9365 matches found
CVE-2020-19639
Cross Site Request Forgery CSRF vulnerability in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B, via all fields to WebUI...
CVE-2020-19641
An issue was discovered in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B. Authenticated attackers with the "Operator" Privilege can gain admin privileges via a crafted request to '/goform/formUserMng'...
CVE-2020-19640
An issue was discovered in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B. An unauthenticated attacker can reboot the device causing a Denial of Service, via a hidden reboot command to '/media/?action=cmd'...
CVE-2020-19643
Cross Site Scripting XSS vulnerability in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B via all fields in the FTP settings page to the "goform/formSetFtpCfg" settings page...
CVE-2020-19642
An issue was discovered in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B. A local attacker can execute arbitrary code via editing the 'recdata.db' file to call a specially crafted GoAhead ASP-file on the SD card...
CVE-2020-19639
Cross Site Request Forgery CSRF vulnerability in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B, via all fields to WebUI...
CVE-2020-19642
An issue was discovered in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B. A local attacker can execute arbitrary code via editing the 'recdata.db' file to call a specially crafted GoAhead ASP-file on the SD card...
CVE-2020-19641
An issue was discovered in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B. Authenticated attackers with the "Operator" Privilege can gain admin privileges via a crafted request to '/goform/formUserMng'...
CVE-2020-19643
Cross Site Scripting XSS vulnerability in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B via all fields in the FTP settings page to the "goform/formSetFtpCfg" settings page...
Design/Logic Flaw
An issue was discovered in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B. A local attacker can execute arbitrary code via editing the 'recdata.db' file to call a specially crafted GoAhead ASP-file on the SD card...
Cross site request forgery (csrf)
Cross Site Request Forgery CSRF vulnerability in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B, via all fields to WebUI...
Cross site scripting
Cross Site Scripting XSS vulnerability in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B via all fields in the FTP settings page to the "goform/formSetFtpCfg" settings page...
CVE-2020-19643
CVE-2020-19643 affects the INSMA Wifi Mini Spy 1080P HD Security IP Camera (firmware version 1.9.7 B). The issue is a Cross-Site Scripting (XSS) vulnerability that originates from inputs in the FTP settings page, exploitable through the goform/formSetFtpCfg endpoint. The CVSS data indicates a net...
CVE-2020-19642
An issue was discovered in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B. A local attacker can execute arbitrary code via editing the 'recdata.db' file to call a specially crafted GoAhead ASP-file on the SD card...
CVE-2020-19642
Affected product: INSMA Wifi Mini Spy 1080P HD Security IP Camera (firmware version 1.9.7 B). Vulnerability: Local arbitrary code execution via editing the ‘recdata.db’ file to call a specially crafted GoAhead ASP-file stored on the SD card. Root cause / vector (as described): The GoAhead ASP-fil...
CVE-2020-19641
An issue was discovered in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B. Authenticated attackers with the "Operator" Privilege can gain admin privileges via a crafted request to '/goform/formUserMng'...
CVE-2020-19641
CVE-2020-19641 affects INSMA Wifi Mini Spy 1080P HD Security IP Camera, firmware version 1.9.7 B. Authenticated attackers with the Operator privilege can escalate to admin by sending a crafted request to /goform/formUserMng . The connected documents corroborate administrator-privilege escalation ...
CVE-2020-19640
An issue was discovered in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B. An unauthenticated attacker can reboot the device causing a Denial of Service, via a hidden reboot command to '/media/?action=cmd'...
CVE-2020-19640
The CVE-2020-19640 issue affects INSMA Wifi Mini Spy 1080P HD Security IP Camera (version 1.9.7 B). An unauthenticated attacker can trigger a reboot via a hidden reboot command to the path /media/?action=cmd, leading to a Denial of Service. Multiple sources (NVD, CNVD, CNNVD, CVE listing) corrobo...