Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-18755 1 Geovision Inc. 1 Asmanager 2026-08-05 7.3 High
A DLL hijacking vulnerability in GeoVision GV-ASManager allows a local attacker with write access to an unsafe search directory to execute arbitrary code. By placing a crafted dynamic-link library (DLL) file into the application search path prior to the legitimate library, the malicious code is loaded and executed under the security privileges of the GV-ASManager process.
CVE-2026-7841 2 Geovision, Geovision Inc. 2 Gv-asmanager, Asmanager 2026-05-06 8.8 High
A remote code execution vulnerability exists in Notification Settings on GeoVision GV-ASWeb 6.2.0. An authenticated user with System Setting permissions can execute arbitrary commands on the server by sending a crafted HTTP POST request to the ASWebCommon.srf backend endpoint to bypass the frontend restrictions.