Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 64

Export CSV
CVE-2022-38715

A leftover debug code vulnerability exists in the httpd shell.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted HTTP request can lead to remote code execution. An attacker can send an HTTP request to trigger this vulnerability.

CVSS 3.1 · 8.8 High EPSS 3.8% KEV · Not listed
Vendors
Siretta
Products
Quartz-gold Quartz-gold Firmware
CVE-2022-38088

A directory traversal vulnerability exists in the httpd downfile.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted HTTP request can lead to arbitrary file read. An attacker can send an HTTP request to trigger this vulnerability.

CVSS 3.1 · 6.5 Medium EPSS 2.3% KEV · Not listed
Vendors
Siretta
Products
Quartz-gold Quartz-gold Firmware
CVE-2022-36279

A stack-based buffer overflow vulnerability exists in the httpd delfile.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted HTTP request can lead to remote code execution. An attacker can send an HTTP request to trigger this vulnerability.

CVSS 3.1 · 8.8 High EPSS 3.3% KEV · Not listed
Vendors
Siretta
Products
Quartz-gold Quartz-gold Firmware