Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2014-3427

CRLF injection vulnerability in Yealink VoIP Phones with firmware 28.72.0.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the model parameter to servlet.

CVSS 2.0 · 5.0 Medium EPSS 5.2% KEV · Not listed
Vendors
Yealink
Products
Voip Phone Firmware
CVE-2014-3428

Cross-site scripting (XSS) vulnerability in Yealink VoIP Phones with firmware 28.72.0.2 allows remote attackers to inject arbitrary web script or HTML via the model parameter to servlet.

CVSS 2.0 · 4.3 Medium EPSS 1.9% KEV · Not listed
Vendors
Yealink
Products
Voip Phone Voip Phone Firmware