GeoVision kayıtları
geovision üreticisine ait 27 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 2 · %7,4
- Silahlaştırılmış
- 2 · %7,4
- Pre-auth RCE
- 8
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- 249 gün
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')3
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-787 Out-of-bounds Write2
- CWE-276 Incorrect Default Permissions1
- CWE-287 Improper Authentication1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
27 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
78Bu hafta | CVE-2024-11120Silahlaştırılmış | GeoVision EOL devices - OS Command Injectiongeovision · gv-vs12 firmware · CWE-78 | Kritik9,8 | KEV | %28,3 | 14 Kas 2024 |
72Bu hafta | CVE-2024-6047Silahlaştırılmış | GeoVision EOL device - OS Command Injectiongeovision · gv-dsp lpr firmware · CWE-78 | Kritik9,8 | KEV | %10,0 | 17 Haz 2024 |
40Planlayın | CVE-2009-1092Kavram kanıtı | Use-after-free vulnerability in the LIVEAUDIO.LiveAudioCtrl.1 ActiveX control in LIVEAU~1.OCX 7.0 for GeoVision DVR systems allows remote atgeovision · liveaudio activex control · CWE-399 | Kritik9,3 | — | %8,8 | 25 Mar 2009 |
40Planlayın | CVE-2019-11064İstismar yok | A vulnerability of remote credential disclosure was discovered in Advan VD-1androvideo · vd 1 firmware · CWE-200 | Kritik9,8 | — | %1,9 | 28 Ağu 2019 |
40Planlayın | CVE-2020-3931İstismar yok | GeoVision Door Access Control Device - Buffer overflow vulnerabilitygeovision · gv-as210 firmware · CWE-120 | Kritik9,8 | — | %1,7 | 8 Tem 2020 |
39İzleyin | CVE-2023-23059İstismar yok | An issue was discovered in GeoVision GV-Edge Recording Manager 2.2.3.0 for windows, which contains improper permissions within the default igeovision · gv-edge recording manager · CWE-276 | Kritik9,8 | — | %1,1 | 4 May 2023 |
39İzleyin | CVE-2023-3638İstismar yok | GeoVision GV-ADR2701 Improper Authenticationgeovision · gv-adr2701 firmware · CWE-287 | Kritik9,8 | — | %0,7 | 19 Tem 2023 |
39İzleyin | CVE-2026-42370İstismar yok | GeoVision GV-VMS V20 WebCam Server Login stack overflow vulnerabilitygeovision · gv-vms firmware · CWE-787 | Kritik9,8 | — | %0,5 | 4 May 2026 |
39İzleyin | CVE-2026-42368İstismar yok | GeoVision LPC2011/LPC2211 Web Interface privilege escalation vulnerabilitygeovision · gv-lpc2011 firmware · CWE-266 | Kritik9,9 | — | %0,3 | 4 May 2026 |
37İzleyin | CVE-2009-0865Kavram kanıtı | Directory traversal vulnerability in the SnapShotToFile method in the GeoVision LiveX (aka LiveX_v8200) ActiveX control 8.1.2 and 8.2.0 in Lgeovision · livex activex control · CWE-22 | Yüksek8,8 | — | %5,5 | 10 Mar 2009 |
37İzleyin | CVE-2026-7161İstismar yok | GeoVision GV-IP Device Utility Device Authentication insufficient encryption vulnerabilitygeovision · gv-ip device utility · CWE-656 | Kritik9,3 | — | %0,2 | 4 May 2026 |
36İzleyin | CVE-2026-42364İstismar yok | GeoVision LPC2011/LPC2211 Web Interface / DdnsSetting.cgi OS command injection vulnerabilitygeovision · gv-lpc2011 firmware · CWE-78 | Yüksek8,8 | — | %1,6 | 4 May 2026 |
36İzleyin | CVE-2026-7372İstismar yok | GeoVision GV-VMS V20 WebCam Server Login stack overflow vulnerabilitygeovision · gv-vms firmware · CWE-787 | Kritik9,0 | — | %0,4 | 4 May 2026 |
31İzleyin | CVE-2019-13408İstismar yok | Advan VD-1 allows users to download arbitrary filesandrovideo · vd 1 firmware · CWE-23 | Yüksek7,5 | — | %1,9 | 28 Ağu 2019 |
30İzleyin | CVE-2005-1553İstismar yok | GeoVision Digital Video Surveillance System 6.04, 6.1 and 7.0 uses a weak encryption scheme to encrypt passwords, which allows remote attackgeovision · digital surveillance system | Yüksek7,5 | — | %1,0 | 14 May 2005 |
