Vulnerabilities (CVE)
Yack CVE helps teams search and track vulnerabilities.
TOTAL
358,413 CVE
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
PCS DEXICON 3.4.1 allows XSS via the loginName parameter in login_action.jsp. |
1Cayintech 1Smp Pro4 Firmware Jun 17, 2026 Jan 13, 2020 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered on Cayin SMP-PRO4 devices. They allow image_preview.html?filename= reflected XSS. |
1Cayintech 1Smp Pro4 Firmware Jun 17, 2026 Jan 13, 2020 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 An issue was discovered on Cayin SMP-PRO4 devices. A user can discover a saved password by viewing the URL after a Connection String Test. This password is shown in the webpass parameter of a media_folder.cgi?apply_mode=...Show more |
A privilege escalation issue was discovered in the postUser function in HashBrown CMS through 1.3.3. An editor user can change the password hash of an admin user's account, or otherwise reconfigure that account. |
A remote code execution issue was discovered in HashBrown CMS through 1.3.3. Server/Entity/Deployer/GitDeployer.js has a Service.AppService.exec call that mishandles the URL, repository, username, and password. |
Tableau Server installations configured with Site-Specific SAML that allows the APIs to be used by unauthenticated users. If exploited, this could allow a malicious user to configure Site-Specific SAML settings and could...Show more |
A sensitive information disclosure vulnerability in Tableau Server 10.5, 2018.x, 2019.x, 2020.x released before June 26, 2020, could allow access to sensitive information in log files. |
A Denial of Service vulnerability in MuleSoft Mule CE/EE 3.8.x, 3.9.x, and 4.x released before April 7, 2020, could allow remote attackers to submit data which can lead to resource exhaustion. |
1Blackberry 1Unified Endpoint Manager Jun 17, 2026 Oct 14, 2020 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 An improper input validation vulnerability in the UEM Core of BlackBerry UEM version(s) 12.13.0, 12.12.1a QF2 (and earlier), and 12.11.1 QF3 (and earlier) could allow an attacker to potentially cause a Denial of Service...Show more |
1Blackberry 1Qnx Software Development Platform Jun 17, 2026 Aug 12, 2020 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 An information disclosure and remote code execution vulnerability in the slinger web server of the BlackBerry QNX Software Development Platform versions 6.4.0 to 6.6.0 could allow an attacker to potentially read arbitrar...Show more |
1Zte 3Zxhn E8810 Firmware Zxhn E8820 FirmwareZxhn E8822 FirmwareJun 17, 2026 Dec 21, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 ZTE E8810/E8820/E8822 series routers have an information leak vulnerability, which is caused by hard-coded MQTT service access credentials on the device. The remote attacker could use this credential to connect to the MQ...Show more |
1Zte 3Zxhn E8810 Firmware Zxhn E8820 FirmwareZxhn E8822 FirmwareJun 17, 2026 Dec 21, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 ZTE E8810/E8820/E8822 series routers have an MQTT DoS vulnerability, which is caused by the failure of the device to verify the validity of abnormal messages. A remote attacker could connect to the MQTT server and send a...Show more |
A ZXELINK wireless controller has a SQL injection vulnerability. A remote attacker does not need to log in. By sending malicious SQL statements, because the device does not properly filter parameters, successful use can...Show more |
1Zte 2Zxhn F670l Firmware Zxhn Z500 FirmwareJun 17, 2026 Nov 19, 2020 N/A· v4 3.5 LOW· v3 2.7 LOW· v2 Some ZTE devices have input verification vulnerabilities. The devices support configuring a static prefix through the web management page. The restriction of the front-end code can be bypassed by constructing a POST requ...Show more |
A ZTE product is impacted by an information leak vulnerability. An attacker could use this vulnerability to obtain the authentication password of the handheld terminal and access the device illegally for operation. This...Show more |
A ZTE product is impacted by an XSS vulnerability. The vulnerability is caused by the lack of correct verification of client data in the WEB module. By inserting malicious scripts into the web module, a remote attacker c...Show more |
1Zte 1Zxone 19700 Snpe Firmware Jun 17, 2026 Oct 5, 2020 N/A· v4 9.8 CRITICAL· v3 5.0 MEDIUM· v2 A ZTE product is impacted by the improper access control vulnerability. Due to lack of an authentication protection mechanism in the program, attackers could use this vulnerability to gain access right through brute-forc...Show more |
A ZTE product is impacted by the cryptographic issues vulnerability. The encryption algorithm is not properly used, so remote attackers could use this vulnerability for account credential enumeration attack or brute-forc...Show more |
1Zte 1Zxr10 2800 4 Almpufb(low) Firmware Jun 17, 2026 Sep 1, 2020 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 A ZTE product has a DoS vulnerability. Because the equipment couldn’t distinguish the attack packets and normal packets with valid http links, the remote attackers could use this vulnerability to cause the equipment WEB/...Show more |
1Zte 3R5300g4 Firmware R5500g4 FirmwareR8500g4 FirmwareJun 17, 2026 Jul 20, 2020 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 The server management software module of ZTE has a storage XSS vulnerability. The attacker inserts some attack codes through the foreground login page, which will cause the user to execute the predefined malicious script...Show more |
1Zte 3R5300g4 Firmware R5500g4 FirmwareR8500g4 FirmwareJun 17, 2026 Jul 20, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The server management software module of ZTE has an authentication issue vulnerability, which allows users to skip the authentication of the server and execute some commands for high-level users. This affects: <R5300G4V0...Show more |
1Zte 1Netnumen U31 R10 Firmware Jun 17, 2026 Jun 24, 2020 N/A· v4 8.0 HIGH· v3 5.2 MEDIUM· v2 The version V12.17.20T115 of ZTE U31R20 product is impacted by a design error vulnerability. An attacker could exploit the vulnerability to log in to the FTP server to tamper with the password, and illegally download, mo...Show more |
All versions up to 10.06 of ZTEMarket APK are impacted by an information leak vulnerability. Due to Activity Component exposure users can exploit this vulnerability to get the private cookie and execute silent installati...Show more |
There is an input validation vulnerability in a PON terminal product of ZTE, which supports the creation of WAN connections through WEB management pages. The front-end limits the length of the WAN connection name that is...Show more |
ZTE's SDON controller is impacted by the resource management error vulnerability. When RPC is frequently called by other applications in the case of mass traffic data in the system, it will result in no response for a lo...Show more |