https://vulnogram.org/ Most recent CVEs assigned by ONEKEY GmbH (onekey). https://vulnogram.org/seaview/icons/onekey.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2025-10364 https://vulnogram.org/CVE-2025-10364 The Evertz SDVN 3080ipx-10G is a High Bandwidth Ethernet Switching Fabric for Video Application. This device exposes a web management interface on port 80. This web management interface can be used by administrators to control product features, setup… Critical Network Exploitable Fri, 12 Sep 2025 13:48:18 GMT https://vulnogram.org/CVE-2025-10365 https://vulnogram.org/CVE-2025-10365 The Evertz SDVN 3080ipx-10G is a High Bandwidth Ethernet Switching Fabric for Video Application. This device exposes a web management interface on port 80. This web management interface can be used by administrators to control product features, setup… Critical Network Exploitable Fri, 12 Sep 2025 13:46:11 GMT https://vulnogram.org/CVE-2025-5113 https://vulnogram.org/CVE-2025-5113 The Diviotec professional series exposes a web interface. One endpoint is vulnerable to arbitrary command injection and hardcoded passwords are used. High Mon, 02 Jun 2025 07:13:54 GMT https://vulnogram.org/CVE-2025-4010 https://vulnogram.org/CVE-2025-4010 The Netcom NTC 6200 and NWL 222 series expose a web interface to be configured and set up by operators. Multiple endpoints of the web interface are vulnerable to arbitrary command injection and use insecure hardcoded passwords. Remote authenticated a… High Mon, 02 Jun 2025 07:00:52 GMT https://vulnogram.org/CVE-2025-4009 https://vulnogram.org/CVE-2025-4009 The Evertz SDVN 3080ipx-10G is a High Bandwidth Ethernet Switching Fabric for Video Application. This device exposes a web management interface on port 80. This web management interface can be used by administrators to control product features, setup… Critical Network Exploitable Wed, 28 May 2025 07:00:32 GMT https://vulnogram.org/CVE-2025-4008 https://vulnogram.org/CVE-2025-4008 The Meteobridge web interface let meteobridge administrator manage their weather station data collection and administer their meteobridge system through a web application written in CGI shell scripts and C. This web interface exposes an endpoint that… High Known Exploited Wed, 21 May 2025 15:31:23 GMT https://vulnogram.org/CVE-2024-6199 https://vulnogram.org/CVE-2024-6199 An unauthenticated attacker on the WAN interface, with the ability to intercept Dynamic DNS (DDNS) traffic between DDNS services and the modem, could manipulate specific responses to include code that forces a buffer overflow on the modem. Customers… High Fri, 25 Apr 2025 13:02:50 GMT https://vulnogram.org/CVE-2024-6198 https://vulnogram.org/CVE-2024-6198 The device exposes a web interface on ports TCP/3030 and TCP/9882. This web service runs lighttpd, which implements the “SNORE” interface. This interface is affected by a stack buffer overflow vulnerability due to insecure path parsing. An attacker w… High Fri, 25 Apr 2025 13:02:43 GMT https://vulnogram.org/CVE-2024-11666 https://vulnogram.org/CVE-2024-11666 Affected devices beacon to eCharge cloud infrastructure asking if there are any command they should run. This communication is established over an insecure channel since peer verification is disabled everywhere. Therefore, remote unauthenticated user… Critical Network Exploitable Sun, 24 Nov 2024 22:36:59 GMT https://vulnogram.org/CVE-2024-11665 https://vulnogram.org/CVE-2024-11665 Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in hardy-barth cph2_echarge_firmware allows OS Command Injection.This issue affects cph2_echarge_firmware: through 2.0.4. High Sun, 24 Nov 2024 22:32:43 GMT https://vulnogram.org/CVE-2024-5035 https://vulnogram.org/CVE-2024-5035 The affected device expose a network service called "rftest" that is vulnerable to unauthenticated command injection on ports TCP/8888, TCP/8889, and TCP/8890. By successfully exploiting this flaw, remote unauthenticated attacker can gain arbitrary c… High Mon, 27 May 2024 07:22:59 GMT https://vulnogram.org/CVE-2024-4999 https://vulnogram.org/CVE-2024-4999 A vulnerability in the web-based management interface of multiple Ligowave devices could allow an authenticated remote attacker to execute arbitrary commands with elevated privileges.This issue affects UNITY: through 6.95-2; PRO: through 6.95-1.Rt388… Critical Thu, 16 May 2024 12:14:51 GMT https://vulnogram.org/CVE-2024-3871 https://vulnogram.org/CVE-2024-3871 The Delta Electronics DVW-W02W2-E2 devices expose a web administration interface to users. This interface implements multiple features that are affected by command injections and stack overflows vulnerabilities. Successful exploitation of these flaws… Critical Network Exploitable Tue, 16 Apr 2024 08:12:23 GMT https://vulnogram.org/CVE-2023-0862 https://vulnogram.org/CVE-2023-0862 The NetModule NSRW web administration interface is vulnerable to path traversals, which could lead to arbitrary file uploads and deletion. By uploading malicious files to the web root directory, authenticated users could gain remote command execution… High Thu, 16 Feb 2023 09:07:09 GMT https://vulnogram.org/CVE-2023-0861 https://vulnogram.org/CVE-2023-0861 NetModule NSRW web administration interface executes an OS command constructed with unsanitized user input. A successful exploit could allow an authenticated user to execute arbitrary commands with elevated privileges. This issue affects NSRW: from 4… High Thu, 16 Feb 2023 08:58:43 GMT https://vulnogram.org/CVE-2023-0593 https://vulnogram.org/CVE-2023-0593 A path traversal vulnerability affects yaffshiv YAFFS filesystem extractor. By crafting a malicious YAFFS file, an attacker could force yaffshiv to write outside of the extraction directory. This issue affects yaffshiv up to version 0.1 included, whi… Medium Tue, 31 Jan 2023 09:31:44 GMT https://vulnogram.org/CVE-2023-0592 https://vulnogram.org/CVE-2023-0592 A path traversal vulnerability affects jefferson's JFFS2 filesystem extractor. By crafting malicious JFFS2 files, attackers could force jefferson to write outside of the extraction directory.This issue affects jefferson: before 0.4.1. Medium Tue, 31 Jan 2023 09:25:10 GMT https://vulnogram.org/CVE-2023-0591 https://vulnogram.org/CVE-2023-0591 ubireader_extract_files is vulnerable to path traversal when run against specifically crafted UBIFS files, allowing the attacker to overwrite files outside of the extraction directory (provided the process has write access to that file or directory).… Medium Tue, 31 Jan 2023 09:18:07 GMT https://vulnogram.org/CVE-2022-4510 https://vulnogram.org/CVE-2022-4510 A path traversal vulnerability was identified in ReFirm Labs binwalk from version 2.1.2b through 2.3.3 included. By crafting a malicious PFS filesystem file, an attacker can get binwalk's PFS extractor to extract files at arbitrary locations when bin… High Wed, 25 Jan 2023 12:25:14 GMT https://vulnogram.org/CVE-2022-4221 https://vulnogram.org/CVE-2022-4221 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Asus NAS-M25 allows an unauthenticated attacker to inject arbitrary OS commands via unsanitized cookie values.This issue affects NAS-M25: thro… Critical Network Exploitable Thu, 01 Dec 2022 09:26:48 GMT