Videoflow Digital Video Protection
Approved changes feed: RSS · Atom
cpe:2.3:a:videoflow_ltd.:videoflow_digital_video_protection:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Videoflow Ltd. (b1099373-83eb-5f7d-9e97-77fbb2f23616) |
|---|---|
| Product | Videoflow Digital Video Protection (a1621487-70b9-5497-b02e-45081909c071) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-25311 |
vulnerable | 2026-06-08 05:11:29.764929 |
VideoFlow Digital Video Protection DVP 2.10 Authenticated Directory Traversal
MEDIUM (6.5)
VideoFlow Digital Video Protection DVP 2.10 contains an authenticated directory traversal vulnerability that allows attackers with valid credentials to disclose arbitrary files by injecting path traversal sequences in the ID parameter. Attackers can submit requests to downloadsys.pl, download_xml.pl, download.pl, downloadmib.pl, or downloadFile.pl with directory traversal payloads to read sensitive system files like /etc/passwd.
Published: 2026-04-29T19:25:45.764Z
Updated: 2026-07-28T01:46:42.731Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-25310 |
vulnerable | 2026-06-08 05:11:29.764569 |
VideoFlow Digital Video Protection DVP 2.10 - Authenticated Remote Code Execution
MEDIUM (4.3)
VideoFlow Digital Video Protection DVP 2.10 contains an authenticated remote code execution vulnerability that allows authenticated attackers to execute arbitrary system commands by exploiting a cross-site request forgery flaw in the web management interface. Attackers with valid credentials can leverage the CSRF vulnerability to inject and execute system commands through the Tools > System > Shell interface, gaining root-level access to the device.
Published: 2026-04-29T19:25:44.920Z
Updated: 2026-07-28T01:46:42.029Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.