Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 6

Export CSV
CVE-2022-36250

Cross Site Request Forgery on Shop Beat Services

Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Cross Site Request Forgery (CSRF).

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Shopbeat
Products
Shop Beat Media Player
CVE-2022-36249

Shop Beat Services Vulnerable To Bypass 2FA via APIs

Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Bypass 2FA via APIs. For Controlpanel Lite. "After login we are directly able to use the bearer token or jsession ID to access the apis instead of entering the 2FA code. Thus, leading to bypass of 2FA on API level.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Shopbeat
Products
Shop Beat Media Player
CVE-2022-36247

Shop Beat Services Vulnerable To IDOR

Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to IDOR via controlpanel.shopbeat.co.za.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed
Vendors
Shopbeat
Products
Shop Beat Media Player
CVE-2022-36246

Shop Beat Services Vulnerable To Insecure Permissions

Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Insecure Permissions.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Shopbeat
Products
Shop Beat Media Player
CVE-2022-36244

Multiple Stored Cross-Site Scripting Vulnerabilities on Shop Beat Services

Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 suffers from Multiple Stored Cross-Site Scripting (XSS) vulnerabilities via Shop Beat Control Panel found at www.shopbeat.co.za controlpanel.shopbeat.co.za.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Shopbeat
Products
Shop Beat Media Player
CVE-2022-36243

Directory Traversal on Shop Beat Services

Shop Beat Solutions (pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Directory Traversal via server.shopbeat.co.za. Information Exposure Through Directory Listing vulnerability in "studio" software of Shop Beat. This issue affects: Shop Beat studio studio versions prior to 3.2.57 on arm.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Shopbeat
Products
Shop Beat Media Player