VO
Vendor
Voltronicpower
27
CVEs
0
On KEV
0
New 30D
Products
VI9.8
Viewpower
Voltronicpower
22 CVEs0 on KEV0 new
SW9.8
Snmp Web Pro
Voltronicpower
3 CVEs0 on KEV0 new
VP9.8
Viewpower Pro
Voltronicpower
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2023-51595 | VI Viewpower Voltronicpower | 9.8 | May 3 | Voltronic Power ViewPower Pro selectDeviceListBy SQL Injection Remote Code Execution Vulnerability |
| CVE-2023-51593 | VI Viewpower Voltronicpower | 9.8 | May 3 | Voltronic Power ViewPower Pro Expression Language Injection Remote Code Execution Vulnerability |
| CVE-2023-51591 | VI Viewpower Voltronicpower | 7.5 | May 3 | Voltronic Power ViewPower Pro doDocument XML External Entity Processing Information Disclosure Vulnerability |
| CVE-2023-51590 | VI Viewpower Voltronicpower | 9.8 | May 3 | Voltronic Power ViewPower Pro UpLoadAction Unrestricted File Upload Remote Code Execution Vulnerability |
| CVE-2023-51588 | VI Viewpower Voltronicpower | 7.8 | May 3 | Voltronic Power ViewPower Pro MySQL Use of Hard-coded Credentials Local Privilege Escalation Vulnerability |
| CVE-2023-51587 | VI Viewpower Voltronicpower | 7.5 | May 3 | Voltronic Power ViewPower getModbusPassword Missing Authentication Information Disclosure Vulnerability |
| CVE-2023-51586 | VI Viewpower Voltronicpower | 9.8 | May 3 | Voltronic Power ViewPower Pro selectEventConfig SQL Injection Remote Code Execution Vulnerability |
| CVE-2023-51585 | VI Viewpower Voltronicpower | 8.8 | May 3 | Voltronic Power ViewPower USBCommEx shutdown Command Injection Remote Code Execution Vulnerability |
| CVE-2023-51584 | VI Viewpower Voltronicpower | 8.8 | May 3 | Voltronic Power ViewPower USBCommEx shutdown Exposed Dangerous Method Remote Code Execution Vulnerability |
| CVE-2023-51583 | VI Viewpower Voltronicpower | 9.8 | May 3 | Voltronic Power ViewPower UpsScheduler Exposed Dangerous Method Remote Code Execution Vulnerability |
| CVE-2023-51582 | VI Viewpower Voltronicpower | 9.8 | May 3 | Voltronic Power ViewPower LinuxMonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability |
| CVE-2023-51581 | VI Viewpower Voltronicpower | 9.8 | May 3 | Voltronic Power ViewPower MacMonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability |
| CVE-2023-51579 | VI Viewpower Voltronicpower | 7.8 | May 3 | Voltronic Power ViewPower Incorrect Permission Assignment Local Privilege Escalation Vulnerability |
| CVE-2023-51578 | VI Viewpower Voltronicpower | 7.5 | May 3 | Voltronic Power ViewPower MonitorConsole Exposed Dangerous Method Denial-of-Service Vulnerability |
| CVE-2023-51577 | VI Viewpower Voltronicpower | 7.8 | May 3 | Voltronic Power ViewPower setShutdown Exposed Dangerous Method Local Privilege Escalation Vulnerability |
| CVE-2023-51576 | VI Viewpower Voltronicpower | 9.8 | May 3 | Voltronic Power ViewPower Deserialization of Untrusted Data Remote Code Execution Vulnerability |
| CVE-2023-51575 | VI Viewpower Voltronicpower | 9.8 | May 3 | Voltronic Power ViewPower MonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability |
| CVE-2023-51574 | VI Viewpower Voltronicpower | 9.8 | May 3 | Voltronic Power ViewPower updateManagerPassword Exposed Dangerous Method Authentication Bypass Vulnerability |
| CVE-2023-51573 | VI Viewpower Voltronicpower | 9.8 | Apr 1 | Voltronic Power ViewPower Pro updateManagerPassword Exposed Dangerous Function Authentication Bypass Vulnerability |
| CVE-2023-51572 | VI Viewpower Voltronicpower | 9.8 | Apr 1 | Voltronic Power ViewPower Pro getMacAddressByIp Command Injection Remote Code Execution Vulnerability |
| CVE-2023-51571 | VI Viewpower Voltronicpower | 7.5 | Apr 1 | Voltronic Power ViewPower Pro SocketService Missing Authentication Denial-of-Service Vulnerability |
| CVE-2023-51570 | VI Viewpower Voltronicpower | 9.8 | Apr 1 | Voltronic Power ViewPower Pro Deserialization of Untrusted Data Remote Code Execution Vulnerability |
| CVE-2023-49563 | SW Snmp Web Pro Voltronicpower | 6.1 | Dec 12 | Cross Site Scripting (XSS) in Voltronic Power SNMP Web Pro v.1.1 allows an attacker to execute arbitrary code via a crafted script within a request to the webserver |
| CVE-2023-39073 | SW Snmp Web Pro Voltronicpower | 9.8 | Sep 12 | An issue in SNMP Web Pro v.1.1 allows a remote attacker to execute arbitrary code and obtain senstive information via a crafted request |
| CVE-2023-33274 | SW Snmp Web Pro Voltronicpower | 9.8 | Jul 12 | The authentication mechanism in PowerShield SNMP Web Pro 1.1 contains a vulnerability that allows unauthenticated users to directly access Common Gateway Interface (CGI) scripts… |