Skip to content
OpenAdvisories

Vendor

motioneye-project

6 known vulnerabilities.

Products

2 results · Clear filters · Feed

  • High 7.7

    motionEye's Absolute Path Traversal in Media File Handlers Allows Arbitrary File Read

    motionEye (mEye) is an online interface for a piece of software called "motion," which is a video surveillance program with motion detection. Versions prior to 0.44.0 contain an absolute path traversal vulnerability in multiple media file handlers that allows…

  • High 8.9

    motionEye vulnerable to RCE in add_camera Function Due to unsafe command execution

    motionEye is an online interface for the software motion, a video surveillance program with motion detection. In versions 0.43.1b1 through 0.43.1b3, using a constructed (camera) device path with the `add`/`add_camera` motionEye web API allows an attacker with…