Browse CVEs

MEDIUM 6.5 CVE-2026-35718 A path traversal vulnerability in the /admin/downloadMedias.cgi endpoint of VIVOTEK INC FD8136-VVTK firmware 0300a allows authenticated attackers to … Fd8136 Firmware Mitigation only Fix from $1,6002026-06-02 MEDIUM 6.3 CVE-2026-35716 A stack-based buffer overflow in the motion_privacy.cgi binary in VIVOTEK FD8136 firmware FD8136-VVTK-0300a allows authenticated remote attackers to … Fd8136 Firmware Mitigation only Fix from $1,6002026-06-02 HIGH 8.8 CVE-2026-30650 A post-authentication remote buffer overflow vulnerability exists in the /cgi-bin/admin/eventtask.cgi endpoint of the admin interface of Vivotek FD81… Fd8136 Firmware Mitigation only Fix from $1,9502026-06-02 HIGH 8.8 CVE-2026-30652 A remote buffer overflow vulnerability exists in the /cgi-bin/dido/setdo.cgi endpoint of the admin interface of Vivotek FD8136 cameras running firmwa… Fd8136 Firmware Mitigation only Fix from $1,9502026-06-02 HIGH 7.3 CVE-2026-30649 Buffer Overflow vulnerability in VIVOTEK INC FD8136-VVTK-0300a allows a remote attacker to execute arbitrary code via the set_getparam.cgi component Fd8136 Firmware Mitigation only Fix from $1,9502026-06-02 MEDIUM 6.3 CVE-2026-35717 A stack-based buffer overflow in the export_language.cgi binary in VIVOTEK FD8136 firmware FD8136-VVTK-0300a allows authenticated remote attackers to… Fd8136 Firmware Mitigation only Fix from $1,6002026-06-02 CRITICAL 9.8 CVE-2025-66050 Vivotek IP7137 camera with firmware version 0200a by default dos not require to provide any password when logging in as an administrator. While it is… Ip7137 Firmware Mitigation only Fix from $2,3002026-01-09 HIGH 7.5 CVE-2025-66049 Vivotek IP7137 camera with firmware version 0200a is vulnerable to an information disclosure issue where live camera footage can be accessed through … Ip7137 Firmware Mitigation only Fix from $1,9502026-01-09 HIGH 7.2 CVE-2025-66052 Vivotek IP7137 camera with firmware version 0200a is vulnerable to command injection. Parameter "system_ntpIt" used by "/cgi-bin/admin/setparam.cgi" … Ip7137 Firmware Mitigation only Fix from $1,9502026-01-09 MEDIUM 6.5 CVE-2025-66051 Vivotek IP7137 camera with firmware version 0200a is vulnerable to path traversal. It is possible for an authenticated attacker to access resources b… Ip7137 Firmware Mitigation only Fix from $1,6002026-01-09 CRITICAL 9.8 CVE-2024-7443 ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical has been found in Vivotek IB8367A VVTK-0100b. Affected is the function getenv … Ib8367a Firmware Mitigation only Fix from $2,3002024-08-03 CRITICAL 9.8 CVE-2024-7441EPSS 8% ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Vivotek SD9364 VVTK-0103f. It has been declared as critical. This vulnerability affects … Sd9364 Firmware Mitigation only Fix from $2,3002024-08-03 CRITICAL 9.8 CVE-2024-7442 ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Vivotek SD9364 VVTK-0103f. It has been rated as critical. This issue affects the functio… Sd9364 Firmware Mitigation only Fix from $2,3002024-08-03 CRITICAL 9.8 CVE-2024-7440 ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Vivotek CC8160 VVTK-0100d. It has been classified as critical. This affects the function… Cc8160 Firmware Mitigation only Fix from $2,3002024-08-03 CRITICAL 9.8 CVE-2024-7439 ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Vivotek CC8160 VVTK-0100d and classified as critical. Affected by this issue is the func… Cc8160 Firmware Mitigation only Fix from $2,3002024-08-03 CRITICAL 9.8 CVE-2024-26548 An issue in vivotek Network Camera v.FD8166A-VVTK-0204j allows a remote attacker to execute arbitrary code via a crafted payload to the upload_file.c… Camera Firmware Mitigation only Fix from $2,3002024-02-29 HIGH 8.8 CVE-2020-11950 VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x (and before XXXXX-VVTK-0XXXX_Beta2) allows an authenticated user to upload and execute a scri… Cc9381 Hv Firmware after 0222g Fix from $1,9502020-05-28 MEDIUM 6.5 CVE-2020-11949 testserver.cgi of the web service on VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x (and before XXXXX-VVTK-0XXXX_Beta2) allows an authentica… Cc9381 Hv Firmware after 0222g Fix from $1,6002020-05-28 HIGH 8.8 CVE-2013-1598EPSS 20% A Command Injection vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via the system.ntp parameter to the farseer.out binary file, wh… Pt7135 Firmware No fix yet Fix from $1,9502020-01-24 MEDIUM 6.5 CVE-2013-1597EPSS 14% A Directory Traversal vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via a specially crafted GET request, which could let a malici… Pt7135 Firmware No fix yet Fix from $1,6002020-01-24 CRITICAL 9.8 CVE-2013-1595EPSS 42% A Buffer Overflow vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via a specially crafted packet in the Authorization header field s… Pt7135 Firmware No fix yet Fix from $2,3002020-01-24 MEDIUM 5.3 CVE-2013-1596EPSS 10% An Authentication Bypass Vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via specially crafted RTSP packets to TCP port 554. Pt7135 Firmware No fix yet Fix from $1,6002020-01-24 HIGH 7.5 CVE-2013-1594EPSS 7% An Information Disclosure vulnerability exists via a GET request in Vivotek PT7135 IP Camera 0300a and 0400a due to wireless keys and 3rd party crede… Pt7135 Firmware No fix yet Fix from $1,9502020-01-24 HIGH 7.5 CVE-2013-4985EPSS 9% Multiple Vivotek IP Cameras remote authentication bypass that could allow access to the video stream Ip7160 Firmware No fix yet Fix from $1,9502019-12-27 HIGH 7.5 CVE-2019-14458 VIVOTEK IP Camera devices with firmware before 0x20x allow a denial of service via a crafted HTTP header. Camera Mitigation only Fix from $1,9502019-09-18 CRITICAL 9.8 CVE-2019-10256 An authentication bypass vulnerability in VIVOTEK IPCam versions prior to 0x13a was found. Camera Mitigation only Fix from $2,3002019-09-10 CRITICAL 9.8 CVE-2019-14457 VIVOTEK IP Camera devices with firmware before 0x20x have a stack-based buffer overflow via a crafted HTTP header. Camera Mitigation only Fix from $2,3002019-09-10 CRITICAL 9.8 CVE-2018-14495 Vivotek FD8136 devices allow Remote Command Injection, aka "another command injection vulnerability in our target device," a different issue than CVE… Fd8136 Firmware No fix yet Fix from $2,3002019-07-10 CRITICAL 9.8 CVE-2018-14496 Vivotek FD8136 devices allow remote memory corruption and remote code execution because of a stack-based buffer overflow, related to sprintf, vlocal_… Fd8136 Firmware No fix yet Fix from $2,3002019-07-10 CRITICAL 9.8 CVE-2018-14494 Vivotek FD8136 devices allow Remote Command Injection, related to BusyBox and wget. NOTE: the vendor sent a clarification on 2019-09-17 explaining th… Fd8136 Firmware Mitigation only Fix from $2,3002019-07-10