Lucene search
+L

8 matches found

RedhatCVE
RedhatCVE
•added 2025/11/20 12:21 a.m.•23 views

CVE-2025-63211

Stored cross-site scripting vulnerability in bridgetech VBC Server & Element Manager, firmware versions 6.5.0-9 thru 6.5.0-10, allows attackers to execute arbitrary code via the addName parameter to the /vbc/core/userSetupDoc/userSetupDoc endpoint...

6.1CVSS6.4AI score0.00285EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/11/19 7:15 p.m.•27 views

CVE-2025-63211

Stored cross-site scripting vulnerability in bridgetech VBC Server & Element Manager, firmware versions 6.5.0-9 thru 6.5.0-10, allows attackers to execute arbitrary code via the addName parameter to the /vbc/core/userSetupDoc/userSetupDoc endpoint...

6.1CVSS6.3AI score0.00285EPSS
SaveExploits1References2
NVD
NVD
•added 2025/11/19 7:15 p.m.•18 views

CVE-2025-63211

Stored cross-site scripting vulnerability in bridgetech VBC Server & Element Manager, firmware versions 6.5.0-9 thru 6.5.0-10, allows attackers to execute arbitrary code via the addName parameter to the /vbc/core/userSetupDoc/userSetupDoc endpoint...

6.1CVSS0.00285EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2025/11/19 12:00 a.m.•9 views

CVE-2025-63214

An issue was discovered in bridgetech VBC Server & Element Manager, firmware version 6.5.0-10 , 6.5.0-9, allowing unauthorized attackers to delete and create arbitrary accounts...

6AI score0.00307EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2025/11/19 12:00 a.m.•6 views

CVE-2025-63211

Stored cross-site scripting vulnerability in bridgetech VBC Server & Element Manager, firmware versions 6.5.0-9 thru 6.5.0-10, allows attackers to execute arbitrary code via the addName parameter to the /vbc/core/userSetupDoc/userSetupDoc endpoint...

6.3AI score0.00285EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2025/11/19 12:00 a.m.•28 views

CVE-2025-63211

Stored cross-site scripting vulnerability in bridgetech VBC Server & Element Manager, firmware versions 6.5.0-9 thru 6.5.0-10, allows attackers to execute arbitrary code via the addName parameter to the /vbc/core/userSetupDoc/userSetupDoc endpoint...

0.00285EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/19 12:00 a.m.•4 views

CVE-2025-63211: Improper Neutralization of Input During Web Page Generation

Stored cross-site scripting vulnerability in bridgetech VBC Server & Element Manager, firmware versions 6.5.0-9 thru 6.5.0-10, allows attackers to execute arbitrary code via the addName parameter to the /vbc/core/userSetupDoc/userSetupDoc endpoint...

6.1CVSS6.4AI score0.00285EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/19 12:00 a.m.•8 views

CVE-2025-63214: Improper Access Control

An issue was discovered in bridgetech VBC Server & Element Manager, firmware version 6.5.0-10 , 6.5.0-9, allowing unauthorized attackers to delete and create arbitrary accounts...

6.5CVSS6AI score0.00307EPSS
SaveExploits1References1
Rows per page
Query Builder