Vulnerability index

Browse CVEs

77 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Ur32l Firmware HIGH 8.8
CVE-2023-22653EPSS 6%

An OS command injection vulnerability exists in the vtysh_ubus tcpdump_start_cb functionality of Milesight UR32L v32.3.0.5. A specially crafted HTTP …

No fix yet
Fix from $1,950 2023-07-06
Ur32l Firmware HIGH 8.8
CVE-2023-24018

A stack-based buffer overflow vulnerability exists in the libzebra.so.0.0.0 security_decrypt_password functionality of Milesight UR32L v32.3.0.5. A s…

No fix yet
Fix from $1,950 2023-07-06
Milesightvpn HIGH 8.1
CVE-2023-22371

An os command injection vulnerability exists in the liburvpn.so create_private_key functionality of Milesight VPN v2.0.2. A specially-crafted network…

No fix yet
Fix from $1,950 2023-07-06
Ur32l Firmware HIGH 8.1
CVE-2023-23546

A misconfiguration vulnerability exists in the urvpn_client functionality of Milesight UR32L v32.3.0.5. A specially-crafted man-in-the-middle attack …

No fix yet
Fix from $1,950 2023-07-06
Ur32l Firmware HIGH 8.1
CVE-2023-24019

A stack-based buffer overflow vulnerability exists in the urvpn_client http_connection_readcb functionality of Milesight UR32L v32.3.0.5. A specially…

No fix yet
Fix from $1,950 2023-07-06
Ur32l Firmware HIGH 7.5
CVE-2023-23571

An access violation vulnerability exists in the eventcore functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to…

No fix yet
Fix from $1,950 2023-07-06
Milesightvpn HIGH 7.5
CVE-2023-23907

A directory traversal vulnerability exists in the server.js start functionality of Milesight VPN v2.0.2. A specially-crafted network request can lead…

No fix yet
Fix from $1,950 2023-07-06
Ur32l Firmware HIGH 7.2
CVE-2023-22659

An os command injection vulnerability exists in the libzebra.so change_hostname functionality of Milesight UR32L v32.3.0.5. A specially-crafted netwo…

No fix yet
Fix from $1,950 2023-07-06
Ur32l Firmware HIGH 7.2
CVE-2023-23550

An OS command injection vulnerability exists in the ys_thirdparty user_delete functionality of Milesight UR32L v32.3.0.5. A specially crafted network…

No fix yet
Fix from $1,950 2023-07-06
Ur32l Firmware MEDIUM 6.5
CVE-2023-23547

A directory traversal vulnerability exists in the luci2-io file-export mib functionality of Milesight UR32L v32.3.0.5. A specially crafted network re…

No fix yet
Fix from $1,600 2023-07-06
Milesightvpn CRITICAL 9.8
CVE-2023-22319

A sql injection vulnerability exists in the requestHandlers.js LoginAuth functionality of Milesight VPN v2.0.2. A specially-crafted network request c…

No fix yet
Fix from $2,300 2023-07-06
Ur32l Firmware HIGH 8.8
CVE-2023-22299

An OS command injection vulnerability exists in the vtysh_ubus _get_fw_logs functionality of Milesight UR32L v32.3.0.5. A specially crafted network r…

No fix yet
Fix from $1,950 2023-07-06
Ur32l Firmware HIGH 7.2
CVE-2023-22306

An OS command injection vulnerability exists in the libzebra.so bridge_group functionality of Milesight UR32L v32.3.0.5. A specially crafted network …

No fix yet
Fix from $1,950 2023-07-06
Ur32l Firmware HIGH 7.2
CVE-2023-22365

An OS command injection vulnerability exists in the ys_thirdparty check_system_user functionality of Milesight UR32L v32.3.0.5. A specially crafted s…

Mitigation only
Fix from $1,950 2023-07-06
Ncr\/camera Firmware CRITICAL 9.8
CVE-2023-32220

Milesight NCR/camera version 71.8.0.6-r5 allows authentication bypass through an unspecified method.

No fix yet
Fix from $2,300 2023-06-12
Ncr\/camera Firmware HIGH 7.5
CVE-2023-24505

Milesight NCR/camera version 71.8.0.6-r5 discloses sensitive information through an unspecified request.

No fix yet
Fix from $1,950 2023-05-08
Ncr\/camera Firmware HIGH 7.5
CVE-2023-24506

Milesight NCR/camera version 71.8.0.6-r5 exposes credentials through an unspecified request.

Mitigation only
Fix from $1,950 2023-05-08