15032 matches found
CVE-2022-34535
Digital Watchdog DW MEGApix IP cameras A7.2.220211029 allows unauthenticated attackers to view internal paths and scripts via web files...
Code injection
Digital Watchdog DW MEGApix IP cameras A7.2.220211029 allows unauthenticated attackers to view internal paths and scripts via web files...
Command injection
Digital Watchdog DW MEGApix IP cameras A7.2.220211029 was discovered to contain a command injection vulnerability in the component /admin/curltest.cgi. This vulnerability is exploitable via a crafted POST request...
Code injection
Digital Watchdog DW Spectrum Server 4.2.0.32842 allows attackers to access sensitive infromation via a crafted API call...
Cross site scripting
Digital Watchdog DW MEGApix IP cameras A7.2.220211029 was discovered to contain a cross-site scripting XSS vulnerability via the component biaoneshot.cgi...
Command injection
Digital Watchdog DW MEGApix IP cameras A7.2.220211029 was discovered to contain a command injection vulnerability in the component /admin/vca/bia/addacph.cgi. This vulnerability is exploitable via a crafted POST request...
Command injection
Digital Watchdog DW MEGApix IP cameras A7.2.220211029 was discovered to contain a command injection vulnerability in the component /admin/vca/license/licensetok.cgi. This vulnerability is exploitable via a crafted POST request...
CVE-2022-34539
Digital Watchdog DW MEGApix IP cameras A7.2.220211029 was discovered to contain a command injection vulnerability in the component /admin/curltest.cgi. This vulnerability is exploitable via a crafted POST request...
CVE-2022-34539
CVE-2022-34539 affects Digital Watchdog DW MEGApix IP cameras (version A7.2.2_20211029). The flaw is in the /admin/curltest.cgi component and is exploitable via a crafted POST request, enabling command injection. Public documents corroborate a high-severity impact (CVSSv3.1: 8.8; Network vector, ...
CVE-2022-34540
Digital Watchdog DW MEGApix IP cameras A7.2.220211029 was discovered to contain a command injection vulnerability in the component /admin/vca/license/licensetok.cgi. This vulnerability is exploitable via a crafted POST request...
CVE-2022-34540
CVE-2022-34540 affects Digital Watchdog DW MEGApix IP cameras (version A7.2.2_20211029). The vulnerable component is /admin/vca/license/license_tok.cgi, with a command-injection flaw exploitable via a crafted POST request. Affected product behavior and impact are described in multiple sources; PT...
CVE-2022-34538
Digital Watchdog DW MEGApix IP cameras A7.2.220211029 was discovered to contain a command injection vulnerability in the component /admin/vca/bia/addacph.cgi. This vulnerability is exploitable via a crafted POST request...
CVE-2022-34538
CVE-2022-34538 affects Digital Watchdog DW MEGApix IP cameras (A7.2.2_20211029). A command-injection vulnerability exists in /admin/vca/bia/addacph.cgi and is exploitable via crafted POST requests. Several connected sources corroborate the issue and its impact, with no publicly documented patch d...
CVE-2022-34537
Digital Watchdog DW MEGApix IP cameras A7.2.220211029 was discovered to contain a cross-site scripting XSS vulnerability via the component biaoneshot.cgi...
CVE-2022-34537
The CVE-2022-34537 entry concerns Digital Watchdog DW MEGApix IP cameras with firmware version A7.2.2_20211029, where a cross-site scripting (XSS) vulnerability exists in the bia_oneshot.cgi component. According to the provided data, the vulnerability is exploitable over network, has low privileg...
CVE-2022-34536
Digital Watchdog DW MEGApix IP cameras A7.2.220211029 allows attackers to access the core log file and perform session hijacking via a crafted session token...
CVE-2022-34536
CVE-2022-34536 affects Digital Watchdog DW MEGApix IP cameras, specifically version A7.2.2_20211029. The vulnerability allows an attacker to access the core log file and hijack sessions via a crafted session token, per multiple sources (NVD description). The root cause is unauthorized access thro...
CVE-2022-34535
Digital Watchdog DW MEGApix IP cameras A7.2.220211029 allows unauthenticated attackers to view internal paths and scripts via web files...
CVE-2022-34535
Affected product: Digital Watchdog DW MEGApix IP cameras (firmware A7.2.2_20211029). Issue: Unauthenticated access allows viewing internal paths and scripts via web files. Impact: Confidentiality impact described as high in CVSS, with no information on exploitation details from the provided sourc...