Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2020-15348

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows use of live/CPEManager/AXCampaignManager/delete_cpes_by_ids?cpe_ids= for eval injection of Python code.

CVSS 3.1 · 9.8 Critical EPSS 1.8% KEV · Not listed
Vendors
Zyxel
Products
Cloud Cnm Secumanager
CVE-2020-15324

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a world-readable axess/opt/axXMPPHandler/config/xmpp_config.py file that stores hardcoded credentials.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Zyxel
Products
Cloud Cnm Secumanager