https://vulnogram.org/ Most recent CVEs assigned by KrCERT/CC (krcert). https://vulnogram.org/seaview/icons/krcert.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-76147 https://vulnogram.org/CVE-2026-76147 A path traversal (ZIP Slip) vulnerability caused by insufficient authorization and integrity verification in the agent upgrade feature of Genian NAC/ZTNA allows a remote attacker to execute arbitrary code Medium Thu, 01 Oct 2026 04:53:39 GMT https://vulnogram.org/CVE-2026-76146 https://vulnogram.org/CVE-2026-76146 An OS command injection vulnerability in Genian SSL PNS allows an attacker who knows only the client access ID, without the password, to execute arbitrary commands remotely High Network Exploitable Thu, 01 Oct 2026 04:53:39 GMT https://vulnogram.org/CVE-2026-76145 https://vulnogram.org/CVE-2026-76145 An improper privilege management vulnerability in Genian SSL PNS allows an attacker to escalate to super administrator privileges and force the creation of an OS account by manipulating the permission column during CSV bulk user registration High Thu, 01 Oct 2026 04:53:38 GMT https://vulnogram.org/CVE-2026-76144 https://vulnogram.org/CVE-2026-76144 An unrestricted file upload vulnerability caused by insufficient file extension and integrity verification in Genian SSL PNS allows an attacker to upload a dangerous file that is not an official patch Low Thu, 01 Oct 2026 04:53:37 GMT https://vulnogram.org/CVE-2026-76143 https://vulnogram.org/CVE-2026-76143 A missing authorization vulnerability in Genian SSL PNS allows an attacker to bypass multi-factor authentication by manipulating a login request parameter. High Thu, 01 Oct 2026 04:53:36 GMT https://vulnogram.org/CVE-2026-76142 https://vulnogram.org/CVE-2026-76142 Insufficient authentication and access control on the internal-only IPC SOAP endpoint of the Genian NAC/ZTNA policy server allows an unauthenticated attacker to invoke internal functions Critical Network Exploitable Thu, 01 Oct 2026 04:53:35 GMT https://vulnogram.org/CVE-2026-24498 https://vulnogram.org/CVE-2026-24498 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in EFM-Networks, Inc. IpTIME T5008, EFM-Networks, Inc. IpTIME AX2004M, EFM-Networks, Inc. IpTIME AX3000Q, EFM-Networks, Inc. IpTIME AX6000M allows Authentication Bypass.This iss… Medium Fri, 27 Feb 2026 02:01:12 GMT https://vulnogram.org/CVE-2026-24497 https://vulnogram.org/CVE-2026-24497 Stack-based Buffer Overflow vulnerability in SimTech Systems, Inc. ThinkWise allows Remote Code Inclusion.This issue affects ThinkWise: from 7 through 23. High Fri, 27 Feb 2026 01:52:58 GMT https://vulnogram.org/CVE-2025-29867 https://vulnogram.org/CVE-2025-29867 Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Hancom Inc. Hancom Office 2018, Hancom Inc. Hancom Office 2020, Hancom Inc. Hancom Office 2022, Hancom Inc. Hancom Office 2024 allows File Content Injection.This issue aff… High Wed, 04 Feb 2026 04:46:55 GMT https://vulnogram.org/CVE-2025-29864 https://vulnogram.org/CVE-2025-29864 Protection Mechanism Failure vulnerability in ESTsoft ALZip on Windows allows SmartScreen bypass.This issue affects ALZip: from 12.01 before 12.29. Medium Wed, 03 Dec 2025 08:13:58 GMT https://vulnogram.org/CVE-2025-29866 https://vulnogram.org/CVE-2025-29866 : External Control of File Name or Path vulnerability in TAGFREE X-Free Uploader XFU allows : Parameter Injection.This issue affects X-Free Uploader: from 1.0.1.0084 before 1.0.1.0085, from 2.0.1.0034 before 2.0.1.0035. High Network Exploitable Thu, 07 Aug 2025 05:09:53 GMT https://vulnogram.org/CVE-2025-29865 https://vulnogram.org/CVE-2025-29865 : Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TAGFREE X-Free Uploader XFU allows Path Traversal.This issue affects X-Free Uploader: from 1.0.1.0084 before 1.0.1.0085, from 2.0.1.0034 before 2.0.1.00… High Network Exploitable Thu, 07 Aug 2025 01:30:37 GMT https://vulnogram.org/CVE-2024-23843 https://vulnogram.org/CVE-2024-23843 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Genians Genian NAC V5.0, Genians Genian NAC LTS V5.0.This issue affects Genian NAC V5.0: from V5.0.0 through V5.0.60; Genian NAC LTS V5.0: from 5.0.