CWE-255
CVEs classified under CWE-255, newest first.
11 CVEsRSS
CVE-2026-97877High· 7.3PoCA vulnerability was determined in zhistaredu StarTraining up to 3.8.1
A vulnerability was determined in zhistaredu StarTraining up to 3.8.1. This issue affects the function UserLoginService.createToken of the file application.yml of the component JWT Token Handler. This manipulation of the argument user_id…
CVE-2025-15151Low· 3.7A vulnerability was determined in TaleLin Lin-CMS up to 0.6.0
A vulnerability was determined in TaleLin Lin-CMS up to 0.6.0. This affects an unknown part of the file /tests/config.py of the component Tests Folder. This manipulation of the argument username/password causes password in configuration …
CVE-2025-15128Medium· 5.3A vulnerability was detected in ZKTeco BioTime up to 9.0.3/9.0.4/9.5.2
A vulnerability was detected in ZKTeco BioTime up to 9.0.3/9.0.4/9.5.2. This affects an unknown part of the file /base/safe_setting/ of the component Endpoint. Performing a manipulation of the argument backup_encryption_password_decrypt/…
CVE-2025-14183Medium· 4.3A vulnerability was found in SGAI Space1 NAS N1211DS up to 1.0.915
A vulnerability was found in SGAI Space1 NAS N1211DS up to 1.0.915. This issue affects the function GET_FACTORY_INFO/GET_USER_INFO of the file /cgi-bin/JSONAPI of the component gsaiagent. The manipulation results in unprotected storage o…
CVE-2025-13221Medium· 5.3A weakness has been identified in Intelbras UnniTI 24.07.11
A weakness has been identified in Intelbras UnniTI 24.07.11. The affected element is an unknown function of the file /xml/sistema/usuarios.xml. Executing manipulation of the argument Usuario/Senha can lead to unprotected storage of crede…
CVE-2025-13187Medium· 5.3A security vulnerability has been detected in Intelbras ICIP 2.0.20
A security vulnerability has been detected in Intelbras ICIP 2.0.20. Affected is an unknown function of the file /xml/sistema/acessodeusuario.xml. Such manipulation of the argument NomeUsuario/SenhaAcess leads to unprotected storage of c…
CVE-2025-11666Medium· 6.7A flaw has been found in Tenda RP3 Pro up to 22.5.7.93
A flaw has been found in Tenda RP3 Pro up to 22.5.7.93. This impacts an unknown function of the file force_upgrade.sh of the component Firmware Update Handler. Executing manipulation of the argument current_force_upgrade_pwd can lead to …
CVE-2025-11284High· 7.3A vulnerability has been found in Zytec Dalian Zhuoyun Technology Central Authentication Service 3
A vulnerability has been found in Zytec Dalian Zhuoyun Technology Central Authentication Service 3. Affected by this vulnerability is an unknown functionality of the file /index.php/auth/Ops/git of the component HTTP Header Handler. The …
CVE-2025-6139Low· 3.9A vulnerability, which was classified as problematic, has been found in TOTOLINK T10 4.1.8cu.5207
A vulnerability, which was classified as problematic, has been found in TOTOLINK T10 4.1.8cu.5207. Affected by this issue is some unknown functionality of the file /etc/shadow.sample. The manipulation leads to use of hard-coded password.…
CVE-2019-1714High· 8.6A vulnerability in the implementation of Security Assertion Markup Language (SAML) 2.0 Single Sign-On (SSO) for Clientless SSL VPN (WebVPN) and AnyConnect Remote Access VPN in Cisco Adaptive Security Appliance (ASA) Software and Cisco Fi…
A vulnerability in the implementation of Security Assertion Markup Language (SAML) 2.0 Single Sign-On (SSO) for Clientless SSL VPN (WebVPN) and AnyConnect Remote Access VPN in Cisco Adaptive Security Appliance (ASA) Software and Cisco Fi…
CVE-2013-4786High· 7.5PoCThe IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol (RAKP) authentication, which allows remote attackers to obtain password hashes and conduct offline password guessing attacks by obtaining the HMAC from a RAKP …
The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol (RAKP) authentication, which allows remote attackers to obtain password hashes and conduct offline password guessing attacks by obtaining the HMAC from a RAKP …