NU
Vendor
Nuuo
37
CVEs
4
On KEV
0
New 30D
Products
NF9.8
Nvrmini2 Firmware
Nuuo
5 CVEs1 on KEV0 new
ND9.8
NVRmini Devices
NUUO
1 CVEs1 on KEV0 new
NF9.8
Nvrmini Firmware
Nuuo
1 CVEs1 on KEV0 new
ND9.8
NVRmini2 Devices
NUUO
1 CVEs1 on KEV0 new
N29.8
NVRmini 2
NUUO
8 CVEs0 on KEV0 new
NC9.8
Nuuo Cms
Nuuo
7 CVEs0 on KEV0 new
NV9.8
Nvrsolo
Nuuo
5 CVEs0 on KEV0 new
CA7.3
Camera
NUUO
2 CVEs0 on KEV0 new
NV9.8
Network Video Recorder Firmware
Nuuo
2 CVEs0 on KEV0 new
NF6.1
Nvrsolo Firmware
Nuuo
2 CVEs0 on KEV0 new
CR9.8
Crystal
Nuuo
1 CVEs0 on KEV0 new
NT9.8
Nt-4040 Titan Firmware
Nuuo
1 CVEs0 on KEV0 new
N29.8
Nvrmini 2 Firmware
Nuuo
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-1338 | CA Camera NUUO | 7.3 | Feb 16 | NUUO Camera handle_config.php print_file command injection |
| CVE-2016-15038 | N2 NVRmini 2 NUUO | 6.5 | Apr 1 | NUUO NVRmini 2 deletefile.php path traversal |
| CVE-2024-2995 | CA Camera NUUO | 5.4 | Mar 27 | NUUO Camera deletefile.php denial of service |
| CVE-2022-33119 | NF Nvrsolo Firmware Nuuo | 6.1 | Jun 21 | NUUO Network Video Recorder NVRsolo v03.06.02 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via login.php |
| CVE-2022-25521 | NV Network Video Recorder Firmware Nuuo | 9.8 | Mar 29 | NUUO v03.11.00 was discovered to contain access control issue |
| CVE-2022-23227 In wildKEV | NF Nvrmini2 Firmware Nuuo | 9.8 | Jan 14 | NUUO NVRmini2 Devices Missing Authentication Vulnerability |
| CVE-2021-45812 | NF Nvrsolo Firmware Nuuo | 6.1 | Dec 28 | NUUO Network Video Recorder NVRsolo 3.9.1 is affected by a Cross Site Scripting (XSS) vulnerability |
| CVE-2019-9653 | NV Network Video Recorder Firmware Nuuo | 9.8 | May 31 | NUUO Network Video Recorder Firmware 1.7.x through 3.3.x allows unauthenticated attackers to execute arbitrary commands via shell metacharacters to handle_load_config.php |
| CVE-2018-19864 | NF Nvrmini2 Firmware Nuuo | 9.8 | Dec 5 | NUUO NVRmini2 Network Video Recorder firmware through 3.9.1 allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow), resulting in ability… |
| CVE-2018-15716 | NF Nvrmini2 Firmware Nuuo | 8.8 | Nov 30 | NUUO NVRMini2 version 3.9.1 is vulnerable to authenticated remote command injection |
| CVE-2018-18982 | NC Nuuo Cms Nuuo | 8.8 | Nov 27 | NUUO CMS All versions 3.3 and prior the web server application allows injection of arbitrary SQL characters, which can be used to inject SQL into an executing statement and allow… |
| CVE-2018-17936 | NC Nuuo Cms Nuuo | 9.8 | Nov 27 | NUUO CMS All versions 3.3 and prior the application allows the upload of arbitrary files that can modify or overwrite configuration files to the server, which could allow remote… |
| CVE-2018-17934 | NC Nuuo Cms Nuuo | 9.8 | Nov 27 | NUUO CMS All versions 3.3 and prior the application allows external input to construct a pathname that is able to be resolved outside the intended directory |
| CVE-2018-17894 | NC Nuuo Cms Nuuo | 9.8 | Oct 12 | NUUO CMS all versions 3.1 and prior, The application creates default accounts that have hard-coded passwords, which could allow an attacker to gain privileged access |
