CVE Program partner

Securifera

Securifera, Inc.

API
CVEs, 365 days732 all time, 0 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationSecurifera, Inc.
RoleCNA
TypeResearcher
Reports tomitre
ScopeVulnerabilities in vendor products discovered by Securifera, or related parties, while performing vulnerability research or security assessments.
Advisorieshttps://www.securifera.com/advisories/

Latest CVEs · RSS

  • CVE-2026-94367 2026-09-22 · CVSS 7.2
    OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains an OS command injection vulnerability in recbackup. An authenticated administrator can sup
  • CVE-2026-92930 2026-09-22 · CVSS 6.2
    OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 uses an administrator password-reset unlock-code design that lacks a per-device secret or other ser
  • CVE-2026-92929 2026-09-22 · CVSS 5.3
    OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 trusts an X-Forwarded-For header supplied by an arbitrary client when determining the request sourc
  • CVE-2026-92928 2026-09-22 · CVSS 6.5
    OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains a hardcoded, undocumented recovery account with a shared credential that cannot be changed
  • CVE-2026-90817 2026-09-20 · CVSS 9.8
    An unauthenticated Remote Code Execution vulnerability was found in the survey passthrough routing and Data Import processing logic, in which a malicious user c
  • CVE-2026-90823 2026-09-17 · CVSS 9.8
    FatPipe MPVPN, WARP, and IPVPN appliances running the end-of-life firmware version 10.1.2r60p100 contain a stack-based buffer overflow in /usr/sbin/auth_user_pa
  • CVE-2026-90822 2026-09-17 · CVSS 9.8
    FatPipe MPVPN, WARP, and IPVPN appliances running the end-of-life firmware version 10.1.2r60p100 contain an OS command injection vulnerability in the xtremed da
  • CVE-2022-48604 2023-08-09 · CVSS 8.8
    A SQL injection vulnerability exists in the “logging export” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly
  • CVE-2022-48603 2023-08-09 · CVSS 8.8
    A SQL injection vulnerability exists in the “message viewer iframe” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it d
  • CVE-2022-48602 2023-08-09 · CVSS 8.8
    A SQL injection vulnerability exists in the “message viewer print” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it di
  • CVE-2022-48601 2023-08-09 · CVSS 8.8
    A SQL injection vulnerability exists in the “network print report” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it di
  • CVE-2022-48600 2023-08-09 · CVSS 8.8
    A SQL injection vulnerability exists in the “notes view” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to
  • CVE-2022-48599 2023-08-09 · CVSS 8.8
    A SQL injection vulnerability exists in the “reporter events type” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it di
  • CVE-2022-48598 2023-08-09 · CVSS 8.8
    A SQL injection vulnerability exists in the “reporter events type date” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes
  • CVE-2022-48597 2023-08-09 · CVSS 8.8
    A SQL injection vulnerability exists in the “ticket event report” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it dir
  • CVE-2022-48596 2023-08-09 · CVSS 8.8
    A SQL injection vulnerability exists in the “ticket queue watchers” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it d
  • CVE-2022-48595 2023-08-09 · CVSS 8.8
    A SQL injection vulnerability exists in the “ticket template watchers” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes i
  • CVE-2022-48594 2023-08-09 · CVSS 8.8
    A SQL injection vulnerability exists in the “ticket watchers email” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it d
  • CVE-2022-48593 2023-08-09 · CVSS 8.8
    A SQL injection vulnerability exists in the “topology data service” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it d
  • CVE-2022-48592 2023-08-09 · CVSS 8.8
    A SQL injection vulnerability exists in the vendor_country parameter of the “vendor print report” feature of the ScienceLogic SL1 that takes unsanitized user‐co
  • CVE-2022-48591 2023-08-09 · CVSS 8.8
    A SQL injection vulnerability exists in the vendor_state parameter of the “vendor print report” feature of the ScienceLogic SL1 that takes unsanitized user‐cont
  • CVE-2022-48590 2023-08-09 · CVSS 8.8
    A SQL injection vulnerability exists in the “admin dynamic app mib errors” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and pass
  • CVE-2022-48589 2023-08-09 · CVSS 8.8
    A SQL injection vulnerability exists in the “reporting job editor” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it di
  • CVE-2022-48588 2023-08-09 · CVSS 8.8
    A SQL injection vulnerability exists in the “schedule editor decoupled” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes
  • CVE-2022-48587 2023-08-09 · CVSS 8.8
    A SQL injection vulnerability exists in the “schedule editor” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directl

All CVE Program partners