30İzleyin | CVE-2022-46070İstismar yok | GV-ASManager V6.0.1.0 contains a Local File Inclusion vulnerability in GeoWebServer via Path.geovision · gv-asmanager · CWE-94 | Yüksek7,5 | — | %0,4 | 11 Mar 2024 |
30İzleyin | CVE-2026-42365İstismar yok | GeoVision LPC2011/LPC2211 Web Interface guessable session cookie vulnerabilitygeovision · gv-lpc2011 firmware · CWE-341 | Yüksek7,5 | — | %0,3 | 4 May 2026 |
26İzleyin | CVE-2024-12553İstismar yok | GeoVision GV-ASManager Missing Authorization Information Disclosure Vulnerabilitygeovision · gv-asmanager · CWE-862 | Orta6,5 | — | %0,5 | 13 Ara 2024 |
26İzleyin | CVE-2026-42367İstismar yok | GeoVision LPC2011/LPC2211 Web Interface / ssi.cgi privilege escalation vulnerability via leak of Administrator credentialsgeovision · gv-lpc2011 firmware · CWE-522 | Orta6,5 | — | %0,2 | 4 May 2026 |
24İzleyin | CVE-2019-13407İstismar yok | Advan VD-1 has a reflected XSS vulnerability in page cgibin/ssi.cgiandrovideo · vd 1 firmware · CWE-79 | Orta6,1 | — | %1,0 | 28 Ağu 2019 |
24İzleyin | CVE-2026-42366İstismar yok | GeoVision LPC2011/LPC2211 Web Interface / ssi.cgi reflected cross-site scripting (XSS) vulnerabilitiesgeovision · gv-lpc2011 firmware · CWE-79 | Orta6,1 | — | %0,2 | 4 May 2026 |
24İzleyin | CVE-2026-7371İstismar yok | GeoVision LPC2011/LPC2211 Web Interface / ssi.cgi reflected cross-site scripting (XSS) vulnerabilitiesgeovision · gv-lpc2011 firmware · CWE-79 | Orta6,1 | — | %0,2 | 4 May 2026 |
21İzleyin | CVE-2009-5087Kavram kanıtı | Directory traversal vulnerability in geohttpserver in Geovision Digital Video Surveillance System 8.2 allows remote attackers to read arbitrgeovision · digital surveillance system · CWE-22 | Orta5,0 | — | %3,5 | 12 Eyl 2011 |
21İzleyin | CVE-2005-1552Kavram kanıtı | GeoVision Digital Video Surveillance System 6.04, 6.1 and 7.0, when set to create JPEG images, does not properly protect an image even when geovision · digital surveillance system | Orta5,0 | — | %3,3 | 14 May 2005 |
21İzleyin | CVE-2004-2101İstismar yok | The sysinfo script in GeoHttpServer allows remote attackers to cause a denial of service (crash) via a long pwd parameter, possibly triggerigeovision · geohttpserver | Orta5,0 | — | %1,8 | 31 Ara 2004 |
- CVE-2024-1112078Bu hafta
GeoVision EOL devices - OS Command Injection
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %28geovision · gv-vs12 firmware14 Kas 2024
- CVE-2024-604772Bu hafta
GeoVision EOL device - OS Command Injection
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %10geovision · gv-dsp lpr firmware17 Haz 2024
- CVE-2009-109240Planlayın
Use-after-free vulnerability in the LIVEAUDIO.LiveAudioCtrl.1 ActiveX control in LIVEAU~1.OCX 7.0 for GeoVision DVR systems allows remote at
KritikCVSS 9,3Kavram kanıtıEPSS %8geovision · liveaudio activex control25 Mar 2009
- CVE-2019-1106440Planlayın
A vulnerability of remote credential disclosure was discovered in Advan VD-1
KritikCVSS 9,8İstismar yokEPSS %1androvideo · vd 1 firmware28 Ağu 2019
- CVE-2020-393140Planlayın
GeoVision Door Access Control Device - Buffer overflow vulnerability
KritikCVSS 9,8İstismar yokEPSS %1geovision · gv-as210 firmware8 Tem 2020
- CVE-2023-2305939İzleyin
An issue was discovered in GeoVision GV-Edge Recording Manager 2.2.3.0 for windows, which contains improper permissions within the default i
KritikCVSS 9,8İstismar yokEPSS %1geovision · gv-edge recording manager4 May 2023
- CVE-2023-363839İzleyin
GeoVision GV-ADR2701 Improper Authentication
KritikCVSS 9,8İstismar yokEPSS %0geovision · gv-adr2701 firmware19 Tem 2023
- CVE-2026-4237039İzleyin
