PT-2024-7350

Name of the Vulnerable Software and Affected Versions: HikCentral Master Lite affected versions not specified Description: The issue is related to a Cross-Site Scripting XSS vulnerability, which could allow an attacker to inject scripts into certain pages by creating malicious data. This...

PT-2024-7352

Name of the Vulnerable Software and Affected Versions: HikCentral Master Lite versions affected versions not specified Description: The issue is related to a CSV injection vulnerability. This vulnerability can be exploited to allow an attacker to create malicious data and generate executable...

Hikvision HikCentral Master Lite 安全漏洞

Hikvision HikCentral Master Lite is an AI Cloud-based application management intelligence platform for edge domains from Hikvision, China. A security vulnerability exists in Hikvision HikCentral Master Lite, which stems from a cross-site scripting XSS vulnerability that allows an attacker to inje...

CVE-2024-47486: Improper Neutralization of Input During Web Page Generation

There is an XSS vulnerability in some HikCentral Master Lite versions. If exploited, an attacker could inject scripts into certain pages by building malicious data...

Hikvision HikCentral Master Lite 安全漏洞

Hikvision HikCentral Master Lite is an AI Cloud-based application management intelligence platform for the edge domain from Hikvision, China. A security vulnerability exists in Hikvision HikCentral Master Lite, which stems from a CSV injection vulnerability that could allow an attacker to build...

CVE-2024-47487: Improper Neutralization of Special Elements used in an SQL Command

There is a SQL injection vulnerability in some HikCentral Professional versions. This could allow an authenticated user to execute arbitrary SQL queries...

CVE-2024-47485: Improper Neutralization of Formula Elements in a CSV File

There is a CSV injection vulnerability in some HikCentral Master Lite versions. If exploited, an attacker could build malicious data to generate executable commands in the CSV file...

The vulnerability of the HikCentral Professional security management system, related to deficiencies in access control, allows attackers to increase their privileges.

The vulnerability of the HikCentral Professional security management system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of the HikCentral Professional security management system, related to access control deficiencies, allows a perpetrator to gain unauthorized access to URLs.

The vulnerability of the HikCentral Professional security management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to certain URL addresses...

Hikvision HikCentral Professional Security Vulnerability

Hikvision HikCentral is a security management software from Hikvision China. A security vulnerability exists in Hikvision HikCentral Professional V2.5.1 and prior versions, which stems from insufficient server-side authentication and could allow an attacker to access certain URLs that they should...

HikCentral Professional Security Vulnerability

Hikvision HikCentral is a security management software from Hikvision China. A security vulnerability exists in Hikvision HikCentral Professional versions prior to V2.5.1, which stems from insufficient server-side authentication and allows an attacker to change parameter values to access certain...

PT-2024-2300 · Hikvision · Hikcentral Professional

Name of the Vulnerable Software and Affected Versions: HikCentral Professional affected versions not specified Description: The issue is related to insufficient server-side validation, allowing an attacker with login privileges to access certain resources by changing parameter values. This could...

PT-2024-2150 · Hikvision · Hikcentral Professional

Name of the Vulnerable Software and Affected Versions: HikCentral Professional affected versions not specified Description: The issue is related to insufficient server-side validation, which could allow an attacker to gain access to certain URLs that they should not have access to. This is a...