Approved changes feed: RSS · Atom

cpe:2.3:a:geovision_inc.:gv-lpc2011_lpc2211:v1.20:*:linux:*:*:*:*:*

part: a version: v1.20 update: *

VendorGeovision Inc. (1f9b8475-73fe-5d5d-9d88-a1e8ba8ee9f7)
ProductGv Lpc2011 Lpc2211 (ac8cb5d8-e3a4-59f9-860f-22b71e276e35)
Editionlinux
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-7371 not_vulnerable 2026-06-08 08:08:57.126528 GeoVision LPC2011/LPC2211 Web Interface / ssi.cgi reflected cross-site scripting (XSS) vulnerabilities
HIGH (7.4)
Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted malicious url can lead to an arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability. Reflected XXS via the error message for requesting non-existing page.
Published: 2026-05-04T00:43:05.061Z
Updated: 2026-05-04T13:43:31.083Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-42367 not_vulnerable 2026-06-08 08:03:16.228739 GeoVision LPC2011/LPC2211 Web Interface / ssi.cgi privilege escalation vulnerability via leak of Administrator credentials
MEDIUM (6.5)
A privilege escalation vulnerability exists in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted HTTP request can lead to credentials leak. An attacker can visit a webpage to trigger this vulnerability.
Published: 2026-05-04T00:43:37.647Z
Updated: 2026-05-05T12:44:07.467Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-42366 not_vulnerable 2026-06-08 08:03:16.227599 GeoVision LPC2011/LPC2211 Web Interface / ssi.cgi reflected cross-site scripting (XSS) vulnerabilities
HIGH (7.4)
Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted malicious url can lead to an arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability.
Published: 2026-05-04T00:42:39.182Z
Updated: 2026-05-04T12:59:22.360Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.