https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-27232.htmlhttps://patchthecve.com/cve/CVE-2021-27232.htmlWed, 17 Jun 2026 03:44:30 +0000HIGH 8.8: The RTSPLive555.dll ActiveX control in Pelco Digital Sentry Server 7.18.72.11464 has a SetCameraConnectionParameter stack-based buffer overflow. This can be exploited by a remote attacker to potentially execute arbitrary attacker-supplied code. The victim would have to visit a malicious webpage usinhttps://patchthecve.com/cve/CVE-2021-27197.htmlhttps://patchthecve.com/cve/CVE-2021-27197.htmlWed, 17 Jun 2026 03:44:27 +0000HIGH 8.1: DSUtility.dll in Pelco Digital Sentry Server before 7.19.67 has an arbitrary file write vulnerability. The AppendToTextFile method doesn't check if it's being called from the application or from a malicious user. The vulnerability is triggered when a remote attacker crafts an HTML page (e.g., with "https://patchthecve.com/cve/CVE-2021-27184.htmlhttps://patchthecve.com/cve/CVE-2021-27184.htmlWed, 17 Jun 2026 03:44:25 +0000HIGH 7.5: Pelco Digital Sentry Server 7.18.72.11464 has an XML External Entity vulnerability (exploitable via the DTD parameter entities technique), resulting in disclosure and retrieval of arbitrary data on the affected node via an out-of-band (OOB) attack. The vulnerability is triggered when input passed tohttps://patchthecve.com/cve/CVE-2018-7840.htmlhttps://patchthecve.com/cve/CVE-2018-7840.htmlWed, 17 Jun 2026 02:03:50 +0000HIGH 7.8: A Uncontrolled Search Path Element (CWE-427) vulnerability exists in VideoXpert OpsCenter versions prior to 3.1 which could allow an attacker to cause the system to call an incorrect DLL.