… Low Mon, 28 Oct 2024 02:07:20 GMT https://vulnogram.org/CVE-2024-23842 https://vulnogram.org/CVE-2024-23842 Improper Input Validation in Hitron Systems DVR LGUVR-16H 1.02~4.02 allows an attacker to cause network attack in case of using defalut admin ID/PW. High Tue, 23 Jan 2024 04:56:41 GMT https://vulnogram.org/CVE-2024-22772 https://vulnogram.org/CVE-2024-22772 Improper Input Validation in Hitron Systems DVR LGUVR-8H 1.02~4.02 allows an attacker to cause network attack in case of using defalut admin ID/PW. High Tue, 23 Jan 2024 04:52:06 GMT https://vulnogram.org/CVE-2024-22771 https://vulnogram.org/CVE-2024-22771 Improper Input Validation in Hitron Systems DVR LGUVR-4H 1.02~4.02 allows an attacker to cause network attack in case of using defalut admin ID/PW. High Tue, 23 Jan 2024 04:49:10 GMT https://vulnogram.org/CVE-2024-22770 https://vulnogram.org/CVE-2024-22770 Improper Input Validation in Hitron Systems DVR HVR-16781 1.03~4.02 allows an attacker to cause network attack in case of using defalut admin ID/PW. High Tue, 23 Jan 2024 04:42:39 GMT https://vulnogram.org/CVE-2024-22769 https://vulnogram.org/CVE-2024-22769 Improper Input Validation in Hitron Systems DVR HVR-8781 1.03~4.02 allows an attacker to cause network attack in case of using defalut admin ID/PW. High Tue, 23 Jan 2024 04:37:06 GMT https://vulnogram.org/CVE-2024-22768 https://vulnogram.org/CVE-2024-22768 Improper Input Validation in Hitron Systems DVR HVR-4781 1.03~4.02 allows an attacker to cause network attack in case of using defalut admin ID/PW. High Tue, 23 Jan 2024 04:31:40 GMT https://vulnogram.org/CVE-2023-40250 https://vulnogram.org/CVE-2023-40250 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Hancom HCell on Windows allows Overflow Buffers.This issue affects HCell: 12.0.0.893. High Network Exploitable Fri, 12 Jan 2024 01:31:06 GMT https://vulnogram.org/CVE-2023-45801 https://vulnogram.org/CVE-2023-45801 Improper Authentication vulnerability in Nadatel DVR allows Information Elicitation.This issue affects DVR: from 3.0.0 before 9.9.0. High Network Exploitable Wed, 13 Dec 2023 02:05:32 GMT https://vulnogram.org/CVE-2023-45800 https://vulnogram.org/CVE-2023-45800 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Hanbiro Hanbiro groupware allows Information Elicitation.This issue affects Hanbiro groupware: from V3.8.79 before V3.8.81.1. High Network Exploitable Wed, 13 Dec 2023 01:46:40 GMT https://vulnogram.org/CVE-2023-45799 https://vulnogram.org/CVE-2023-45799 In MLSoft TCO!stream versions 8.0.22.1115 and below, a vulnerability exists due to insufficient permission validation. This allows an attacker to make the victim download and execute arbitrary files. High Mon, 30 Oct 2023 06:17:21 GMT https://vulnogram.org/CVE-2023-45798 https://vulnogram.org/CVE-2023-45798 In Yettiesoft VestCert versions 2.36 to 2.5.29, a vulnerability exists due to improper validation of third-party modules. This allows malicious actors to load arbitrary third-party modules, leading to remote code execution. High Mon, 30 Oct 2023 06:17:14 GMT https://vulnogram.org/CVE-2023-45797 https://vulnogram.org/CVE-2023-45797 A Buffer overflow vulnerability in DreamSecurity MagicLine4NX versions 1.0.0.1 to 1.0.0.26 allows an attacker to remotely execute code. Critical Network Exploitable Mon, 30 Oct 2023 06:16:42 GMT https://vulnogram.org/CVE-2023-40251 https://vulnogram.org/CVE-2023-40251 Missing Encryption of Sensitive Data vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian ZTNA allows Man in the Middle Attack.This issue affects Genian NAC V4.0: from V4.0.0 through V4.0.15… Medium Thu, 17 Aug 2023 06:54:14 GMT https://vulnogram.org/CVE-2023-40252 https://vulnogram.org/CVE-2023-40252 Improper Control of Generation of Code ('Code Injection') vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian ZTNA allows Replace Trusted Executable.This issue affects