Browse CVEs

CRITICAL 9.9 CVE-2026-42368 A privilege escalation vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted HTTP request ca… Gv Lpc2011 Firmware Mitigation only Fix from $2,3002026-05-04 CRITICAL 9.8 CVE-2026-42370 A stack overflow vulnerability exists in the WebCam Server Login functionality of GeoVision GV-VMS V20 20.0.2. A specially crafted HTTP request can l… Gv Vms Firmware 21.0.0+ Fix from $2,3002026-05-04 CRITICAL 9.3 CVE-2026-7161 An insufficient encryption vulnerability exists in the Device Authentication functionality of GeoVision GV-IP Device Utility 9.0.5. Listening to broa… Gv Ip Device Utility Mitigation only Fix from $2,3002026-05-04 CRITICAL 9.0 CVE-2026-7372 A stack overflow vulnerability exists in the WebCam Server Login functionality of GeoVision GV-VMS V20 20.0.2. A specially crafted HTTP request can l… Gv Vms Firmware 21.0.0+ Fix from $2,3002026-05-04 MEDIUM 6.1 CVE-2026-7371 Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A… Gv Lpc2011 Firmware Mitigation only Fix from $1,6002026-05-04 HIGH 8.8 CVE-2026-42364 An os command injection vulnerability exists in the DdnsSetting.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted DDNS configu… Gv Lpc2011 Firmware Mitigation only Fix from $1,9502026-05-04 HIGH 7.5 CVE-2026-42365 A guessable session cookie vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted series of H… Gv Lpc2011 Firmware Mitigation only Fix from $1,9502026-05-04 MEDIUM 6.5 CVE-2026-42367 A privilege escalation vulnerability exists in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted HTTP … Gv Lpc2011 Firmware Mitigation only Fix from $1,6002026-05-04 MEDIUM 6.1 CVE-2026-42366 Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A… Gv Lpc2011 Firmware Mitigation only Fix from $1,6002026-05-04 MEDIUM 6.5 CVE-2024-12553 GeoVision GV-ASManager Missing Authorization Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive i… Gv Asmanager Mitigation only Fix from $1,6002024-12-13 CRITICAL 9.8 CVE-2024-11120 KEVEPSS 29% Certain EOL GeoVision devices have an OS Command Injection vulnerability. Unauthenticated remote attackers can exploit this vulnerability to inject a… Gv Vs12 Firmware Mitigation only Fix from $2,3002024-11-15 CRITICAL 9.8 CVE-2024-6047 KEVEPSS 10% Certain EOL GeoVision devices fail to properly filter user input for the specific functionality. Unauthenticated remote attackers can exploit this vu… Gv Dsp Lpr Firmware Mitigation only Fix from $2,3002024-06-17 HIGH 7.5 CVE-2022-46070 GV-ASManager V6.0.1.0 contains a Local File Inclusion vulnerability in GeoWebServer via Path. Gv Asmanager Mitigation only Fix from $1,9502024-03-11 CRITICAL 9.8 CVE-2023-3638 In GeoVision GV-ADR2701 cameras, an attacker could edit the login response to access the web application. Gv Adr2701 Firmware No fix yet Fix from $2,3002023-07-19 CRITICAL 9.8 CVE-2023-23059 An issue was discovered in GeoVision GV-Edge Recording Manager 2.2.3.0 for windows, which contains improper permissions within the default installati… Gv Edge Recording Manager Mitigation only Fix from $2,3002023-05-04 CRITICAL 9.8 CVE-2020-3931 Buffer overflow exists in Geovision Door Access Control device family, an unauthenticated remote attacker can execute arbitrary command. Gv As210 Firmware 1.10 / 1.32+ Fix from $2,3002020-07-08 MEDIUM 5.0 CVE-2009-5087 Directory traversal vulnerability in geohttpserver in Geovision Digital Video Surveillance System 8.2 allows remote attackers to read arbitrary files… Digital Surveillance System No fix yet Fix from $1,6002011-09-12 HIGH 9.3 CVE-2009-1092EPSS 9% Use-after-free vulnerability in the LIVEAUDIO.LiveAudioCtrl.1 ActiveX control in LIVEAU~1.OCX 7.0 for GeoVision DVR systems allows remote attackers t… Liveaudio Activex Control No fix yet Fix from $1,9502009-03-25 HIGH 8.8 CVE-2009-0865EPSS 6% Directory traversal vulnerability in the SnapShotToFile method in the GeoVision LiveX (aka LiveX_v8200) ActiveX control 8.1.2 and 8.2.0 in LIVEX_~1.O… Livex Activex Control No fix yet Fix from $1,9502009-03-10 HIGH 7.5 CVE-2005-1553 GeoVision Digital Video Surveillance System 6.04, 6.1 and 7.0 uses a weak encryption scheme to encrypt passwords, which allows remote attackers to ob… Digital Surveillance System Patch available Fix from $1,9502005-05-14 MEDIUM 5.0 CVE-2005-1552 GeoVision Digital Video Surveillance System 6.04, 6.1 and 7.0, when set to create JPEG images, does not properly protect an image even when a passwor… Digital Surveillance System No fix yet Fix from $1,6002005-05-14 MEDIUM 5.0 CVE-2004-2100 GeoHttpServer, when configured to authenticate users, allows remote attackers to bypass authentication and access unauthorized files via a URL that c… Geohttpserver Mitigation only Fix from $1,6002004-12-31 MEDIUM 5.0 CVE-2004-2101 The sysinfo script in GeoHttpServer allows remote attackers to cause a denial of service (crash) via a long pwd parameter, possibly triggering a buff… Geohttpserver No fix yet Fix from $1,6002004-12-31