Canon Network Camera Server VB101 vulnerabilities

8 CVEs affecting Canon Network Camera Server VB101, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-2680, published 2007-05-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2006-1185, published 2006-04-11. High severity, CVSS 7.5. EPSS: 70.3% chance of exploitation in the next 30 days. Unspecified vulnerability in Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via certain invalid HTML that causes memory corruption.
CVE-2006-1188, published 2006-04-11. High severity, CVSS 7.5. EPSS: 57.6% chance of exploitation in the next 30 days. Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via HTML elements with a certain crafted tag, which leads to memory corruption.
CVE-2006-1192, published 2006-04-11. Low severity, CVSS 2.6. EPSS: 31.7% chance of exploitation in the next 30 days. Microsoft Internet Explorer 5.01 through 6 allows remote attackers to conduct phishing attacks by spoofing the address bar and other parts of the trust UI via unknown methods that allow "window…
CVE-2006-7065, published 2007-03-02. Medium severity, CVSS 5.0. EPSS: 20.9% chance of exploitation in the next 30 days. Microsoft Internet Explorer allows remote attackers to cause a denial of service (crash) via an IFRAME with a certain XML file and XSL stylesheet that triggers a crash in mshtml.dll when a refresh is…
CVE-2006-3354, published 2006-07-06. Medium severity, CVSS 5.0. EPSS: 17.1% chance of exploitation in the next 30 days. Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by setting the Filter property of an ADODB.Recordset ActiveX object to certain values multiple times, which…
CVE-2006-2900, published 2006-06-07. Medium severity, CVSS 4.0. EPSS: 12.6% chance of exploitation in the next 30 days. Internet Explorer 6 allows user-assisted remote attackers to read arbitrary files by tricking a user into typing the characters of the target filename in a text box and using the OnKeyDown,…
CVE-2005-4827, published 2005-12-31. High severity, CVSS 7.5. EPSS: 11.2% chance of exploitation in the next 30 days. Internet Explorer 6.0, and possibly other versions, allows remote attackers to bypass the same origin security policy and make requests outside of the intended domain by calling open on an…
CVE-2007-2680, published 2007-05-15. Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the management interface in Canon Network Camera Server VB100 and VB101 with firmware 3.0 R69 and earlier, and VB150 with firmware 1.1 R39 and earlier,…