSS7.3AI score0.48811EPSS
SaveExploits4References1
VulnCheck KEV
VulnCheck KEV
added 2023/10/09 12:0 a.m.9 views

VulnCheck KEV: CVE-2021-33554

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...

7.2CVSS7.3AI score0.5705EPSS
SaveExploits4References1
VulnCheck KEV
VulnCheck KEV
added 2023/10/09 12:0 a.m.15 views

VulnCheck KEV: CVE-2021-33548

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...

7.2CVSS7.3AI score0.5705EPSS
SaveExploits4References1
Rows per page
Query Builder