Lucene search
K

9 matches found

RedhatCVE
RedhatCVE
added 2025/12/09 8:26 p.m.1 views

CVE-2025-65231

Barix Instreamer v04.06 and earlier is vulnerable to Cross Site Scripting XSS in the Web UI I/O & Serial configuration page, specifically the CTS close command user-input field which is stored and later rendered on the Status page...

6.1CVSS6.3AI score0.00033EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/12/08 12:0 a.m.17 views

CVE-2025-65231

Barix Instreamer v04.06 and earlier is vulnerable to Cross Site Scripting XSS in the Web UI I/O & Serial configuration page, specifically the CTS close command user-input field which is stored and later rendered on the Status page...

0.00033EPSS
Exploits1References2
CNNVD
CNNVD
added 2025/12/08 12:0 a.m.1 views

Barix Instreamer 安全漏洞

Barix Instreamer is an audio encoding device from the Swiss company Barix. A security vulnerability exists in Barix Instreamer v04.06 and earlier versions, which originates from the presence of stored cross-site scripting in the Web UI I/O and Serial Configuration pages...

6.1CVSS5.9AI score0.00033EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2025/12/08 12:0 a.m.1 views

PT-2025-49589

Name of the Vulnerable Software and Affected Versions Barix Instreamer versions prior to 04.07 Description The software contains a Cross Site Scripting XSS issue within the Web UI. Specifically, the I/O & Serial configuration page’s CTS close command user-input field is affected. This field store...

6.1CVSS5.5AI score0.00033EPSS
Exploits1References6
Vulnrichment
Vulnrichment
added 2025/12/08 12:0 a.m.2 views

CVE-2025-65231

Barix Instreamer v04.06 and earlier is vulnerable to Cross Site Scripting XSS in the Web UI I/O & Serial configuration page, specifically the CTS close command user-input field which is stored and later rendered on the Status page...

5.8AI score0.00033EPSS
Exploits1References2
CVE
CVE
added 2025/12/08 12:0 a.m.4 views

CVE-2025-65231

Barix Instreamer prior to version 04.07 is affected by a stored Cross Site Scripting (XSS) vulnerability in the Web UI I/O & Serial configuration page. The CTS close command user-input field is stored and later rendered on the Status page, enabling an attacker to inject script via this input. Roo...

6.1CVSS5.8AI score0.00033EPSS
Exploits1References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/11/05 12:0 a.m.1 views

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989185)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989185 advisory. In the Linux kernel, the following vulnerability has been resolved: tty: serial: 8250: serialcs: Fix a memory leak in error handling path In the probe function, if t...

5.5CVSS6.1AI score0.00007EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/09/22 12:0 a.m.5 views

CVE-2025-57685

The LB-Link routers, including the BL-AC2100AZ3 V1.0.4, BL-WR4000 v2.5.0, BL-WR9000AE4 v2.4.9, BL-AC1900AZ2 v1.0.2, BL-X26AC8 v1.2.8, and BL-LTE300DA4 V1.2.3 models, are vulnerable to unauthorized command injection. Attackers can exploit this vulnerability by accessing the /goform/setserialcfg...

0.00324EPSS
Exploits0References3
OSV
OSV
added 2024/05/21 3:15 p.m.1 views

UBUNTU-CVE-2021-47330

In the Linux kernel, the following vulnerability has been resolved: tty: serial: 8250: serialcs: Fix a memory leak in error handling path In the probe function, if the final 'serialconfig' fails, 'info' is leaking. Add a resource handling path to free this memory...

5.5CVSS5.8AI score0.00007EPSS
Exploits0References14
Rows per page
Query Builder