Nuuo vulnerabilities

Products

• Nvrmini 2 8
• Cms 7
• Cms 7
• Nvrmini2 Firmware 5
• Nvrsolo 5
• Nvrmini2 3
• Camera 2
• Network Video Recorder Firmware 2
• Nvrsolo Firmware 2

Newest

• nuuo camera NUUO Camera handle_config.php print_file command injection CVE-2025-1338 Public exploit EPSS 51.1% 6.9 MediumFebruary 16, 2025
• nuuo nvrmini 2 NUUO NVRmini 2 deletefile.php path traversal CVE-2016-15038 6.5 MediumApril 1, 2024
• nuuo camera NUUO Camera deletefile.php denial of service CVE-2024-2995 5.4 MediumMarch 27, 2024
• nuuo nvrsolo firmware NUUO Network Video Recorder NVRsolo v03.06.02 was discovered to contain a reflected cross-site... CVE-2022-33119 6.1 MediumJune 21, 2022
• nuuo network video recorder firmware UNNO v03.11.00 was discovered to contain access control issue. CVE-2022-25521 9.8 CriticalMarch 29, 2022
• nuuo nvrmini2 devices, nvrmini2 firmware +1 more NUUO NVRmini2 through 3.11 allows an unauthenticated attacker to upload an encrypted TAR archive,... CVE-2022-23227 In KEV EPSS 48.5% 9.8 CriticalJanuary 14, 2022
• nuuo nvrsolo firmware NUUO Network Video Recorder NVRsolo 3.9.1 is affected by a Cross Site Scripting (XSS)... CVE-2021-45812 6.1 MediumDecember 28, 2021
• nuuo network video recorder firmware NUUO Network Video Recorder Firmware 1.7.x through 3.3.x allows unauthenticated attackers to... CVE-2019-9653 Public exploit EPSS 11.5% 9.8 CriticalMay 31, 2019
• nuuo nvrmini2 firmware NUUO NVRmini2 Network Video Recorder firmware through 3.9.1 allows remote attackers to execute... CVE-2018-19864 Public exploit EPSS 24.8% 9.8 CriticalDecember 5, 2018
• nuuo nvrmini2, nvrmini2 firmware +1 more NUUO NVRMini2 version 3.9.1 is vulnerable to authenticated remote command injection. An attacker... CVE-2018-15716 Public exploit EPSS 18.5% 8.8 HighNovember 30, 2018
• nuuo cms NUUO CMS All versions 3.3 and prior the web server application allows injection of arbitrary SQL... CVE-2018-18982 Public exploit EPSS 62.5% 8.8 HighNovember 27, 2018
• nuuo cms NUUO CMS All versions 3.3 and prior the application allows the upload of arbitrary files that can... CVE-2018-17936 Public exploit EPSS 15.3% 9.8 CriticalNovember 27, 2018
• nuuo cms NUUO CMS All versions 3.3 and prior the application allows external input to construct a pathname... CVE-2018-17934 EPSS 19.7% 9.8 CriticalNovember 27, 2018
• nuuo cms NUUO CMS all versions 3.1 and prior, The application creates default accounts that have hard... CVE-2018-17894 9.8 CriticalOctober 12, 2018
• nuuo cms NUUO CMS all versions 3.1 and prior, The application implements a method of user account control... CVE-2018-17892 8.8 HighOctober 12, 2018
• nuuo cms NUUO CMS all versions 3.1 and prior, The application uses insecure and outdated software... CVE-2018-17890 9.8 CriticalOctober 12, 2018
• nuuo cms NUUO CMS all versions 3.1 and prior, The application uses a session identification mechanism that... CVE-2018-17888 EPSS 29.6% 9.8 CriticalOctober 12, 2018
• nuuo nvrmini2, nvrmini2 firmware +1 more NUUO's NVRMini2 3.8.0 and below contains a backdoor that would allow an unauthenticated remote... CVE-2018-1150 7.3 HighSeptember 19, 2018
• nuuo nvrmini2, nvrmini2 firmware +1 more cgi_system in NUUO's NVRMini2 3.8.0 and below allows remote attackers to execute arbitrary code... CVE-2018-1149 EPSS 15.1% 9.8 CriticalSeptember 19, 2018
• nuuo nvrmini devices, nvrmini firmware +1 more upgrade_handle.php on NUUO NVRmini devices allows Remote Command Execution via shell... CVE-2018-14933 In KEVPublic exploit EPSS 94.8% 9.8 CriticalAugust 4, 2018
• nuuo nt-4040 titan, nt-4040 titan firmware +1 more Nuuo NT-4040 Titan, firmware NT-4040_01.07.0000.0015_1120, uses default credentials CVE-2016-6553 9.8 CriticalJuly 13, 2018
• nuuo nvrmini 2 firmware upload.php on NUUO NVRmini 2 devices allows Arbitrary File Upload, such as upload of .php files. CVE-2018-11523 Public exploit 9.8 CriticalMay 29, 2018
• netgear readynas surveillance, nuuo nvrmini 2 +1 more Stack-based buffer overflow in cgi-bin/cgi_main in NUUO NVRmini 2 1.7.6 through 3.0.0 and NETGEAR... CVE-2016-5680 Public exploit EPSS 16.8% 8.8 HighAugust 31, 2016
• netgear readynas surveillance, nuuo nvrmini 2 +1 more cgi-bin/cgi_main in NUUO NVRmini 2 1.7.6 through 3.0.0 and NETGEAR ReadyNAS Surveillance 1.1.2... CVE-2016-5679 Public exploit EPSS 14.1% 8.8 HighAugust 31, 2016
• nuuo nvrmini 2, nvrsolo +1 more NUUO NVRmini 2 1.0.0 through 3.0.0 and NUUO NVRsolo 1.0.0 through 3.0.0 have hardcoded root... CVE-2016-5678 Public exploit 9.8 CriticalAugust 31, 2016
• netgear readynas surveillance, nuuo nvrmini 2, nvrsolo +2 more NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, and NETGEAR ReadyNAS... CVE-2016-5677 Public exploit EPSS 12.0% 7.5 HighAugust 31, 2016
• netgear readynas surveillance, nuuo nvrmini 2, nvrsolo +2 more cgi-bin/cgi_system in NUUO NVRmini 2 1.7.5 through 2.x, NUUO NVRsolo 1.7.5 through 2.x, and... CVE-2016-5676 Public exploit EPSS 53.7% 7.5 HighAugust 31, 2016
• netgear readynas surveillance, nuuo crystal, nvrmini 2 +1 more +3 more handle_daylightsaving.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0... CVE-2016-5675 Public exploit EPSS 70.9% 9.8 CriticalAugust 31, 2016
• netgear readynas surveillance, nuuo nvrmini 2, nvrsolo +2 more __debugging_center_utils___.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.7.5 through... CVE-2016-5674 Public exploit EPSS 94.6% 9.8 CriticalAugust 31, 2016