Recent Items
Command Argument Injection Vulnerability in Cosminexus Component Container
Published on Tue, 08 Sep 2026 08:15:00 +0000
OS Command Injection Vulnerability in Cosminexus Component Container
Published on Tue, 08 Sep 2026 08:02:13 +0000
XXE Vulnerability in Cosminexus Component Container
Published on Tue, 08 Sep 2026 07:56:36 +0000
Deserialization of Untrusted Data Vulnerability in Cosminexus Component Container
Published on Tue, 08 Sep 2026 07:47:28 +0000
An authentication bypass vulnerability exists in the WebGUI of Series UNIVERGE IX-R/IX-V. A user could bypass authentication and execute arbitrary CLI commands by tampering with WebGUI messages and sending them to the device via internet.
Published on Mon, 07 Sep 2026 00:48:01 +0000
PALLET CONTROL products contain an incorrect default permission vulnerability, which may allow a local attacker to execute arbitrary code with SYSTEM privileges on the affected product.
Published on Fri, 04 Sep 2026 09:04:08 +0000
XING CPTrans-ME-X contains a Use of Hard-coded Password (CWE-259). Anyone with the knowledge of the credential may log in to the affected device.
Published on Fri, 04 Sep 2026 06:31:56 +0000
XING CPTrans-ME-X contains a Use of Default Password (CWE-1393). Anyone with the knowledge of the credential may log in to the affected device.
Published on Fri, 04 Sep 2026 06:31:50 +0000
XING CPTrans-ME-X contains an Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497). Sensitive system information may be leaked.
Published on Fri, 04 Sep 2026 06:31:44 +0000
XING CPTrans-ME-X contains an OS Command Injection (CWE-78). Unauthenticated OS command may be injected.
Published on Fri, 04 Sep 2026 06:31:37 +0000