CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

857 matches found

Rapid7 Vulnerability Database (full)•added 2025/12/28 12:00 a.m.•5 views

CVE-2025-15133: Improper Neutralization of Special Elements used in a Command

A vulnerability was identified in ZSPACE Z4Pro+ 1.0.0440024. The impacted element is the function zfilev2apiCloseSafe of the file /v2/file/safe/close of the component HTTP POST Request Handler. Such manipulation leads to command injection. It is possible to launch the attack remotely. The exploit...

8.8CVSS6.4AI score0.0786EPSS

SaveExploits1References1

Rapid7 Vulnerability Database (full)•added 2025/12/28 12:00 a.m.•1 views

CVE-2025-15132: Improper Neutralization of Special Elements used in a Command

A vulnerability was determined in ZSPACE Z4Pro+ 1.0.0440024. The affected element is the function zfilev2apiopen of the file /v2/file/safe/open of the component HTTP POST Request Handler. This manipulation causes command injection. It is possible to initiate the attack remotely. The exploit has...

8.8CVSS6.3AI score0.07643EPSS

SaveExploits1References1

Rapid7 Vulnerability Database (full)•added 2025/12/28 12:00 a.m.•2 views

CVE-2025-15131: Improper Neutralization of Special Elements used in a Command

A vulnerability was found in ZSPACE Z4Pro+ 1.0.0440024. Impacted is the function zfilev2apiSafeStatus of the file /v2/file/safe/status of the component HTTP POST Request Handler. The manipulation results in command injection. The attack may be performed from remote. The exploit has been made publ...

8.8CVSS6.2AI score0.07643EPSS

SaveExploits1References1

Rapid7 Vulnerability Database (full)•added 2025/12/05 12:00 a.m.•3 views

CVE-2025-14106: Improper Neutralization of Special Elements used in a Command

A vulnerability was identified in ZSPACE Q2C NAS up to 1.1.0210050. Affected is the function zfilev2api.CloseSafe of the file /v2/file/safe/close of the component HTTP POST Request Handler. The manipulation of the argument safedir leads to command injection. The attack is possible to be carried o...

9CVSS7.6AI score0.12088EPSS

SaveExploits1References6

Rapid7 Vulnerability Database (full)•added 2025/12/05 12:00 a.m.•3 views

CVE-2025-14107: Improper Neutralization of Special Elements used in a Command

A security flaw has been discovered in ZSPACE Q2C NAS up to 1.1.0210050. Affected by this vulnerability is the function zfilev2api.SafeStatus of the file /v2/file/safe/status of the component HTTP POST Request Handler. The manipulation of the argument safedir results in command injection. The...

9CVSS7.4AI score0.12203EPSS

SaveExploits1References6

Rapid7 Vulnerability Database (full)•added 2025/12/05 12:00 a.m.•3 views

CVE-2025-14108: Improper Neutralization of Special Elements used in a Command

A weakness has been identified in ZSPACE Q2C NAS up to 1.1.0210050. Affected by this issue is the function zfilev2api.OpenSafe of the file /v2/file/safe/open of the component HTTP POST Request Handler. This manipulation of the argument safedir causes command injection. It is possible to initiate...

9CVSS7.4AI score0.10465EPSS

SaveExploits1References4