ONEKEY

Latest CVEs · RSS

• CVE-2025-10364 2025-09-12 · CVSS 9.3
  The Evertz SDVN 3080ipx-10G is a High Bandwidth Ethernet Switching Fabric for Video Application. This device exposes a web management interface on port 80. This
• CVE-2025-10365 2025-09-12 · CVSS 9.3
  The Evertz SDVN 3080ipx-10G is a High Bandwidth Ethernet Switching Fabric for Video Application. This device exposes a web management interface on port 80. This
• CVE-2025-5113 2025-06-02 · CVSS 8.6
  The Diviotec professional series exposes a web interface. One endpoint is vulnerable to arbitrary command injection and hardcoded passwords are used.
• CVE-2025-4010 2025-06-02 · CVSS 8.6
  The Netcom NTC 6200 and NWL 222 series expose a web interface to be configured and set up by operators. Multiple endpoints of the web interface are vulnerable t
• CVE-2025-4009 2025-05-28 · CVSS 9.3
  The Evertz SDVN 3080ipx-10G is a High Bandwidth Ethernet Switching Fabric for Video Application. This device exposes a web management interface on port 80. This
• CVE-2025-4008 2025-05-21 · CVSS 8.7
  The Meteobridge web interface let meteobridge administrator manage their weather station data collection and administer their meteobridge system through a web a
• CVE-2024-6199 2025-04-25 · CVSS 7.7
  An unauthenticated attacker on the WAN interface, with the ability to intercept Dynamic DNS (DDNS) traffic between DDNS services and the modem, could manipulate
• CVE-2024-6198 2025-04-25 · CVSS 7.7
  The device exposes a web interface on ports TCP/3030 and TCP/9882. This web service runs lighttpd, which implements the “SNORE” interface. This interface is aff
• CVE-2024-11666 2024-11-24 · CVSS 9.0
  Affected devices beacon to eCharge cloud infrastructure asking if there are any command they should run. This communication is established over an insecure chan
• CVE-2024-11665 2024-11-24 · CVSS 8.8
  Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in hardy-barth cph2_echarge_firmware allows OS Command Injecti
• CVE-2024-5035 2024-05-27 · CVSS 8.8
  The affected device expose a network service called "rftest" that is vulnerable to unauthenticated command injection on ports TCP/8888, TCP/8889, and TCP/8890. 
• CVE-2024-4999 2024-05-16 · CVSS 9.4
  A vulnerability in the web-based management interface of multiple Ligowave devices could allow an authenticated remote attacker to execute arbitrary commands wi
• CVE-2024-3871 2024-04-16 · CVSS 9.8
  The Delta Electronics DVW-W02W2-E2 devices expose a web administration interface to users. This interface implements multiple features that are affected by comm
• CVE-2023-0862 2023-02-16 · CVSS 7.2
  The NetModule NSRW web administration interface is vulnerable to path traversals, which could lead to arbitrary file uploads and deletion. By uploading maliciou
• CVE-2023-0861 2023-02-16 · CVSS 7.2
  NetModule NSRW web administration interface executes an OS command constructed with unsanitized user input. A successful exploit could allow an authenticated us
• CVE-2023-0593 2023-01-31 · CVSS 5.5
  A path traversal vulnerability affects yaffshiv YAFFS filesystem extractor. By crafting a malicious YAFFS file, an attacker could force yaffshiv to write outsid
• CVE-2023-0592 2023-01-31 · CVSS 5.5
  A path traversal vulnerability affects jefferson's JFFS2 filesystem extractor. By crafting malicious JFFS2 files, attackers could force jefferson to write outsi
• CVE-2023-0591 2023-01-31 · CVSS 5.5
  ubireader_extract_files is vulnerable to path traversal when run against specifically crafted UBIFS files, allowing the attacker to overwrite files outside of
• CVE-2022-4510 2023-01-25 · CVSS 7.8
  A path traversal vulnerability was identified in ReFirm Labs binwalk from version 2.1.2b through 2.3.3 included. By crafting a malicious PFS filesystem file, an
• CVE-2022-4221 2022-12-01 · CVSS 9.8
  Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Asus NAS-M25 allows an unauthenticated attacker to i