Lucene search
+L

13 matches found

RedhatCVE
RedhatCVE
•added 2026/02/12 1:04 a.m.•40 views

CVE-2025-12699

The ZOLL ePCR IOS application reflects unsanitized user input into a WebView. Attacker-controlled strings placed into PCR fields run number, incident, call sign, notes are interpreted as HTML/JS when the app prints or renders that content. In the proof of concept POC, injected scripts return loca...

6.7CVSS5.7AI score0.00199EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/10 9:15 p.m.•29 views

CVE-2025-12699

The ZOLL ePCR IOS application reflects unsanitized user input into a WebView. Attacker-controlled strings placed into PCR fields run number, incident, call sign, notes are interpreted as HTML/JS when the app prints or renders that content. In the proof of concept POC, injected scripts return loca...

6.7CVSS0.00199EPSS
SaveExploits0References3
CVE
CVE
•added 2026/02/10 8:38 p.m.•42 views

CVE-2025-12699

The CVE-2025-12699 entry concerns the ZOLL ePCR iOS Mobile Application. The issue arises when unsanitized user input inserted into a WebView (PCR fields: run number, incident, call sign, notes) is interpreted as HTML/JS. In the provided POC, injected scripts could read local files from the app’s ...

6.7CVSS6AI score0.00199EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/02/10 8:38 p.m.•48 views

CVE-2025-12699 ZOLL ePCR IOS Mobile Application Insertion of Sensitive Information into Externally-Accessible File or Directory

The ZOLL ePCR IOS application reflects unsanitized user input into a WebView. Attacker-controlled strings placed into PCR fields run number, incident, call sign, notes are interpreted as HTML/JS when the app prints or renders that content. In the proof of concept POC, injected scripts return loca...

6.7CVSS0.00199EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/02/10 8:38 p.m.•17 views

CVE-2025-12699

The ZOLL ePCR IOS application reflects unsanitized user input into a WebView. Attacker-controlled strings placed into PCR fields run number, incident, call sign, notes are interpreted as HTML/JS when the app prints or renders that content. In the proof of concept POC, injected scripts return loca...

6.7CVSS5.7AI score0.00199EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
•added 2026/02/10 8:38 p.m.•11 views

CVE-2025-12699 ZOLL ePCR IOS Mobile Application Insertion of Sensitive Information into Externally-Accessible File or Directory

The ZOLL ePCR IOS application reflects unsanitized user input into a WebView. Attacker-controlled strings placed into PCR fields run number, incident, call sign, notes are interpreted as HTML/JS when the app prints or renders that content. In the proof of concept POC, injected scripts return loca...

6.7CVSS6AI score0.00199EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/10 12:00 a.m.•7 views

CVE-2025-12699: Insertion of Sensitive Information into Externally-Accessible File or Directory

The ZOLL ePCR IOS application reflects unsanitized user input into a WebView. Attacker-controlled strings placed into PCR fields run number, incident, call sign, notes are interpreted as HTML/JS when the app prints or renders that content. In the proof of concept POC, injected scripts return loca...

6.7CVSS6AI score0.00199EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/18 12:00 a.m.•9 views

CVE-2021-41614: Incorrect Default Permissions

An issue was discovered in the controller unit of the OpenRISC mor1kx processor. The read/write access permissions to the Exception Program Counter Register EPCR are not implemented correctly. User programs from an unauthorized privilege level can make read/write accesses to EPCR...

7.8CVSS5.8AI score0.00162EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2023/04/18 12:00 a.m.•45 views

CVE-2021-41614

An issue was discovered in the controller unit of the OpenRISC mor1kx processor. The read/write access permissions to the Exception Program Counter Register EPCR are not implemented correctly. User programs from an unauthorized privilege level can make read/write accesses to EPCR...

7.8AI score0.00162EPSS
SaveExploits0References2
CVE
CVE
•added 2023/04/18 12:00 a.m.•68 views

CVE-2021-41614

The CVE-2021-41614 issue affects the OpenRISC mor1kx processor controller unit, where the EPCR read/write permissions are not enforced correctly, allowing read/write access to EPCR from an unauthorized privilege level. Root cause: incorrect implementation of EPCR access control in the controller ...

7.8CVSS7.5AI score0.00162EPSS
SaveExploits0References2Affected Software1
Packet Storm
Packet Storm
•added 2016/08/02 12:00 a.m.•35 views

Zoll ePCR 2.6.4 Script Insertion

Document Title: =============== Zoll ePCR v2.6.4 iOS - Multiple Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1882 Release Date: ============= 2016-08-01 Vulnerability Laboratory ID VL-ID: ====================================...

7.4AI score
SaveExploits0
Vulnerability Lab
Vulnerability Lab
•added 2016/08/01 12:00 a.m.•50 views

Zoll ePCR v2.6.4 iOS - Multiple Persistent Vulnerabilities

Document Title: =============== Zoll ePCR v2.6.4 iOS - Multiple Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1882 Release Date: ============= 2016-08-01 Vulnerability Laboratory ID VL-ID: ====================================...

7.1AI score
SaveExploits0
Vulnerability Lab
Vulnerability Lab
•added 2016/07/31 12:00 a.m.•37 views

Zoll ePCR v2.6.4 iOS - Multiple Persistent Vulnerabilities

Document Title: =============== Zoll ePCR v2.6.4 iOS - Multiple Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1882 Release Date: ============= 2016-07-31 Vulnerability Laboratory ID VL-ID: ====================================...

7.4AI score
SaveExploits0
Rows per page
Query Builder