Rezultati pretraživanja za 'Proizvođač: zimaspace'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-28798 | 9.0 | ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. Prior to version 1.5.3, a proxy endpoint (/v1/sys/proxy) exposed by ZimaOS's web interface can be abused (via an externally reachable domain using a Cloudf | 2026-04-13 18:27:54 | 2026-04-03 20:16:02 |
| CVE-2026-28442 | 8.5 | ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.5.2-beta3, users are restricted from deleting internal system files or folders through the application interface. However, when interacting di | 2026-03-12 13:07:49 | 2026-03-05 21:16:22 |
| CVE-2025-64427 | 7.1 | ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.5.0 and prior, due to insufficient validation or restriction of target URLs, an authenticated local user can craft requests that target intern | 2026-03-05 15:18:14 | 2026-03-02 17:16:28 |
| CVE-2026-28286 | 8.5 | ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.5.2-beta3, the application enforces restrictions in the frontend/UI to prevent users from creating files or folders in internal OS paths. Howe | 2026-03-05 15:16:02 | 2026-03-02 17:16:33 |
| CVE-2026-21891 | 9.4 | ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In versions up to and including 1.5.0, the application checks the validity of the username but appears to skip, misinterpret, or incorrectly validate the p | 2026-01-12 17:13:00 | 2026-01-08 14:15:57 |
| CVE-2024-48932 | 5.3 | ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In versions below 1.5.0, the API endpoint `http://<Server-ip>/v1/users/name` allows unauthenticated users to access sensitive information, such as username | 2025-11-05 22:15:32 | 2024-10-24 21:15:14 |
| CVE-2025-58432 | 7.8 | ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.4.1 and all prior versions, the /v2_1/files/file/uploadV2 endpoint allows file upload from ANY USER who has access to localhost. File uploads | 2025-09-22 14:24:42 | 2025-09-17 18:15:52 |
| CVE-2024-49358 | 5.3 | ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.2.4 and all prior versions, the API endpoint `http://<Server-IP>/v1/users/login` in ZimaOS returns distinct responses based on whether a usern | 2025-09-22 14:21:56 | 2024-10-24 22:15:04 |
| CVE-2024-49359 | 7.5 | ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.2.4 and all prior versions, the API endpoint `http://<Zima_Server_IP:PORT>/v2_1/file` in ZimaOS is vulnerable to a directory traversal attack, | 2025-09-22 14:21:53 | 2024-10-24 22:15:04 |
| CVE-2024-49357 | 7.5 | ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.2.4 and all prior versions, the API endpoints in ZimaOS, such as `http://<Server-IP>/v1/users/image?path=/var/lib/casaos/1/app_order.json` and | 2025-09-22 14:21:51 | 2024-10-24 22:15:03 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/2
Zapisa po stranici: