CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
PTZOptics PT30X Camera Authentication Bypass and Information Disclosure (CVE-2024-8956) Vulnerability & Mitigation Guide
[Affected Scope] PTZOptics PT30X-SDI and PT30X-NDI camera devices running firmware versions prior to 6.3.40.
[Impact] Remote, unauthenticated attackers can bypass authentication by omitting the HTTP Authorization header, leading to the exposure of sensitive configuration data, password hashes, and unauthorized configuration modifications.
[Mitigation] Immediately upgrade the camera firmware to version 6.3.40 or higher and restrict external internet access to the device.
SolarWinds Web Help Desk Hardcoded Credentials Vulnerability (CVE-2024-28987) Critical Security Advisory
[Affected Scope] SolarWinds Web Help Desk (WHD) 12.8.3 and prior versions
[Impact] Remote unauthenticated attackers can exploit hardcoded credentials to access internal functionality and modify sensitive data.
[Mitigation] Immediately apply the official SolarWinds 12.8.3 Hotfix 2 or later, and restrict external network access.