Genian NAC V4.0: from… Medium Thu, 17 Aug 2023 06:41:53 GMT https://vulnogram.org/CVE-2023-40254 https://vulnogram.org/CVE-2023-40254 Download of Code Without Integrity Check vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian ZTNA allows Malicious Software Update.This issue affects Genian NAC V4.0: from V4.0.0 through V4… High Fri, 11 Aug 2023 06:08:19 GMT https://vulnogram.org/CVE-2023-40253 https://vulnogram.org/CVE-2023-40253 Improper Authentication vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian ZTNA allows Authentication Abuse.This issue affects Genian NAC V4.0: from V4.0.0 through V4.0.155; Genian NAC V5.… Medium Fri, 11 Aug 2023 05:34:48 GMT https://vulnogram.org/CVE-2021-26644 https://vulnogram.org/CVE-2021-26644 SQL-Injection vulnerability caused by the lack of verification of input values for the table name of DB used by the Mangboard bulletin board. A remote attacker can use this vulnerability to execute arbitrary code on the server where the bulletin boar… High Network Exploitable Fri, 20 Jan 2023 00:00:00 GMT https://vulnogram.org/CVE-2021-26642 https://vulnogram.org/CVE-2021-26642 When uploading an image file to a bulletin board developed with XpressEngine, a vulnerability in which an arbitrary file can be uploaded due to insufficient verification of the file. A remote attacker can use this vulnerability to execute arbitrary c… High Fri, 20 Jan 2023 00:00:00 GMT https://vulnogram.org/CVE-2022-41158 https://vulnogram.org/CVE-2022-41158 Remote code execution vulnerability can be achieved by using cookie values as paths to a file by this builder program. A remote attacker could exploit the vulnerability to execute or inject malicious code. High Fri, 25 Nov 2022 00:00:00 GMT https://vulnogram.org/CVE-2022-41157 https://vulnogram.org/CVE-2022-41157 A specific file on the sERP server if Kyungrinara(ERP solution) has a fixed password with the SYSTEM authority. This vulnerability could allow attackers to leak or steal sensitive information or execute malicious commands. High Network Exploitable Fri, 25 Nov 2022 00:00:00 GMT https://vulnogram.org/CVE-2022-41156 https://vulnogram.org/CVE-2022-41156 Remote code execution vulnerability due to insufficient verification of URLs, etc. in OndiskPlayerAgent. A remote attacker could exploit the vulnerability to cause remote code execution by causing an arbitrary user to download and execute malicious c… High Fri, 25 Nov 2022 00:00:00 GMT https://vulnogram.org/CVE-2022-23771 https://vulnogram.org/CVE-2022-23771 This vulnerability occurs in user accounts creation and deleteion related pages of IPTIME NAS products. The vulnerability could be exploited by a lack of validation when a POST request is made to this page. An attacker can use this vulnerability to o… High Mon, 17 Oct 2022 00:00:00 GMT https://vulnogram.org/CVE-2022-23770 https://vulnogram.org/CVE-2022-23770 This vulnerability could allow a remote attacker to execute remote commands with improper validation of parameters of certain API constructors. Remote attackers could use this vulnerability to execute malicious commands such as directory traversal. High Mon, 17 Oct 2022 00:00:00 GMT https://vulnogram.org/CVE-2022-23769 https://vulnogram.org/CVE-2022-23769 Remote code execution vulnerability due to insufficient user privilege verification in reverseWall-MDS. Remote attackers can exploit the vulnerability such as stealing account, through remote code execution. High Mon, 17 Oct 2022 00:00:00 GMT https://vulnogram.org/CVE-2022-23766 https://vulnogram.org/CVE-2022-23766 An improper input validation vulnerability leading to arbitrary file execution was discovered in BigFileAgent. In order to cause arbitrary files to be executed, the attacker makes the victim access a web page d by them or inserts a script using XSS i… High Mon, 19 Sep 2022 19:52:07 GMT https://vulnogram.org/CVE-2022-23767 https://vulnogram.org/CVE-2022-23767 This vulnerability of SecureGate is SQL-Injection using login without password. A path traversal vulnerability