Lucene search
+L

848 matches found

NVD
NVD
•added 2026/10/20 8:16 a.m.•9 views

CVE-2026-43835

A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potentially compromising the device permanently...

8.6CVSS0.00151EPSS
SaveExploits0References2
CVE
CVE
•added 2026/10/20 8:02 a.m.•11 views

CVE-2026-43835

A vulnerability exists in the firmware upgrade functionality that allows an authenticated attacker to upload a forged firmware upgrade file . This flaw could lead to the permanent compromise of the affected device. Specific details regarding the affected product, software version, root cause, and...

8.6CVSS5.9AI score0.00151EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/20 8:02 a.m.•7 views

EUVD-2026-104830

A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potentially compromising the device permanently...

8.6CVSS5.9AI score0.00151EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/10/20 8:02 a.m.•20 views

CVE-2026-43835

A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potentially compromising the device permanently...

8.6CVSS0.00151EPSS
SaveExploits0References2
NVD
NVD
•added 2026/10/20 6:16 a.m.•6 views

CVE-2026-100737

Hidden functionality issue exists in Multiple DVRs Digital Video Recorders provided by Atsumi Electric Co., Ltd. A user who can log in to the product with the administrator privilege may upgrade the affected product to unauthorized firmware...

6.9CVSS0.00211EPSS
SaveExploits0References2
CVE
CVE
•added 2026/10/20 5:28 a.m.•14 views

CVE-2026-100737

A hidden functionality issue exists in multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd. An attacker with administrator privileges can exploit this flaw to upgrade the affected devices to unauthorized firmware . The vulnerability is characterized by a Medium severity (...

6.9CVSS5.4AI score0.00211EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/20 5:28 a.m.•7 views

EUVD-2026-104797

Hidden functionality issue exists in Multiple DVRs Digital Video Recorders provided by Atsumi Electric Co., Ltd. A user who can log in to the product with the administrator privilege may upgrade the affected product to unauthorized firmware...

6.9CVSS5.5AI score0.00211EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/10/20 5:28 a.m.•19 views

CVE-2026-100737

Hidden functionality issue exists in Multiple DVRs Digital Video Recorders provided by Atsumi Electric Co., Ltd. A user who can log in to the product with the administrator privilege may upgrade the affected product to unauthorized firmware...

6.9CVSS0.00211EPSS
SaveExploits0References2
Nuclei
Nuclei
•added 2026/10/20 2:05 a.m.•78 views

Sony IPELA Engine IP Camera - Hardcoded Account

Multiple SONY network cameras are vulnerable to sensitive information disclosure via hardcoded credentials. id: CVE-2016-7834 info: name: Sony IPELA Engine IP Camera - Hardcoded Account author: af001 severity: high description: | Multiple SONY network cameras are vulnerable to sensitive informati...

8.8CVSS7.9AI score0.03869EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2026/10/20 12:00 a.m.•6 views

PT-2026-118265

A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potentially compromising the device permanently...

8.6CVSS5.9AI score0.00151EPSS
SaveExploits0References3
Nuclei
Nuclei
•added 2026/10/17 2:05 a.m.•98 views

TP-Link - OS Command Injection

The PING function on the TP-Link TL-WR840N EU v5 router with firmware through TL-WR840NEUV5171211 is vulnerable to remote code execution via a specially crafted payload in an IP address input field. id: CVE-2021-41653 info: name: TP-Link - OS Command Injection author: gy741 severity: critical...

10CVSS9AI score0.76045EPSS
SaveExploits1References5
NVD
NVD
•added 2026/10/09 3:17 p.m.•19 views

CVE-2026-33367

SNMP can be used to perform administrative actions such as retrieving configuration files, modifying user accounts or device settings, and initiating firmware or bootloader upgrades or downgrades—all without any authentication...

9.3CVSS0.0029EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/10/09 2:38 p.m.•46 views

CVE-2026-33367 Red Lion Controls N-Tron 700 Series Missing Authentication for Critical Function

SNMP can be used to perform administrative actions such as retrieving configuration files, modifying user accounts or device settings, and initiating firmware or bootloader upgrades or downgrades—all without any authentication...

9.3CVSS0.0029EPSS
SaveExploits0References4
CVE
CVE
•added 2026/10/09 2:38 p.m.•42 views

CVE-2026-33367

The Red Lion Controls N-Tron 700 Series is vulnerable to a missing authentication flaw where SNMP can be used to perform administrative actions. Attackers can retrieve configuration files, modify user accounts or device settings, and initiate firmware or bootloader upgrades/downgrades without any...

9.3CVSS5.7AI score0.0029EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/10/09 12:00 a.m.•11 views

PT-2026-108946

SNMP can be used to perform administrative actions such as retrieving configuration files, modifying user accounts or device settings, and initiating firmware or bootloader upgrades or downgrades—all without any authentication...

9.3CVSS5.7AI score0.0029EPSS
SaveExploits0References6
NVD
NVD
•added 2026/09/30 5:16 p.m.•12 views

CVE-2026-75969

Missing authentication for critical function vulnerability for all PTZOptics cameras and the Firmware Upgrade Tool - Firmware Update modules. A missing authentication vulnerability in the firmware update mechanism of affected PTZOptics cameras allows an unauthenticated user to install modified...

10CVSS0.0035EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/30 4:27 p.m.•13 views

CVE-2026-75969 PTZOptics Missing Authentication in Firmware Upload

Missing authentication for critical function vulnerability for all PTZOptics cameras and the Firmware Upgrade Tool - Firmware Update modules. A missing authentication vulnerability in the firmware update mechanism of affected PTZOptics cameras allows an unauthenticated user to install modified...

10CVSS5.8AI score0.0035EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/30 4:27 p.m.•22 views

CVE-2026-75969

A missing authentication vulnerability exists in the firmware update mechanism of PTZOptics cameras and the Firmware Upgrade Tool - Firmware Update modules. This flaw allows an unauthenticated user to install modified firmware on affected devices without administrator credentials. Affected Produc...

10CVSS5.8AI score0.0035EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/30 4:27 p.m.•42 views

CVE-2026-75969 PTZOptics Missing Authentication in Firmware Upload

Missing authentication for critical function vulnerability for all PTZOptics cameras and the Firmware Upgrade Tool - Firmware Update modules. A missing authentication vulnerability in the firmware update mechanism of affected PTZOptics cameras allows an unauthenticated user to install modified...

10CVSS0.0035EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/30 4:27 p.m.•16 views

EUVD-2026-90084

Missing authentication for critical function vulnerability for all PTZOptics cameras and the Firmware Upgrade Tool - Firmware Update modules. A missing authentication vulnerability in the firmware update mechanism of affected PTZOptics cameras allows an unauthenticated user to install modified...

10CVSS5.8AI score0.0035EPSS
SaveExploits0References1
Rows per page
Query Builder