TI-2024-26838 CVE-2024-39950 · GHSA-x56v-vwr6-4gfg
Stack-based buffer overflow in Dahua NVR4XXX and IPC-HX8XXX
Priority MEDIUM 49
A vulnerability has been found in Dahua products.
Vulnerabilities
58 records
TI-2024-26837 CVE-2024-39949 · GHSA-vx79-rj6m-r29g
Reachable assertion in Dahua NVR4XXX
Priority MEDIUM 40
A vulnerability has been found in Dahua products.
TI-2024-26836 CVE-2024-39948 · GHSA-94cv-f96h-hxfx
NULL pointer dereference in Dahua NVR4XXX
Priority MEDIUM 40
A vulnerability has been found in Dahua products.
TI-2024-26835 CVE-2024-39947 · GHSA-mj68-5w84-cr6g
A vulnerability has been found in Dahua products.After obtaining the ordinary user's…
Priority LOW 29
A vulnerability has been found in Dahua products.After obtaining the ordinary user's username and password, the attacker can send a carefully crafted data packet to the interface with vulnerabilities, causing the device…
TI-2024-26834 CVE-2024-39946 · GHSA-fvg9-f4xc-69j2
A vulnerability has been found in Dahua products.After obtaining the administrator's…
Priority LOW 32
A vulnerability has been found in Dahua products.After obtaining the administrator's username and password, the attacker can send a carefully crafted data packet to the interface with vulnerabilities, causing device init…
TI-2024-26833 CVE-2024-39945 · GHSA-rr22-7m4r-xf6r
A vulnerability has been found in Dahua products.
Priority LOW 23
A vulnerability has been found in Dahua products.
TI-2024-26832 CVE-2024-39944 · GHSA-9vf3-7mcj-9xqp
Resource allocation without limits in Dahua IPC-HX8XXX and NVR4XXX
Priority MEDIUM 40
A vulnerability has been found in Dahua products.Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to crash.
TI-2023-03585 CVE-2023-3836 · GHSA-v896-jp39-6pqh
Dahua Smart Park Management unrestricted upload
Priority HIGH 80
A vulnerability classified as critical was found in Dahua Smart Park Management up to 20230713.
TI-2023-02925 CVE-2023-3121 · GHSA-r9xh-6hxc-484v
Dahua Smart Parking Management image server-side request forgery
Priority LOW 22
A vulnerability has been found in Dahua Smart Parking Management up to 20230528 and classified as problematic.
TI-2022-12715 CVE-2022-30564 · GHSA-4qcf-7phg-fpvq
Improper access control in…
Priority LOW 30
Some Dahua embedded products have a vulnerability of unauthorized modification of the device timestamp.
TI-2022-22400 CVE-2022-45434 · GHSA-824h-6hr6-ghh3
Resource allocation without limits in DSS Professional, DSS Express…
Priority LOW 28
Some Dahua software products have a vulnerability of unauthenticated un-throttled ICMP requests on remote DSS Server.
TI-2022-22399 CVE-2022-45433 · GHSA-68hv-qf49-hr4m
Missing authentication in DSS Professional, DSS Express…
Priority LOW 19
Some Dahua software products have a vulnerability of unauthenticated traceroute host from remote DSS Server.
TI-2022-22398 CVE-2022-45432 · GHSA-2pf6-r9w4-v7hm
Missing authentication in DSS Professional、DSS…
Priority LOW 31
Some Dahua software products have a vulnerability of unauthenticated search for devices.
TI-2022-22397 CVE-2022-45431 · GHSA-jm5g-mv3f-pjfw
Improper access control in DSS Professional, DSS Express…
Priority MEDIUM 40
Some Dahua software products have a vulnerability of unauthenticated restart of remote DSS Server.
TI-2022-22396 CVE-2022-45430 · GHSA-r8rm-jw25-4h55
Improper access control in DSS Professional, DSS Express…
Priority LOW 18
Some Dahua software products have a vulnerability of unauthenticated enable or disable SSHD service.
TI-2022-22395 CVE-2022-45429 · GHSA-72jg-fgx7-vxp4
Server-side request forgery in DSS Professional, DSS Express…
Priority MEDIUM 40
Some Dahua software products have a vulnerability of server-side request forgery (SSRF).
TI-2022-22394 CVE-2022-45428 · GHSA-4xvh-3f9w-p34q
Some Dahua software products have a vulnerability of sensitive information leakage.
Priority LOW 15
Some Dahua software products have a vulnerability of sensitive information leakage.
TI-2022-22393 CVE-2022-45427 · GHSA-hc4m-x5qf-wgq5
Unrestricted file upload in DSS Professional, DSS Express…
Priority LOW 35
Some Dahua software products have a vulnerability of unrestricted upload of file.
TI-2022-22392 CVE-2022-45426 · GHSA-4w2r-846c-v6v2
Some Dahua software products have a vulnerability of unrestricted download of file.
Priority LOW 30
Some Dahua software products have a vulnerability of unrestricted download of file.
TI-2022-22391 CVE-2022-45425 · GHSA-7qrc-wm75-hvh3
Hard-coded credentials in DSS Professional, DSS Express…
Priority MEDIUM 40
Some Dahua software products have a vulnerability of using of hard-coded cryptographic key.
TI-2022-22390 CVE-2022-45424 · GHSA-7jhg-5v84-7gqc
Missing authentication in DSS Professional, DSS Express…
Priority LOW 31
Some Dahua software products have a vulnerability of unauthenticated request of AES crypto key.
TI-2022-22389 CVE-2022-45423 · GHSA-gqwx-q2cx-gx28
Missing authentication in DSS Professional, DSS Express…
Priority MEDIUM 40
Some Dahua software products have a vulnerability of unauthenticated request of MQTT credentials.
TI-2022-12714 CVE-2022-30563 · GHSA-fm79-xjf8-74gg
When an attacker uses a man-in-the-middle attack to sniff the request packets with…
Priority LOW 34
When an attacker uses a man-in-the-middle attack to sniff the request packets with success logging in through ONVIF, he can log in to the device by replaying the user's login packet.
TI-2022-12713 CVE-2022-30562 · GHSA-hr2w-874h-3jjj
Open redirect in IPCHDBW2XXX IPCHFW2XXX ASI7XXXX
Priority LOW 23
If the user enables the https function on the device, an attacker can modify the user’s request data packet through a man-in-the-middle attack ,Injection of a malicious URL in the Host: header of the HTTP Request results…
TI-2022-12712 CVE-2022-30561 · GHSA-hrch-w2hr-7wx7
When an attacker uses a man-in-the-middle attack to sniff the request packets with…
Priority LOW 28
When an attacker uses a man-in-the-middle attack to sniff the request packets with success logging in, the attacker could log in to the device by replaying the user's login packet.