is also identified during file transfer. An attacker can take advantage of these vulnerabilities to perform various attacks such as obtaini… Critical Network Exploitable Mon, 19 Sep 2022 19:50:37 GMT https://vulnogram.org/CVE-2022-23768 https://vulnogram.org/CVE-2022-23768 This Vulnerability in NIS-HAP11AC is caused by an exposed external port for the telnet service. Remote attackers use this vulnerability to induce all attacks such as source code hijacking, remote control of the device. High Mon, 19 Sep 2022 19:48:57 GMT https://vulnogram.org/CVE-2022-23765 https://vulnogram.org/CVE-2022-23765 This vulnerability occured by sending a malicious POST request to a specific page while logged in random user from some family of IPTIME NAS. Remote attackers can steal root privileges by changing the password of the root through a POST request. High Wed, 17 Aug 2022 20:24:23 GMT https://vulnogram.org/CVE-2022-23764 https://vulnogram.org/CVE-2022-23764 The vulnerability causing from insufficient verification procedures for downloaded files during WebCube update. Remote attackers can bypass this verification logic to update both digitally signed and unauthorized files, enabling remote code execution… High Network Exploitable Wed, 17 Aug 2022 20:23:03 GMT https://vulnogram.org/CVE-2021-26639 https://vulnogram.org/CVE-2021-26639 This vulnerability is caused by the lack of validation of input values for specific functions if WISA Smart Wing CMS. Remote attackers can use this vulnerability to leak all files in the server without logging in system. High Wed, 17 Aug 2022 20:21:29 GMT https://vulnogram.org/CVE-2022-23763 https://vulnogram.org/CVE-2022-23763 Origin validation error vulnerability in NeoRS’s ActiveX moudle allows attackers to download and execute arbitrary files. Remote attackers can use this vulerability to encourage users to access crafted web pages, causing damage such as malicious code… High Tue, 28 Jun 2022 13:49:01 GMT https://vulnogram.org/CVE-2021-26638 https://vulnogram.org/CVE-2021-26638 Improper Authentication vulnerability in S&D smarthome(smartcare) application can cause authentication bypass and information exposure. Remote attackers can use this vulerability to take control of the home environment including indoor control. High Wed, 22 Jun 2022 13:55:59 GMT https://vulnogram.org/CVE-2021-26637 https://vulnogram.org/CVE-2021-26637 There is no account authentication and permission check logic in the firmware and existing apps of SiHAS's SGW-300, ACM-300, GCM-300, so unauthorized users can remotely control the device. High Wed, 22 Jun 2022 13:55:58 GMT https://vulnogram.org/CVE-2021-26636 https://vulnogram.org/CVE-2021-26636 Stored XSS and SQL injection vulnerability in MaxBoard could lead to occur Remote Code Execution, which could lead to information exposure and privilege escalation. High Network Exploitable Wed, 22 Jun 2022 13:55:57 GMT https://vulnogram.org/CVE-2021-26635 https://vulnogram.org/CVE-2021-26635 In the code that verifies the file size in the ark library, it is possible to manipulate the offset read from the target file due to the wrong use of the data type. An attacker could use this vulnerability to cause a stack buffer overflow and as a re… High Wed, 01 Jun 2022 15:04:52 GMT https://vulnogram.org/CVE-2021-26634 https://vulnogram.org/CVE-2021-26634 SQL injection and file upload attacks are possible due to insufficient validation of input values in some parameters and variables of files compromising Maxboard, which may lead to arbitrary code execution or privilege escalation. Attackers can use t… Critical Network Exploitable Wed, 01 Jun 2022 14:59:25 GMT https://vulnogram.org/CVE-2021-26633 https://vulnogram.org/CVE-2021-26633 SQL injection and Local File Inclusion (LFI) vulnerabilities in MaxBoard can cause information leakage and privilege escalation. This vulnerabilities can be exploited by manipulating a variable with a desired value and inserting and arbitrary file. High Network Exploitable Wed, 01 Jun 2022 14:54:25 GMT