CVE-2026-12621

GridTime 3000 GNSS Time Server Password Reset form is vulnerable to XSS due to improper neutralization of input during web page generation. Affected from 1.0r0.03 up to, but not including, 1.2r0.0. Base CVSS v4 score is 5.3 (Medium). No exploitation details are provided in the documents; no remed...

CVE-2025-60956

Summary: CVE-2025-60956 affects EndRun Technologies Sonoma D12 Network Time Server (GPS) firmware version 4.00 (GPS) running on server hardware. The vulnerability is a Cross-Site Request Forgery (CSRF) flaw that could allow an attacker to cause arbitrary code execution, a denial of service, privi...

Multiple Microsemi Product Path Traversal Vulnerabilities

Microsemi Symmetricom SyncServer S100 and others are a network time server from Microsemi, USA. A path traversal vulnerability exists in multiple Microsemi products. The vulnerability stems from a failure of a networked system or product to properly filter special elements in a resource or file...