Filtered by vendor Motioneye Project Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2022-25568 1 Motioneye Project 1 Motioneye 2024-11-21 7.5 High
MotionEye v0.42.1 and below allows attackers to access sensitive information via a GET request to /config/list. To exploit this vulnerability, a regular user password must be unconfigured.
CVE-2021-44255 2 Motioneye Project, Motioneyeos Project 2 Motioneye, Motioneyeos 2024-11-21 7.2 High
Authenticated remote code execution in MotionEye <= 0.42.1 and MotioneEyeOS <= 20200606 allows a remote attacker to upload a configuration backup file containing a malicious python pickle file which will execute arbitrary code on the server.