29 matches found
CVE-2026-33685
WWBN AVideo is an open source video platform. In versions up to and including 26.0, the plugin/ADServer/reports.json.php endpoint performs no authentication or authorization checks, allowing any unauthenticated attacker to extract ad campaign analytics data including video titles, user channel...
Vulnerabilities fixed in Hanwha camera systems
Hanwha has fixed vulnerabilities in several camera systems, including issues with XML validation, certificate validation, permissions management for guest accounts, video analytics and hard-coded encryption key. The vulnerabilities include an issue with the validation of incoming XML requests,...
CVE-2025-52600 Improper Input Validation
Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems ICS and OT/IoT security, has discovered a vulnerability in camera video analytics that Improper input validation. This vulnerability could allow an attacker to execute specific commands on the...
CVE-2025-52600 Improper Input Validation
Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems ICS and OT/IoT security, has discovered a vulnerability in camera video analytics that Improper input validation. This vulnerability could allow an attacker to execute specific commands on the...
CVE-2025-52600
CVE-2025-52600 affects Hanwha Vision cameras; vulnerability in camera video analytics due to improper input validation could allow a remote attacker to execute commands on the host PC. Patch firmware has been released by the manufacturer. Connected Nessus/NVD entries reiterate the same descriptio...
Hanwha Vision Camera 安全漏洞
Hanwha Vision Camera is a series of cameras from Hanwha Vision, a South Korean company. A security vulnerability exists in Hanwha Vision Camera that stems from improper input validation in the camera's video analytics, which could lead to an attacker executing specific commands on the user's host...
PT-2025-53446
Name of the Vulnerable Software and Affected Versions Camera Video Analytics Software affected versions not specified Description A flaw exists in camera video analytics software related to improper input validation. This could allow an attacker to execute commands on a user’s host PC...
EUVD-2025-5792
Malicious code in bioql PyPI...
CVE-2024-53011
Information disclosure may occur due to improper permission and access controls to Video Analytics engine...
CVE-2024-53011
Information disclosure may occur due to improper permission and access controls to Video Analytics engine...
CVE-2024-53011
Information disclosure may occur due to improper permission and access controls to Video Analytics engine...
CVE-2024-53011 Permissions, Privileges, and Access Controls in Video Analytics and Processing
Information disclosure may occur due to improper permission and access controls to Video Analytics engine...
CVE-2024-53011 Permissions, Privileges, and Access Controls in Video Analytics and Processing
Information disclosure may occur due to improper permission and access controls to Video Analytics engine...
CVE-2024-53011
CVE-2024-53011 is a permissions/Access-Controls information-disclosure issue affecting the Video Analytics engine. The CVSS 3.1 vector (AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N) yields a base score of 7.9 (High) with LOCAL attack vector and HIGH privileges required, implying local access is needed and...
PT-2025-9300 · Qualcomm · Snapdragon +70
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: Information disclosure may occur due to improper permission and access controls to the Video Analytics engine. Recommendations: At the moment, there is no information about a newer version...
CVE-2024-43052 Improper Input Validation in Video Analytics and Processing
Memory corruption while processing API calls to NPU with invalid input...
CVE-2024-43052 Improper Input Validation in Video Analytics and Processing
Memory corruption while processing API calls to NPU with invalid input...
WordPress Video Analytics for Cloudflare Stream Plugin <= 1.1 is vulnerable to Cross Site Scripting (XSS)
Software Video Analytics for Cloudflare Stream Type Plugin Vulnerable versions = 1.1 Fixed in 1.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID ca3447e66eaa Credits Rafie Muhammad...
Citilog 安全漏洞
Citilog is a video analytics and artificial intelligence application for traffic management solutions from Citilog. A security vulnerability exists in Citilog version 8.0 that stems from the presence of an authentication degradation issue. An attacker could exploit the vulnerability to achieve HT...
Bosch Video Security Code Injection Vulnerability
Bosch Video Security is a video security system from Bosch, Germany. Used to connect to Bosch Ip cameras and encoders from around the world, experience instant video playback, full access to your recordings, forensic search of cameras with Bosch video analytics support, and smooth control of Ptz...