Browse CVEs

HIGH 8.8 CVE-2023-22653EPSS 6% An OS command injection vulnerability exists in the vtysh_ubus tcpdump_start_cb functionality of Milesight UR32L v32.3.0.5. A specially crafted HTTP … Ur32l Firmware No fix yet Fix from $1,9502023-07-06 HIGH 8.8 CVE-2023-24018 A stack-based buffer overflow vulnerability exists in the libzebra.so.0.0.0 security_decrypt_password functionality of Milesight UR32L v32.3.0.5. A s… Ur32l Firmware No fix yet Fix from $1,9502023-07-06 HIGH 8.1 CVE-2023-22371 An os command injection vulnerability exists in the liburvpn.so create_private_key functionality of Milesight VPN v2.0.2. A specially-crafted network… Milesightvpn No fix yet Fix from $1,9502023-07-06 HIGH 8.1 CVE-2023-23546 A misconfiguration vulnerability exists in the urvpn_client functionality of Milesight UR32L v32.3.0.5. A specially-crafted man-in-the-middle attack … Ur32l Firmware No fix yet Fix from $1,9502023-07-06 HIGH 8.1 CVE-2023-24019 A stack-based buffer overflow vulnerability exists in the urvpn_client http_connection_readcb functionality of Milesight UR32L v32.3.0.5. A specially… Ur32l Firmware No fix yet Fix from $1,9502023-07-06 HIGH 7.5 CVE-2023-23571 An access violation vulnerability exists in the eventcore functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to… Ur32l Firmware No fix yet Fix from $1,9502023-07-06 HIGH 7.5 CVE-2023-23907 A directory traversal vulnerability exists in the server.js start functionality of Milesight VPN v2.0.2. A specially-crafted network request can lead… Milesightvpn No fix yet Fix from $1,9502023-07-06 HIGH 7.2 CVE-2023-22659 An os command injection vulnerability exists in the libzebra.so change_hostname functionality of Milesight UR32L v32.3.0.5. A specially-crafted netwo… Ur32l Firmware No fix yet Fix from $1,9502023-07-06 HIGH 7.2 CVE-2023-23550 An OS command injection vulnerability exists in the ys_thirdparty user_delete functionality of Milesight UR32L v32.3.0.5. A specially crafted network… Ur32l Firmware No fix yet Fix from $1,9502023-07-06 MEDIUM 6.5 CVE-2023-23547 A directory traversal vulnerability exists in the luci2-io file-export mib functionality of Milesight UR32L v32.3.0.5. A specially crafted network re… Ur32l Firmware No fix yet Fix from $1,6002023-07-06 CRITICAL 9.8 CVE-2023-22319 A sql injection vulnerability exists in the requestHandlers.js LoginAuth functionality of Milesight VPN v2.0.2. A specially-crafted network request c… Milesightvpn No fix yet Fix from $2,3002023-07-06 HIGH 8.8 CVE-2023-22299 An OS command injection vulnerability exists in the vtysh_ubus _get_fw_logs functionality of Milesight UR32L v32.3.0.5. A specially crafted network r… Ur32l Firmware No fix yet Fix from $1,9502023-07-06 HIGH 7.2 CVE-2023-22306 An OS command injection vulnerability exists in the libzebra.so bridge_group functionality of Milesight UR32L v32.3.0.5. A specially crafted network … Ur32l Firmware No fix yet Fix from $1,9502023-07-06 HIGH 7.2 CVE-2023-22365 An OS command injection vulnerability exists in the ys_thirdparty check_system_user functionality of Milesight UR32L v32.3.0.5. A specially crafted s… Ur32l Firmware Mitigation only Fix from $1,9502023-07-06 CRITICAL 9.8 CVE-2023-32220 Milesight NCR/camera version 71.8.0.6-r5 allows authentication bypass through an unspecified method. Ncr\/camera Firmware No fix yet Fix from $2,3002023-06-12 HIGH 7.5 CVE-2023-24505 Milesight NCR/camera version 71.8.0.6-r5 discloses sensitive information through an unspecified request. Ncr\/camera Firmware No fix yet Fix from $1,9502023-05-08 HIGH 7.5 CVE-2023-24506 Milesight NCR/camera version 71.8.0.6-r5 exposes credentials through an unspecified request. Ncr\/camera Firmware Mitigation only Fix from $1,9502023-05-08