1082 matches found
CVE-2025-52546: Unrestricted Upload of File with Dangerous Type
E3 Site Supervisor Control firmware version 2.31F01 has a floor plan feature that allows for an unauthenticated attacker to upload floor plan files. By uploading a specially crafted floor plan file, an attacker can inject a stored XSS to the floorplan web page...
CVE-2025-52545: Insufficiently Protected Credentials
E3 Site Supervisor Control firmware version 2.31F01 RCI service contains an API call to read users info, which returns all usernames and password hashes for the application services...
CVE-2025-52549: Insufficiently Protected Credentials
E3 Site Supervisor Control firmware version 2.31F01 generates the root linux password on each boot. An attacker can generate the root linux password for a vulnerable device based on known or easy to fetch parameters...
CVE-2025-52543: Use of Password Hash Instead of Password for Authentication
E3 Site Supervisor Control firmware version 2.31F01 application services MGW and RCI uses client side hashing for authentication. An attacker can authenticate by obtaining only the password hash...
CVE-2025-25737
Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units RSUs v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 were discovered to lack secure password requirements for its BIOS Supervisor and User accounts, allowing attackers to bypass authentication via a bruteforce attack...
CVE-2025-25737
Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units RSUs v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 were discovered to lack secure password requirements for its BIOS Supervisor and User accounts, allowing attackers to bypass authentication via a bruteforce attack...
CVE-2025-25737: Weak Password Requirements
Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units RSUs v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 were discovered to lack secure password requirements for its BIOS Supervisor and User accounts, allowing attackers to bypass authentication via a bruteforce attack...
Linux Distros Unpatched Vulnerability : CVE-2019-12105
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Supervisor through 4.0.2, an unauthenticated user can read log files or restart a service. Note: The maintainer responded that the affected component,...
CVE-2025-50897
A vulnerability exists in riscv-boom SonicBOOM 1.2 BOOMv1.2 processor implementation, where valid virtual-to-physical address translations configured with write permissions PTEW in SV39 mode may incorrectly trigger a Store/AMO access fault during store instructions sd. This occurs despite the...
MAL-2025-34228 Malicious code in supervisor-spectroscopy-tardigrade-native (npm)
The package supervisor-spectroscopy-tardigrade-native was found to contain malicious code...
Malicious code in nova-react-bootstrap-supervisor-abiogenesis (npm)
The package nova-react-bootstrap-supervisor-abiogenesis was found to contain malicious code...
Malicious code in optimize-css-assets-webpack-plugin-quantum-supervisor-oscillation (npm)
The package optimize-css-assets-webpack-plugin-quantum-supervisor-oscillation was found to contain malicious code...
Malicious code in prosthetics-commitlint-config-angular-dotenv-safe-supervisor (npm)
The package prosthetics-commitlint-config-angular-dotenv-safe-supervisor was found to contain malicious code...
Malicious code in foundation-supervisor-meissa-polaris (npm)
The package foundation-supervisor-meissa-polaris was found to contain malicious code...
MAL-2025-22804 Malicious code in husky-library-janus-supervisor (npm)
The package husky-library-janus-supervisor was found to contain malicious code...
MAL-2025-27754 Malicious code in nova-react-bootstrap-supervisor-abiogenesis (npm)
The package nova-react-bootstrap-supervisor-abiogenesis was found to contain malicious code...
MAL-2025-20815 Malicious code in foundation-supervisor-meissa-polaris (npm)
The package foundation-supervisor-meissa-polaris was found to contain malicious code...
MAL-2025-34225 Malicious code in supervisor-graviton-triton-iota (npm)
The package supervisor-graviton-triton-iota was found to contain malicious code...