GeoVision GV-VMS V20 WebCam Server Login stack overflow vulnerability
KritikCVSS 9,8İstismar yokEPSS %0geovision · gv-vms firmware4 May 2026
- CVE-2026-4236839İzleyin
GeoVision LPC2011/LPC2211 Web Interface privilege escalation vulnerability
KritikCVSS 9,9İstismar yokEPSS %0geovision · gv-lpc2011 firmware4 May 2026
- CVE-2009-086537İzleyin
Directory traversal vulnerability in the SnapShotToFile method in the GeoVision LiveX (aka LiveX_v8200) ActiveX control 8.1.2 and 8.2.0 in L
YüksekCVSS 8,8Kavram kanıtıEPSS %5geovision · livex activex control10 Mar 2009
- CVE-2026-716137İzleyin
GeoVision GV-IP Device Utility Device Authentication insufficient encryption vulnerability
KritikCVSS 9,3İstismar yokEPSS %0geovision · gv-ip device utility4 May 2026
- CVE-2026-4236436İzleyin
GeoVision LPC2011/LPC2211 Web Interface / DdnsSetting.cgi OS command injection vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1geovision · gv-lpc2011 firmware4 May 2026
- CVE-2026-737236İzleyin
GeoVision GV-VMS V20 WebCam Server Login stack overflow vulnerability
KritikCVSS 9,0İstismar yokEPSS %0geovision · gv-vms firmware4 May 2026
- CVE-2019-1340831İzleyin
Advan VD-1 allows users to download arbitrary files
YüksekCVSS 7,5İstismar yokEPSS %1androvideo · vd 1 firmware28 Ağu 2019
- CVE-2005-155330İzleyin
GeoVision Digital Video Surveillance System 6.04, 6.1 and 7.0 uses a weak encryption scheme to encrypt passwords, which allows remote attack
YüksekCVSS 7,5İstismar yokEPSS %1geovision · digital surveillance system14 May 2005
- CVE-2022-4607030İzleyin
GV-ASManager V6.0.1.0 contains a Local File Inclusion vulnerability in GeoWebServer via Path.
YüksekCVSS 7,5İstismar yokEPSS %0geovision · gv-asmanager11 Mar 2024
- CVE-2026-4236530İzleyin
GeoVision LPC2011/LPC2211 Web Interface guessable session cookie vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0geovision · gv-lpc2011 firmware4 May 2026
- CVE-2024-1255326İzleyin
GeoVision GV-ASManager Missing Authorization Information Disclosure Vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0geovision · gv-asmanager13 Ara 2024
- CVE-2026-4236726İzleyin
GeoVision LPC2011/LPC2211 Web Interface / ssi.cgi privilege escalation vulnerability via leak of Administrator credentials
OrtaCVSS 6,5İstismar yokEPSS %0geovision · gv-lpc2011 firmware4 May 2026
- CVE-2019-1340724İzleyin
Advan VD-1 has a reflected XSS vulnerability in page cgibin/ssi.cgi
OrtaCVSS 6,1İstismar yokEPSS %1androvideo · vd 1 firmware28 Ağu 2019
- CVE-2026-4236624İzleyin
GeoVision LPC2011/LPC2211 Web Interface / ssi.cgi reflected cross-site scripting (XSS) vulnerabilities
OrtaCVSS 6,1İstismar yokEPSS %0geovision · gv-lpc2011 firmware4 May 2026
- CVE-2026-737124İzleyin
GeoVision LPC2011/LPC2211 Web Interface / ssi.cgi reflected cross-site scripting (XSS) vulnerabilities
OrtaCVSS 6,1İstismar yokEPSS %0geovision · gv-lpc2011 firmware4 May 2026
- CVE-2009-508721İzleyin
Directory traversal vulnerability in geohttpserver in Geovision Digital Video Surveillance System 8.2 allows remote attackers to read arbitr
OrtaCVSS 5,0Kavram kanıtıEPSS %3geovision · digital surveillance system12 Eyl 2011
- CVE-2005-155221İzleyin
GeoVision Digital Video Surveillance System 6.04, 6.1 and 7.0, when set to create JPEG images, does not properly protect an image even when
OrtaCVSS 5,0Kavram kanıtıEPSS %3geovision · digital surveillance system14 May 2005
- CVE-2004-210121İzleyin
The sysinfo script in GeoHttpServer allows remote attackers to cause a denial of service (crash) via a long pwd parameter, possibly triggeri
OrtaCVSS 5,0İstismar yokEPSS %1geovision · geohttpserver31 Ara 2004