critical-cve-watch

Critical CVE Watch CVSS 9.x A small, defensive watchlist of...

CVE-2026-108984 GV-ASManager Web Server Buffer Overflow Vulnerability

A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe...

CVE-2026-108984 GV-ASManager Web Server Buffer Overflow Vulnerability

A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe...

CVE-2026-108984

The GV-ASManager Web Server is susceptible to a Stack-based Buffer Overflow (CWE-122) affecting its default connection ports. The vulnerability resides within the process named GeoWebServer.exe . This flaw allows for potential high impact on availability , as indicated by the CVSS 3.1 score of 7....

CVE-2026-108983 GV-ASManager Web Server Command Injection Vulnerability

A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe...

CVE-2026-108983

The GV-ASManager Web Server is vulnerable to a Command Injection vulnerability (CWE-78) within the GeoWebServer.exe process, specifically on the default connection ports. This flaw allows for the improper neutralization of special elements used in OS commands. The vulnerability is rated as CRITIC...

GeoVision GV-ASManager command injection vulnerability

The GeoVision GV-ASManager 6.3.0 version has a command injection vulnerability. This vulnerability stems from the default web server connection port of the GeoWebServer.exe process, which allows for OS command injection, potentially enabling the execution of arbitrary commands...

GeoVision GV-ASManager buffer error vulnerability

The GeoVision GV-ASManager 6.3.0 version has a buffer overflow vulnerability. This vulnerability stems from the default connection port of the Web Server, which has a stack buffer overflow under the GeoWebServer.exe process, potentially leading to a denial-of-service attack...

CVE-2026-18755

A DLL hijacking vulnerability in GeoVision GV-ASManager allows a local attacker with write access to an unsafe search directory to execute arbitrary code. By placing a crafted dynamic-link library DLL file into the application search path prior to the legitimate library, the malicious code is...

CVE-2026-18755

The CVE-2026-18755 entry describes a DLL hijacking vulnerability in GeoVision GV-ASManager. An attacker who has write access to an unsafe application search directory can place a crafted DLL into the search path, causing the GV-ASManager process to load and execute the malicious library with its ...

EUVD-2026-52639

A DLL hijacking vulnerability in GeoVision GV-ASManager allows a local attacker with write access to an unsafe search directory to execute arbitrary code. By placing a crafted dynamic-link library DLL file into the application search path prior to the legitimate library, the malicious code is...

CVE-2026-18755: Unquoted Search Path or Element

A DLL hijacking vulnerability in GeoVision GV-ASManager allows a local attacker with write access to an unsafe search directory to execute arbitrary code. By placing a crafted dynamic-link library DLL file into the application search path prior to the legitimate library, the malicious code is...

PT-2026-67675

A DLL hijacking vulnerability in GeoVision GV-ASManager allows a local attacker with write access to an unsafe search directory to execute arbitrary code. By placing a crafted dynamic-link library DLL file into the application search path prior to the legitimate library, the malicious code is...

EUVD-2024-50953

Malicious code in bioql PyPI...

EUVD-2022-48908

Malicious code in bioql PyPI...

CVE-2022-46070

GV-ASManager V6.0.1.0 contains a Local File Inclusion vulnerability in GeoWebServer via Path...

📄 GeoVision GV-ASManager 6.1.0.0 Information Disclosure

GeoVision GV-ASManager versions 6.1.0.0 and below suffer from an information disclosure vulnerability. Exploit Title: Information Disclosure in GeoVision GV-ASManager Google Dork: inurl:"ASWeb/Login" Date: 02-FEB-2025 Exploit Author: Giorgi Dograshvili DRAGOWN Vendor Homepage:...

Geovision GV-ASManager 6.1.10 Cross Site Request Forgery

Geovision GV-ASManager versions 6.1.10 and below suffer from a cross site request forgery vulnerability. CVE-2024-56901 CVE-2024-56901 - A Cross-Site Request Forgery CSRF vulnerability in Geovision GV-ASManager web application with the version 6.1.1.0 or less that allows attackers to arbitrarily...

CVE-2024-56902: Exposure of Sensitive Information to an Unauthorized Actor

Information disclosure vulnerability in Geovision GV-ASManager web application with the version v6.1.0.0 or less, which discloses account information, including cleartext password...

Geovision GV-ASManager Authentication Bypass Info Disclosure

The vulnerability of the software for controlling the Geovision GV-ASManager access control system is related to the absence of an authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose the protected information...