Vulnerability index

Browse CVEs

38 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Fd8136 Firmware MEDIUM 6.5
CVE-2026-35718

A path traversal vulnerability in the /admin/downloadMedias.cgi endpoint of VIVOTEK INC FD8136-VVTK firmware 0300a allows authenticated attackers to …

Mitigation only
Fix from $1,600 2026-06-02
Fd8136 Firmware MEDIUM 6.3
CVE-2026-35716

A stack-based buffer overflow in the motion_privacy.cgi binary in VIVOTEK FD8136 firmware FD8136-VVTK-0300a allows authenticated remote attackers to …

Mitigation only
Fix from $1,600 2026-06-02
Fd8136 Firmware HIGH 8.8
CVE-2026-30650

A post-authentication remote buffer overflow vulnerability exists in the /cgi-bin/admin/eventtask.cgi endpoint of the admin interface of Vivotek FD81…

Mitigation only
Fix from $1,950 2026-06-02
Fd8136 Firmware HIGH 8.8
CVE-2026-30652

A remote buffer overflow vulnerability exists in the /cgi-bin/dido/setdo.cgi endpoint of the admin interface of Vivotek FD8136 cameras running firmwa…

Mitigation only
Fix from $1,950 2026-06-02
Fd8136 Firmware HIGH 7.3
CVE-2026-30649

Buffer Overflow vulnerability in VIVOTEK INC FD8136-VVTK-0300a allows a remote attacker to execute arbitrary code via the set_getparam.cgi component

Mitigation only
Fix from $1,950 2026-06-02
Fd8136 Firmware MEDIUM 6.3
CVE-2026-35717

A stack-based buffer overflow in the export_language.cgi binary in VIVOTEK FD8136 firmware FD8136-VVTK-0300a allows authenticated remote attackers to…

Mitigation only
Fix from $1,600 2026-06-02
Ip7137 Firmware CRITICAL 9.8
CVE-2025-66050

Vivotek IP7137 camera with firmware version 0200a by default dos not require to provide any password when logging in as an administrator. While it is…

Mitigation only
Fix from $2,300 2026-01-09
Ip7137 Firmware HIGH 7.5
CVE-2025-66049

Vivotek IP7137 camera with firmware version 0200a is vulnerable to an information disclosure issue where live camera footage can be accessed through …

Mitigation only
Fix from $1,950 2026-01-09
Ip7137 Firmware HIGH 7.2
CVE-2025-66052

Vivotek IP7137 camera with firmware version 0200a is vulnerable to command injection. Parameter "system_ntpIt" used by "/cgi-bin/admin/setparam.cgi" …

Mitigation only
Fix from $1,950 2026-01-09
Ip7137 Firmware MEDIUM 6.5
CVE-2025-66051

Vivotek IP7137 camera with firmware version 0200a is vulnerable to path traversal. It is possible for an authenticated attacker to access resources b…

Mitigation only
Fix from $1,600 2026-01-09
Ib8367a Firmware CRITICAL 9.8
CVE-2024-7443

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical has been found in Vivotek IB8367A VVTK-0100b. Affected is the function getenv …

Mitigation only
Fix from $2,300 2024-08-03
Sd9364 Firmware CRITICAL 9.8
CVE-2024-7441EPSS 8%

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Vivotek SD9364 VVTK-0103f. It has been declared as critical. This vulnerability affects …

Mitigation only
Fix from $2,300 2024-08-03
Sd9364 Firmware CRITICAL 9.8
CVE-2024-7442

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Vivotek SD9364 VVTK-0103f. It has been rated as critical. This issue affects the functio…

Mitigation only
Fix from $2,300 2024-08-03
Cc8160 Firmware CRITICAL 9.8
CVE-2024-7440

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Vivotek CC8160 VVTK-0100d. It has been classified as critical. This affects the function…

Mitigation only
Fix from $2,300 2024-08-03
Cc8160 Firmware CRITICAL 9.8
CVE-2024-7439

