Login Request a demo
CA
Product
Camera
by Vivotek · last CVE Sep 18, 2019
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 2High 5Medium 3Low 0
Severity
All severities10Critical2High5Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Camera to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-10256
9.8
1%
Sep 10
An authentication bypass vulnerability in VIVOTEK IPCam versions prior to 0x13a was found
Affected: All versions, or not specified
CVE-2019-14457
9.8
3%
Sep 10
VIVOTEK IP Camera devices with firmware before 0x20x have a stack-based buffer overflow via a crafted HTTP header
Affected: All versions, or not specified
CVE-2018-14771
8.8
3%
Sep 5
VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code (issue 2 of 2) via eventscript.cgi
Affected: All versions, or not specified
CVE-2018-14770
8.8
3%
Sep 5
VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code (issue 1 of 2) via the ONVIF interface, (/onvif/device_service)
Affected: All versions, or not specified
CVE-2018-14769
8.8
0%
Sep 5
VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow CSRF
Affected: All versions, or not specified
CVE-2018-14768
8.8
3%
Aug 29
Various VIVOTEK FD8*, FD9*, FE9*, IB8*, IB9*, IP9*, IZ9*, MS9*, SD9*, and other devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code
Affected: All versions, or not specified
CVE-2019-14458
7.5
2%
Sep 18
VIVOTEK IP Camera devices with firmware before 0x20x allow a denial of service via a crafted HTTP header
Affected: All versions, or not specified
CVE-2018-18244
6.1
1%
Jan 3
Cross-site scripting in syslog.html in VIVOTEK Network Camera Series products with firmware 0x06x to 0x08x allows remote attackers to execute arbitrary JavaScript code via an HTTP…
Affected: All versions, or not specified
CVE-2018-18005
6.1
1%
Jan 3
Cross-site scripting in event_script.js in VIVOTEK Network Camera Series products with firmware 0x06x to 0x08x allows remote attackers to execute arbitrary JavaScript via a URL…
Affected: All versions, or not specified
CVE-2018-18004
5.3
1%
Jan 3
Incorrect Access Control in mod_inetd.cgi in VIVOTEK Network Camera Series products with firmware before XXXXXX-VVTK-0X09a allows remote attackers to enable arbitrary system…
Affected: All versions, or not specified
Showing 10