Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2025-64128

Zenitel TCIV-3+ OS Command Injection

An OS command injection vulnerability exists due to incomplete validation of user-supplied input. Validation fails to enforce sufficient formatting rules, which could permit attackers to append arbitrary data. This could allow an unauthenticated attacker to inject arbitrary commands.

CVSS 4.0 · 10 Critical EPSS 2.3% KEV · Not listed
Vendors
Zenitel
Products
Tciv-3+
CVE-2025-64126

Zenitel TCIV-3+ OS Command Injection

An OS command injection vulnerability exists due to improper input validation. The application accepts a parameter directly from user input without verifying it is a valid IP address or filtering potentially malicious characters. This could allow an unauthenticated attacker to inject arbitrary commands.

CVSS 4.0 · 10 Critical EPSS 2.3% KEV · Not listed
Vendors
Zenitel
Products
Tciv-3+
CVE-2025-64127

Zenitel TCIV-3+ OS Command Injection

An OS command injection vulnerability exists due to insufficient sanitization of user-supplied input. The application accepts parameters that are later incorporated into OS commands without adequate validation. This could allow an unauthenticated attacker to execute arbitrary commands remotely.

CVSS 4.0 · 10 Critical EPSS 2.3% KEV · Not listed
Vendors
Zenitel
Products
Tciv-3+
CVE-2025-64129

Zenitel TCIV-3+ Out-of-bounds Write

Zenitel TCIV-3+ is vulnerable to an out-of-bounds write vulnerability, which could allow a remote attacker to crash the device.

CVSS 4.0 · 7 High EPSS < 1% KEV · Not listed
Vendors
Zenitel
Products
Tciv-3+
CVE-2025-64130

Zenitel TCIV-3+ Cross-site Scripting

Zenitel TCIV-3+ is vulnerable to a reflected cross-site scripting vulnerability, which could allow a remote attacker to execute arbitrary JavaScript on the victim's browser.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Zenitel
Products
Tciv-3+