Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
WinstonprivacyWinston Firmware

2 matches found

CVE
CVE•added 2020/10/28 6:15 p.m.•30 views

CVE-2020-16256

The API on Winston 1.5.4 devices is vulnerable to CSRF.

9.3CVSS8.7AI score0.00154EPSS
CVE
CVE•added 2020/10/28 6:15 p.m.•26 views

CVE-2020-16263

Winston 1.5.4 devices have a CORS configuration that trusts arbitrary origins. This allows requests to be made and viewed by arbitrary origins.

9.1CVSS9.1AI score0.00307EPSS