Vivotek Camera
11 CVEs affecting Vivotek Camera. Latest disclosed: 2024-02-29. Critical: 3, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-26548 | Critical | 9.8 | 2024-02-29 | An issue in vivotek Network Camera v.FD8166A-VVTK-0204j allows a remote attacker to execute arbitrary code via a crafted payload to the upload_file.cgi compone… |
CVE-2019-10256 | Critical | 9.8 | 2019-09-10 | An authentication bypass vulnerability in VIVOTEK IPCam versions prior to 0x13a was found. |
CVE-2019-14457 | Critical | 9.8 | 2019-09-10 | VIVOTEK IP Camera devices with firmware before 0x20x have a stack-based buffer overflow via a crafted HTTP header. |
CVE-2018-14771 | High | 8.8 | 2018-09-05 | VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code (issue 2 of 2) via eventscript.cgi. |
CVE-2018-14770 | High | 8.8 | 2018-09-05 | VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code (issue 1 of 2) via the ONVIF interface, (/onvif/device_service… |
CVE-2018-14769 | High | 8.8 | 2018-09-05 | VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow CSRF. |
CVE-2018-14768 | High | 8.8 | 2018-08-29 | Various VIVOTEK FD8*, FD9*, FE9*, IB8*, IB9*, IP9*, IZ9*, MS9*, SD9*, and other devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary co… |
CVE-2019-14458 | High | 7.5 | 2019-09-18 | VIVOTEK IP Camera devices with firmware before 0x20x allow a denial of service via a crafted HTTP header. |
CVE-2018-18244 | Medium | 6.1 | 2019-01-03 | Cross-site scripting in syslog.html in VIVOTEK Network Camera Series products with firmware 0x06x to 0x08x allows remote attackers to execute arbitrary JavaScr… |
CVE-2018-18005 | Medium | 6.1 | 2019-01-03 | Cross-site scripting in event_script.js in VIVOTEK Network Camera Series products with firmware 0x06x to 0x08x allows remote attackers to execute arbitrary Jav… |
CVE-2018-18004 | Medium | 5.3 | 2019-01-03 | Incorrect Access Control in mod_inetd.cgi in VIVOTEK Network Camera Series products with firmware before XXXXXX-VVTK-0X09a allows remote attackers to enable ar… |