CVE-2026-12621

GridTime 3000 GNSS Time Server Password Reset form is vulnerable to XSS due to improper neutralization of input during web page generation. Affected from 1.0r0.03 up to, but not including, 1.2r0.0. Base CVSS v4 score is 5.3 (Medium). No exploitation details are provided in the documents; no remed...

CVE-2025-60956

A Cross Site Request Forgery (CSRF) vulnerability exists in the EndRun Technologies Sonoma D12 Network Time Server (GPS) , specifically affecting firmware F/W 6010-0071-000 Ver 4.00 . This flaw allows an attacker to execute arbitrary code , cause a denial of service , gain escalated privileges , ...

Multiple Microsemi Product Path Traversal Vulnerabilities

Microsemi Symmetricom SyncServer S100 and others are a network time server from Microsemi, USA. A path traversal vulnerability exists in multiple Microsemi products. The vulnerability stems from a failure of a networked system or product to properly filter special elements in a resource or file...