Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2018-14933 1 Nuuo 2 Nvrmini, Nvrmini Firmware 2025-11-07 9.8 Critical
upgrade_handle.php on NUUO NVRmini devices allows Remote Command Execution via shell metacharacters in the uploaddir parameter for a writeuploaddir command.
CVE-2018-11523 1 Nuuo 2 Nvrmini 2, Nvrmini 2 Firmware 2024-11-21 N/A
upload.php on NUUO NVRmini 2 devices allows Arbitrary File Upload, such as upload of .php files.