krcert

Latest CVEs · RSS

• CVE-2026-76147 2026-10-01 · CVSS 5.9
  A path traversal (ZIP Slip) vulnerability caused by insufficient authorization and integrity verification in the agent upgrade feature of Genian NAC/ZTNA allows
• CVE-2026-76146 2026-10-01 · CVSS 8.4
  An OS command injection vulnerability in Genian SSL PNS allows an attacker who knows only the client access ID, without the password, to execute arbitrary comma
• CVE-2026-76145 2026-10-01 · CVSS 7.5
  An improper privilege management vulnerability in Genian SSL PNS allows an attacker to escalate to super administrator privileges and force the creation of an O
• CVE-2026-76144 2026-10-01 · CVSS 1.8
  An unrestricted file upload vulnerability caused by insufficient file extension and integrity verification in Genian SSL PNS allows an attacker to upload a dang
• CVE-2026-76143 2026-10-01 · CVSS 7.3
  A missing authorization vulnerability in Genian SSL PNS allows an attacker to bypass multi-factor authentication by manipulating a login request parameter.
• CVE-2026-76142 2026-10-01 · CVSS 9.3
  Insufficient authentication and access control on the internal-only IPC SOAP endpoint of the Genian NAC/ZTNA policy server allows an unauthenticated attacker to
• CVE-2026-24498 2026-02-27 · CVSS 6.0
  Exposure of Sensitive Information to an Unauthorized Actor vulnerability in EFM-Networks, Inc. IpTIME T5008, EFM-Networks, Inc. IpTIME AX2004M, EFM-Networks, In
• CVE-2026-24497 2026-02-27 · CVSS 8.4
  Stack-based Buffer Overflow vulnerability in SimTech Systems, Inc. ThinkWise allows Remote Code Inclusion.This issue affects ThinkWise: from 7 through 23.
• CVE-2025-29867 2026-02-04 · CVSS 8.5
  Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Hancom Inc. Hancom Office 2018, Hancom Inc. Hancom Office 2020, Hancom Inc. Hanco
• CVE-2025-29864 2025-12-03 · CVSS 6.2
  Protection Mechanism Failure vulnerability in ESTsoft ALZip on Windows allows SmartScreen bypass.This issue affects ALZip: from 12.01 before 12.29.
• CVE-2025-29866 2025-08-07 · CVSS 8.8
  : External Control of File Name or Path vulnerability in TAGFREE X-Free Uploader XFU allows : Parameter Injection.This issue affects X-Free Uploader: from 1.0.1
• CVE-2025-29865 2025-08-07 · CVSS 8.7
  : Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TAGFREE X-Free Uploader XFU allows Path Traversal.This issue a
• CVE-2024-23843 2024-10-28 · CVSS 2.2
  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Genians Genian NAC V5.0, Genians Genian NAC LTS V5.0.This
• CVE-2024-23842 2024-01-23 · CVSS 7.4
  Improper Input Validation in Hitron Systems DVR LGUVR-16H 1.02~4.02 allows an attacker to cause network attack in case of using defalut admin ID/PW.
• CVE-2024-22772 2024-01-23 · CVSS 7.4
  Improper Input Validation in Hitron Systems DVR LGUVR-8H 1.02~4.02 allows an attacker to cause network attack in case of using defalut admin ID/PW.
• CVE-2024-22771 2024-01-23 · CVSS 7.4
  Improper Input Validation in Hitron Systems DVR LGUVR-4H 1.02~4.02 allows an attacker to cause network attack in case of using defalut admin ID/PW.
• CVE-2024-22770 2024-01-23 · CVSS 7.4
  Improper Input Validation in Hitron Systems DVR HVR-16781 1.03~4.02 allows an attacker to cause network attack in case of using defalut admin ID/PW.
• CVE-2024-22769 2024-01-23 · CVSS 7.4
  Improper Input Validation in Hitron Systems DVR HVR-8781 1.03~4.02 allows an attacker to cause network attack in case of using defalut admin ID/PW.
• CVE-2024-22768 2024-01-23 · CVSS 7.4
  Improper Input Validation in Hitron Systems DVR HVR-4781 1.03~4.02 allows an attacker to cause network attack in case of using defalut admin ID/PW.
• CVE-2023-40250 2024-01-12 · CVSS 8.8
  Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Hancom HCell on Windows allows Overflow Buffers.This issue affects HCell
• CVE-2023-45801 2023-12-13 · CVSS 7.5
  Improper Authentication vulnerability in Nadatel DVR allows Information Elicitation.This issue affects DVR: from 3.0.0 before 9.9.0.
• CVE-2023-45800 2023-12-13 · CVSS 7.5
  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Hanbiro Hanbiro groupware allows Information Elicitation.T
• CVE-2023-45799 2023-10-30 · CVSS 7.2
  In MLSoft TCO!stream versions 8.0.22.1115 and below, a vulnerability exists due to insufficient permission validation. This allows an attacker to make the victi
• CVE-2023-45798 2023-10-30 · CVSS 8.4
  In Yettiesoft VestCert versions 2.36 to 2.5.29, a vulnerability exists due to improper validation of third-party modules. This allows malicious actors to load a
• CVE-2023-45797 2023-10-30 · CVSS 9.8
  A Buffer overflow vulnerability in DreamSecurity MagicLine4NX versions 1.0.0.1 to 1.0.0.26 allows an attacker to remotely execute code.