CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
RIOT OS ethos Utility Stack-based Buffer Overflow Vulnerability (CVE-2026-22214) Security Advisory
[Affected Scope] ethos utility in RIOT OS versions up to and including 2026.01-devel-317
[Impact] Unauthenticated remote attackers can send crafted serial or TCP-framed input to corrupt memory, leading to application crashes or potential arbitrary code execution
[Mitigation] Apply the latest source code patches, or manually implement bounds checking in the ethos utility's frame parser and rebuild
RIOT OS tapslip6 Utility Stack-based Buffer Overflow Vulnerability (CVE-2026-22213) Security Advisory
[Affected Scope] RIOT OS versions up to and including 2026.01-devel-317 containing the tapslip6 utility
[Impact] Attackers can trigger a stack buffer overflow via crafted command-line arguments, leading to process crashes and potential arbitrary code execution
[Mitigation] Apply the latest source patches, replace unsafe string functions with snprintf, and restrict execution permissions on the tapslip6 binary
Hikvision IP Camera & NVR Web Server Remote Command Injection Vulnerability (CVE-2021-36260) Security Advisory
[Affected Scope] Web server software embedded in various Hikvision IP cameras and Network Video Recorders (NVRs)
[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges by sending specially crafted HTTP requests, leading to full device compromise
[Mitigation] Immediately upgrade to the latest patched firmware version provided by the vendor and restrict direct internet access to the devices
Dahua IP Camera and NVR Authentication Bypass Vulnerability (CVE-2021-33045) Security Advisory
[Affected Scope] Certain Dahua IP cameras, NVRs, XVRs, and thermal cameras
[Impact] Attackers can bypass identity authentication during the login process by sending crafted malicious packets, gaining full administrative control
[Mitigation] Immediately apply the latest firmware updates from the vendor and restrict direct internet access to the devices
Dahua IP Camera and NVR/DVR Authentication Bypass Vulnerability (CVE-2021-33044) Security Advisory
[Affected Scope] Certain Dahua IP cameras, NVRs, DVRs, and associated firmware versions
[Impact] Attackers can completely bypass the identity authentication process during login and gain full administrative control of the device
[Mitigation] Immediately apply the latest firmware updates provided by the vendor and restrict external network access to the devices
Tenda AC7 / AC9 / AC10 Routers goform/setUsbUnload Remote Command Injection Vulnerability (CVE-2018-14558) Analysis and Mitigation Guide
[Affected Scope] Tenda AC7 (firmware through V15.03.06.44_CN), AC9 (firmware through V15.03.05.19(6318)_CN), and AC10 (firmware through V15.03.06.23_CN)
[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with root privileges by sending a crafted HTTP request, leading to complete device compromise
[Mitigation] Apply the latest official firmware updates immediately, disable WAN-side remote management, and restrict access to the web interface
NUUO NVRmini Remote Command Execution Vulnerability Analysis and Mitigation Guide (CVE-2018-14933)
[Affected Scope] NUUO NVRmini network video recorder devices
[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges by sending crafted HTTP requests
[Mitigation] Apply the latest firmware updates, restrict external internet access to the management interface, and implement firewall rules