Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 6

Export CSV
CVE-2026-42368

GeoVision LPC2011/LPC2211 Web Interface privilege escalation vulnerability

A privilege escalation vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted HTTP request can lead to execute priviledged operation. An attacker can visit a webpage to trigger this vulnerability.

CVSS 3.1 · 9.9 Critical EPSS < 1% KEV · Not listed
Vendors
Geovision Geovision Inc.
Products
Gv-lpc2011 Gv-lpc2011 Firmware Gv-lpc2211 and 2 more
CVE-2026-42367

GeoVision LPC2011/LPC2211 Web Interface / ssi.cgi privilege escalation vulnerability via leak of Administrator credentials

A privilege escalation vulnerability exists in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted HTTP request can lead to credentials leak. An attacker can visit a webpage to trigger this vulnerability.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Geovision Geovision Inc.
Products
Gv-lpc2011 Gv-lpc2011 Firmware Gv-lpc2211 and 2 more
CVE-2026-42365

GeoVision LPC2011/LPC2211 Web Interface guessable session cookie vulnerability

A guessable session cookie vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted series of HTTP requests can lead to an authentication bypas. An attacker can bruteforce session cookies to trigger this vulnerability.

CVSS 3.1 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Geovision Geovision Inc.
Products
Gv-lpc2011 Gv-lpc2011 Firmware Gv-lpc2211 and 2 more
CVE-2026-42364

GeoVision LPC2011/LPC2211 Web Interface / DdnsSetting.cgi OS command injection vulnerability

An os command injection vulnerability exists in the DdnsSetting.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted DDNS configuration can lead to arbitrary command execution. An attacker can modify a configuration value to trigger this vulnerability.

CVSS 3.1 · 9.9 Critical EPSS 1.7% KEV · Not listed
Vendors
Geovision Geovision Inc.
Products
Gv-lpc2011 Gv-lpc2011 Firmware Gv-lpc2211 and 2 more
CVE-2026-42366

GeoVision LPC2011/LPC2211 Web Interface / ssi.cgi reflected cross-site scripting (XSS) vulnerabilities

Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted malicious url can lead to an arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed
Vendors
Geovision Geovision Inc.
Products
Gv-lpc2011 Gv-lpc2011 Firmware Gv-lpc2211 and 2 more
CVE-2026-7371

GeoVision LPC2011/LPC2211 Web Interface / ssi.cgi reflected cross-site scripting (XSS) vulnerabilities

Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted malicious url can lead to an arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability. Reflected XXS via the error message for requesting non-existing page.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed
Vendors
Geovision Geovision Inc.
Products
Gv-lpc2011 Gv-lpc2011 Firmware Gv-lpc2211 and 2 more