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Vivotek CC8160 VVTK-0100d and classified as critical. Affected by this issue is the func…

Mitigation only
Fix from $2,300 2024-08-03
Camera Firmware CRITICAL 9.8
CVE-2024-26548

An issue in vivotek Network Camera v.FD8166A-VVTK-0204j allows a remote attacker to execute arbitrary code via a crafted payload to the upload_file.c…

Mitigation only
Fix from $2,300 2024-02-29
Pt7135 Firmware HIGH 8.8
CVE-2013-1598EPSS 20%

A Command Injection vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via the system.ntp parameter to the farseer.out binary file, wh…

No fix yet
Fix from $1,950 2020-01-24
Pt7135 Firmware MEDIUM 6.5
CVE-2013-1597EPSS 14%

A Directory Traversal vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via a specially crafted GET request, which could let a malici…

No fix yet
Fix from $1,600 2020-01-24
Pt7135 Firmware CRITICAL 9.8
CVE-2013-1595EPSS 42%

A Buffer Overflow vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via a specially crafted packet in the Authorization header field s…

No fix yet
Fix from $2,300 2020-01-24
Pt7135 Firmware MEDIUM 5.3
CVE-2013-1596EPSS 10%

An Authentication Bypass Vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via specially crafted RTSP packets to TCP port 554.

No fix yet
Fix from $1,600 2020-01-24
Pt7135 Firmware HIGH 7.5
CVE-2013-1594EPSS 7%

An Information Disclosure vulnerability exists via a GET request in Vivotek PT7135 IP Camera 0300a and 0400a due to wireless keys and 3rd party crede…

No fix yet
Fix from $1,950 2020-01-24
Ip7160 Firmware HIGH 7.5
CVE-2013-4985EPSS 9%

Multiple Vivotek IP Cameras remote authentication bypass that could allow access to the video stream

No fix yet
Fix from $1,950 2019-12-27
Camera HIGH 7.5
CVE-2019-14458

VIVOTEK IP Camera devices with firmware before 0x20x allow a denial of service via a crafted HTTP header.

Mitigation only
Fix from $1,950 2019-09-18
Camera CRITICAL 9.8
CVE-2019-10256

An authentication bypass vulnerability in VIVOTEK IPCam versions prior to 0x13a was found.

Mitigation only
Fix from $2,300 2019-09-10
Camera CRITICAL 9.8
CVE-2019-14457

VIVOTEK IP Camera devices with firmware before 0x20x have a stack-based buffer overflow via a crafted HTTP header.

Mitigation only
Fix from $2,300 2019-09-10
Fd8136 Firmware CRITICAL 9.8
CVE-2018-14495

Vivotek FD8136 devices allow Remote Command Injection, aka "another command injection vulnerability in our target device," a different issue than CVE…

No fix yet
Fix from $2,300 2019-07-10
Fd8136 Firmware CRITICAL 9.8
CVE-2018-14496

Vivotek FD8136 devices allow remote memory corruption and remote code execution because of a stack-based buffer overflow, related to sprintf, vlocal_…

No fix yet
Fix from $2,300 2019-07-10
Fd8136 Firmware CRITICAL 9.8
CVE-2018-14494

Vivotek FD8136 devices allow Remote Command Injection, related to BusyBox and wget. NOTE: the vendor sent a clarification on 2019-09-17 explaining th…

Mitigation only
Fix from $2,300 2019-07-10
Camera MEDIUM 6.1
CVE-2018-18005

Cross-site scripting in event_script.js in VIVOTEK Network Camera Series products with firmware 0x06x to 0x08x allows remote attackers to execute arb…

No fix yet
Fix from $1,600 2019-01-03
Camera MEDIUM 6.1
CVE-2018-18244

Cross-site scripting in syslog.html in VIVOTEK Network Camera Series products with firmware 0x06x to 0x08x allows remote attackers to execute arbitra…

No fix yet
Fix from $1,600 2019-01-03