| CVE-2018-17892 | NC Nuuo Cms Nuuo | 8.8 | Oct 12 | NUUO CMS all versions 3.1 and prior, The application implements a method of user account control that causes standard account security features to not be utilized as intended,… |
| CVE-2018-17890 | NC Nuuo Cms Nuuo | 9.8 | Oct 12 | NUUO CMS all versions 3.1 and prior, The application uses insecure and outdated software components for functionality, which could allow arbitrary code execution |
| CVE-2018-17888 | NC Nuuo Cms Nuuo | 9.8 | Oct 12 | NUUO CMS all versions 3.1 and prior, The application uses a session identification mechanism that could allow attackers to obtain the active session ID, which could allow… |
| CVE-2018-1150 | NF Nvrmini2 Firmware Nuuo | 7.3 | Sep 19 | NUUO's NVRMini2 3.8.0 and below contains a backdoor that would allow an unauthenticated remote attacker to take over user accounts if the file /tmp/moses exists |
| CVE-2018-1149 | NF Nvrmini2 Firmware Nuuo | 9.8 | Sep 19 | cgi_system in NUUO's NVRMini2 3.8.0 and below allows remote attackers to execute arbitrary code via crafted HTTP requests |
| CVE-2018-14933 In wildKEV | NF Nvrmini Firmware Nuuo | 9.8 | Aug 4 | NUUO NVRmini Devices OS Command Injection Vulnerability |
| CVE-2016-6553 | NT Nt-4040 Titan Firmware Nuuo | 9.8 | Jul 13 | Nuuo NT-4040 Titan, firmware NT-4040_01.07.0000.0015_1120, uses non-random default credentials of: admin:admin and localdisplay:111111 |
| CVE-2018-11523 | N2 Nvrmini 2 Firmware Nuuo | 9.8 | May 29 | upload.php on NUUO NVRmini 2 devices allows Arbitrary File Upload, such as upload of .php files |
| CVE-2016-5680 | N2 Nvrmini 2 Nuuo | 8.8 | Aug 31 | Stack-based buffer overflow in cgi-bin/cgi_main in NUUO NVRmini 2 1.7.6 through 3.0.0 and NETGEAR ReadyNAS Surveillance 1.1.2 allows remote authenticated users to execute… |
| CVE-2016-5679 | N2 Nvrmini 2 Nuuo | 8.8 | Aug 31 | cgi-bin/cgi_main in NUUO NVRmini 2 1.7.6 through 3.0.0 and NETGEAR ReadyNAS Surveillance 1.1.2 allows remote authenticated users to execute arbitrary commands via shell… |
| CVE-2016-5678 | NV Nvrsolo Nuuo | 9.8 | Aug 31 | NUUO NVRmini 2 1.0.0 through 3.0.0 and NUUO NVRsolo 1.0.0 through 3.0.0 have hardcoded root credentials, which allows remote attackers to obtain administrative access via… |
| CVE-2016-5677 | N2 Nvrmini 2 Nuuo | 7.5 | Aug 31 | NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 have a hardcoded qwe23622260 password for the nuuoeng… |
| CVE-2016-5676 | N2 Nvrmini 2 Nuuo | 7.5 | Aug 31 | cgi-bin/cgi_system in NUUO NVRmini 2 1.7.5 through 2.x, NUUO NVRsolo 1.7.5 through 2.x, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to reset the… |
| CVE-2016-5675 | N2 Nvrmini 2 Nuuo | 9.8 | Aug 31 | handle_daylightsaving.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, NUUO Crystal 2.2.1 through 3.2.0, and NETGEAR ReadyNAS Surveillance 1.1.1… |
| CVE-2016-5674 | N2 Nvrmini 2 Nuuo | 9.8 | Aug 31 | __debugging_center_utils___.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.7.5 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote… |