Zerof

zerof

4 CVEs • 2 products

Products (2)

Click to collapse

Toggle

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-25323 1Zerof 1Web Server Jun 17, 2026 Feb 18, 2022 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 ZEROF Web Server 2.0 allows /admin.back XSS.
CVE-2022-25322 1Zerof 1Web Server Jun 17, 2026 Feb 18, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 ZEROF Web Server 2.0 allows /HandleEvent SQL Injection.
CVE-2021-30176 1Zerof 1Expert Jun 17, 2026 Apr 13, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The ZEROF Expert pro/2.0 application for mobile devices allows SQL Injection via the Authorization header to the /v2/devices/add endpoint.
CVE-2021-30175 1Zerof 1Web Server Jun 17, 2026 Apr 13, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 ZEROF Web Server 1.0 (April 2021) allows SQL Injection via the /HandleEvent endpoint for the login page.