EUVD-2022-55924

JM-DATA ONU JF511-TV version 1.0.67 is vulnerable to cross-site request forgery CSRF attacks, allowing attackers to perform administrative actions on behalf of authenticated users without their knowledge or consent...

EUVD-2022-55925

JM-DATA ONU JF511-TV version 1.0.67 uses default credentials that allow attackers to gain unauthorized access to the device with administrative privileges...

EUVD-2022-55926

JM-DATA ONU JF511-TV version 1.0.67 is vulnerable to authenticated stored cross-site scripting XSS attacks, allowing attackers with authenticated access to inject malicious scripts that will be executed in other users' browsers when they view the affected content...

CVE-2022-50801

JM-DATA ONU JF511-TV version 1.0.67 is vulnerable to authenticated stored cross-site scripting XSS attacks, allowing attackers with authenticated access to inject malicious scripts that will be executed in other users' browsers when they view the affected content...

CVE-2022-50804

JM-DATA ONU JF511-TV version 1.0.67 is vulnerable to cross-site request forgery CSRF attacks, allowing attackers to perform administrative actions on behalf of authenticated users without their knowledge or consent...

CVE-2022-50804

JM-DATA ONU JF511-TV version 1.0.67 is vulnerable to cross-site request forgery CSRF attacks, allowing attackers to perform administrative actions on behalf of authenticated users without their knowledge or consent...

CVE-2022-50804

The vulnerability CVE-2022-50804 affects JM-DATA ONU JF511-TV version 1.0.67 and is a CSRF flaw that allows an attacker to perform administrative actions on behalf of an authenticated user. The issue is driven by cross-site request forgery in the device’s web interface, enabling unauthorized admi...

CVE-2022-50804 JM-DATA ONU JF511-TV 1.0.67 Cross-Site Request Forgery (CSRF) Vulnerability

JM-DATA ONU JF511-TV version 1.0.67 is vulnerable to cross-site request forgery CSRF attacks, allowing attackers to perform administrative actions on behalf of authenticated users without their knowledge or consent...

CVE-2022-50804 JM-DATA ONU JF511-TV 1.0.67 Cross-Site Request Forgery (CSRF) Vulnerability

JM-DATA ONU JF511-TV version 1.0.67 is vulnerable to cross-site request forgery CSRF attacks, allowing attackers to perform administrative actions on behalf of authenticated users without their knowledge or consent...

CVE-2022-50801 JM-DATA ONU JF511-TV 1.0.67 Authenticated Stored Cross-Site Scripting (XSS) Vulnerability

JM-DATA ONU JF511-TV version 1.0.67 is vulnerable to authenticated stored cross-site scripting XSS attacks, allowing attackers with authenticated access to inject malicious scripts that will be executed in other users' browsers when they view the affected content...

CVE-2022-50803

The JM-DATA ONU JF511-TV device, v1.0.67, is affected by a default-credentials vulnerability. Root cause: use of default credentials leading to unauthenticated administrative access. Impact: attackers could fully compromise the device (high impact to confidentiality, integrity, and availability)....

PT-2025-54250

Name of the Vulnerable Software and Affected Versions JM-DATA ONU JF511-TV version 1.0.67 Description The JM-DATA ONU JF511-TV device version 1.0.67 utilizes default credentials, enabling attackers to obtain unauthorized access with administrative privileges. This access allows attackers to fully...

PT-2025-54248

Name of the Vulnerable Software and Affected Versions JM-DATA ONU JF511-TV version 1.0.67 Description The JM-DATA ONU JF511-TV device version 1.0.67 is susceptible to authenticated stored cross-site scripting XSS attacks. An attacker gaining authenticated access can inject malicious scripts. Thes...

JM-DATA ONU JF511-TV 安全漏洞

The JM-DATA ONU JF511-TV is an optical cat terminal device from JM-DATA Austria. A security vulnerability exists in the JM-DATA ONU JF511-TV version 1.0.67, which stems from the use of default credentials and could lead to unauthorized administrator access...

JM-DATA ONU JF511-TV 跨站脚本漏洞

The JM-DATA ONU JF511-TV is an optical cat terminal device from JM-DATA Austria. A cross-site scripting vulnerability exists in JM-DATA ONU JF511-TV version 1.0.67, which stems from an authenticated stored cross-site scripting vulnerability that could lead to malicious script injection...

PT-2025-4607 · Splunk · Splunk App For Soar

Name of the Vulnerable Software and Affected Versions: Splunk App for SOAR versions 1.0.67 and lower Description: The issue is related to improper access control. In the affected versions of the Splunk App for SOAR, the documentation recommended adding the admin all objects capability to the splu...

Splunk App for SOAR 安全漏洞

Splunk App for SOAR is a suite of data collection and analytics software from Splunk, Inc. in the United States. A security vulnerability exists in Splunk App for SOAR version 1.0.67 and earlier, which stems from improper access control...

Xiaomi router AX3600 数据伪造问题漏洞

Xiaomi router AX3600 is a router from Xiaomi, China.A command injection vulnerability exists prior to Xiaomi Router AX3600 1.0.67, which stems from a lack of inspection of incoming data and can be exploited by attackers to execute code...