https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T06:02:32.331958+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-19317 cnvd-2018-19317 2026-10-05T06:02:32.335719+00:00 cnvd-2018-19317 https://cve.radiocsirt.org/vuln/euvd-2026-172275 EUVD-2026-172275 2026-10-05T06:02:32.335750+00:00 EUVD-2026-172275 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1149 fkie_cve-2018-1149 2026-10-05T06:02:32.335765+00:00

cgi_system in NUUO's NVRMini2 3.8.0 and below allows remote attackers to execute arbitrary code via crafted HTTP requests.

 https://cve.radiocsirt.org/vuln/ghsa-wrq3-jg5x-9pp3 GHSA-wrq3-jg5x-9pp3 2026-10-05T06:02:32.335792+00:00

cgi_system in NUUO's NVRMini2 3.8.0 and below allows remote attackers to execute arbitrary code via crafted HTTP requests.

 https://cve.radiocsirt.org/vuln/gsd-2018-1149 gsd-2018-1149 2026-10-05T06:02:32.335807+00:00 gsd-2018-1149 https://cve.radiocsirt.org/vuln/icsa-18-284-01 ICSA-18-284-01 — NUUO NVRmini2 and NVRsolo 2026-10-05T06:02:32.335818+00:00

A stack-based buffer overflow vulnerability has been identified in which there is no bounds check when a string is passed into an input buffer. As such, a remote unauthenticated attacker can overflow the stack buffer, which could allow remote code execution.CVE-2018-1149 has been assigned to this vulnerability. A CVSS v3 base score of 10.0 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H). In some cases, files exist on the file system that, when utilized, allow an unauthenticated remote attacker to gain access to and modify sensitive user information, which could allow unauthenticated remote code execution.CVE-2018-1150 has been assigned to this vulnerability. A CVSS v3 base score of 10.0 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).