NUUO vulnerabilities

CVEs per yearBy the year they were published

1. 20188
2. 20242
3. 20251

Newest CVEs

• CVE-2025-1338

  NUUO Camera handle_config.php print_file command injection

  NUUO · Camera

  Medium6.9
• CVE-2016-15038

  NUUO NVRmini 2 deletefile.php path traversal

  NUUO · NVRmini 2

  Medium6.5
• CVE-2024-2995

  NUUO Camera deletefile.php denial of service

  NUUO · Camera

  Medium5.4
• CVE-2018-15716

  NUUO NVRMini2 version 3.9.1 is vulnerable to authenticated remote command injection. An attacker can send crafted requests to upgrade_handle.php to execute OS…

  NUUO · NUUO NVRMini2

  High8.8
• CVE-2018-17894

  NUUO CMS all versions 3.1 and prior, The application creates default accounts that have hard-coded passwords, which could allow an attacker to gain privileged…

  NUUO · NUUO CMS

  Critical9.8
• CVE-2018-17892

  NUUO CMS all versions 3.1 and prior, The application implements a method of user account control that causes standard account security features to not be…

  NUUO · NUUO CMS

  High8.8
• CVE-2018-17890

  NUUO CMS all versions 3.1 and prior, The application uses insecure and outdated software components for functionality, which could allow arbitrary code…

  NUUO · NUUO CMS

  Critical9.8
• CVE-2018-17888

  NUUO CMS all versions 3.1 and prior, The application uses a session identification mechanism that could allow attackers to obtain the active session ID, which…

  NUUO · NUUO CMS

  Critical9.8
• CVE-2018-1150

  NUUO's NVRMini2 3.8.0 and below contains a backdoor that would allow an unauthenticated remote attacker to take over user accounts if the file /tmp/moses…

  NUUO · NUUO NVRMini2

  High7.3
• CVE-2018-1149

  cgi_system in NUUO's NVRMini2 3.8.0 and below allows remote attackers to execute arbitrary code via crafted HTTP requests.

  NUUO · NUUO NVRMini2

  Critical9.8