Vulnerabilities (CVE)

Filtered by vendor Vivotek Subscribe
Filtered by product Camera
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-18004 1 Vivotek 1 Camera 2020-08-24 5.0 MEDIUM 5.3 MEDIUM
Incorrect Access Control in mod_inetd.cgi in VIVOTEK Network Camera Series products with firmware before XXXXXX-VVTK-0X09a allows remote attackers to enable arbitrary system services via a URL parameter.
CVE-2018-18005 1 Vivotek 1 Camera 2019-01-14 4.3 MEDIUM 6.1 MEDIUM
Cross-site scripting in event_script.js in VIVOTEK Network Camera Series products with firmware 0x06x to 0x08x allows remote attackers to execute arbitrary JavaScript via a URL query string parameter.
CVE-2018-18244 1 Vivotek 1 Camera 2019-01-14 4.3 MEDIUM 6.1 MEDIUM
Cross-site scripting in syslog.html in VIVOTEK Network Camera Series products with firmware 0x06x to 0x08x allows remote attackers to execute arbitrary JavaScript code via an HTTP Referer Header.