Rezultati pretraživanja za 'Proizvođač: zkteco'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2024-35433 | 8.1 | ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Incorrect Access Control. An authenticated user, without the permissions of managing users, can create a new admin user. | 2025-06-17 19:17:28 | 2024-05-30 18:15:09 |
| CVE-2024-36526 | 9.8 | ZKTeco ZKBio CVSecurity v6.1.1 was discovered to contain a hardcoded cryptographic key. | 2025-06-17 19:06:01 | 2024-07-09 17:15:19 |
| CVE-2024-2318 | 4.0 | A vulnerability was found in ZKTeco ZKBio Media 2.0.0_x64_2024-01-29-1028. It has been classified as problematic. Affected is an unknown function of the file /pro/common/download of the component Service Port 9999. The manipulation of the argument fi | 2025-06-10 08:15:21 | 2024-03-08 13:15:07 |
| CVE-2024-22988 | 9.8 | ZKteco ZKBio WDMS before 9.0.2 Build 20250526 allows an attacker to download a database backup via the /files/backup/ component because the filename is based on a predictable timestamp. | 2025-06-07 21:15:21 | 2024-02-23 23:15:09 |
| CVE-2025-45746 | 6.5 | In ZKT ZKBio CVSecurity 6.4.1_R an unauthenticated attacker can craft JWT token using the hardcoded secret to authenticate to the service console. NOTE: the Supplier disputes the significance of this report because the service console is typically on | 2025-05-21 14:15:31 | 2025-05-13 19:15:51 |
| CVE-2022-30515 | 5.3 | ZKTeco BioTime 8.5.4 is missing authentication on folders containing employee photos, allowing an attacker to view them through filename enumeration. | 2025-05-01 19:15:50 | 2022-11-08 23:15:09 |
| CVE-2022-38803 | 6.8 | Zkteco BioTime < 8.5.3 Build:20200816.447 is vulnerable to Incorrect Access Control via Leave, overtime, Manual log. An authenticated employee can read local files by exploiting XSS into a pdf generator when exporting data as a PDF | 2025-04-24 20:15:23 | 2022-11-30 14:15:10 |
| CVE-2022-38802 | 6.2 | Zkteco BioTime < 8.5.3 Build:20200816.447 is vulnerable to Incorrect Access Control via resign, private message, manual log, time interval, attshift, and holiday. An authenticated administrator can read local files by exploiting XSS into a pdf genera | 2025-04-24 20:15:23 | 2022-11-30 14:15:10 |
| CVE-2022-38801 | 5.4 | In Zkteco BioTime < 8.5.3 Build:20200816.447, an employee can hijack an administrator session and cookies using blind cross-site scripting. | 2025-04-24 20:15:23 | 2022-11-30 14:15:10 |
| CVE-2021-39434 | 7.5 | A default username and password for an administrator account was discovered in ZKTeco ZKTime 10.0 through 11.1.0, builds 20180901, 20190510.1, 20200309.3, 20200930, 20201231, and 20210220. | 2025-04-24 14:15:31 | 2022-12-06 00:15:09 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/5
Zapisa po stranici: