Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Zhejiang Dahua Technology Co., Ltd. Clear all filters
TI-2023-06677 CVE-2023-7309 · GHSA-44w2-cgm4-695p

Dahua Smart Park Integrated Management Platform Front-End Arbitrary File Upload

Priority MEDIUM 50

A path traversal vulnerability exists in the Dahua Smart Park Integrated Management Platform (also referred to as the Dahua Smart Campus Integrated Management Platform), affecting the SOAP-based GIS bitmap upload interfa…

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00826 Published 2025-08-27 No fix listed CWE-22
TI-2024-12990 CVE-2024-13985 · GHSA-gqv2-wjhw-h44w

Dahua EIMS capture_handle.action RCE

Priority HIGH 65

A command injection vulnerability in Dahua EIMS versions prior to 2240008 allows unauthenticated remote attackers to execute arbitrary system commands via the capture_handle.action interface.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.15095 Published 2025-08-27 Fixed in 2240008 CWE-78
TI-2025-24227 CVE-2025-34059 · GHSA-264g-23wx-93mv

Dahua Smart Cloud Gateway Registration Management Platform SQL Injection

Priority LOW 38

An SQL injection vulnerability exists in the Dahua Smart Cloud Gateway Registration Management Platform via the username parameter in the /index.php/User/doLogin endpoint.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00505 Published 2025-07-01 No fix listed CWE-200