Rezultati pretraživanja za 'Proizvođač: zkteco'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-44213 | 4.8 | ZKTeco Xiamen Information Technology ZKBio ECO ADMS <=3.1-164 is vulnerable to Cross Site Scripting (XSS). | 2025-04-22 21:15:43 | 2022-12-09 15:15:10 |
| CVE-2022-42953 | 7.5 | Certain ZKTeco products (ZEM500-510-560-760, ZEM600-800, ZEM720, ZMM) allow access to sensitive information via direct requests for the form/DataApp?style=1 and form/DataApp?style=0 URLs. The affected versions may be before 8.88 (ZEM500-510-560-760, | 2025-04-15 14:15:33 | 2022-12-25 05:15:10 |
| CVE-2024-35428 | 7.1 | ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via BaseMediaFile. An authenticated user can delete local files from the server which can lead to DoS. | 2025-03-13 15:15:44 | 2024-05-30 17:15:34 |
| CVE-2023-51157 | 5.4 | Cross Site Scripting vulnerability in ZKTeco WDMS v.5.1.3 Pro allows a remote attacker to execute arbitrary code and obtain sensitive information via a crafted script to the Emp Name parameter. | 2024-10-02 16:58:20 | 2024-09-25 19:15:04 |
| CVE-2023-4587 | 5.5 | An IDOR vulnerability has been found in ZKTeco ZEM800 product affecting version 6.60. This vulnerability allows a local attacker to obtain registered user backup files or device configuration files over a local network or through a VPN server. | 2024-08-02 08:15:22 | 2023-09-04 12:15:10 |
| CVE-2024-35429 | 6.5 | ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via eventRecord. | 2024-08-01 13:52:40 | 2024-05-30 17:15:34 |
| CVE-2024-6523 | 4.0 | A vulnerability was found in ZKTeco BioTime up to 9.5.2. It has been classified as problematic. Affected is an unknown function of the component system-group-add Handler. The manipulation of the argument user with the input <script>alert('XSS')</scri | 2024-07-08 16:47:11 | 2024-07-05 11:15:10 |
| CVE-2020-17474 | 7.5 | A token-reuse vulnerability in ZKTeco FaceDepot 7B 1.0.213 and ZKBiosecurity Server 1.0.0_20190723 allows an attacker to create arbitrary new users, elevate users to administrators, delete users, and download user faces from the database. | 2020-08-21 15:01:00 | 2020-08-14 20:15:00 |
| CVE-2020-17473 | 4.3 | Lack of mutual authentication in ZKTeco FaceDepot 7B 1.0.213 and ZKBiosecurity Server 1.0.0_20190723 allows an attacker to obtain a long-lasting token by impersonating the server. | 2020-08-21 15:00:00 | 2020-08-14 20:15:00 |
| CVE-2017-17057 | 4.3 | There is a reflected XSS vulnerability in ZKTime Web 2.0.1.12280. The vulnerability exists due to insufficient filtration of user-supplied data in the 'Range' field of the 'Department' module in a Personnel Advanced Query. A remote attacker can execu | 2017-12-21 16:53:00 | 2017-12-04 14:29:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/5
Zapisa po stranici: