|
1351
|
- |
|
-
|
-
|
El panel de configuración de la interfaz gráfica de usuario web de Hirsch (anteriormente Identiv y Viscount) Enterphone MESH hasta 2024 se entrega con credenciales predeterminadas (nombre de usuario …
|
CWE-1393
Use of Default Password
|
CVE-2025-26793
|
2026-04-27 03:56 |
2025-02-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1352
|
- |
|
-
|
-
|
Local privilege escalation in Genetec Sipelia Plugin. An authenticated low-privileged Windows user could exploit this vulnerability to gain elevated privileges on the affected system.
|
CWE-250
Execution with Unnecessary Privileges
|
CVE-2025-1790
|
2026-04-27 03:49 |
2026-02-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1353
|
- |
|
-
|
-
|
Escalada de privilegios local en el plugin Genetec Sipelia. Un usuario de Windows autenticado con bajos privilegios podría explotar esta vulnerabilidad para obtener privilegios elevados en el sistema…
|
CWE-250
Execution with Unnecessary Privileges
|
CVE-2025-1790
|
2026-04-27 03:49 |
2026-02-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1354
|
7.8 |
HIGH
Local
|
genetec
|
genetec_update_service
|
Local privilege escalation in Genetec Update Service. An authenticated, low-privileged, Windows user could exploit this vulnerability to gain elevated privileges on the affected system.
|
CWE-276
Incorrect Default Permissions
|
CVE-2025-1789
|
2026-04-27 03:49 |
2026-02-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1355
|
7.8 |
HIGH
Local
|
genetec
|
genetec_update_service
|
Escalada de privilegios local en el Servicio de Actualización de Genetec. Un usuario de Windows autenticado y con pocos privilegios podría explotar esta vulnerabilidad para obtener privilegios elevad…
|
CWE-276
Incorrect Default Permissions
|
CVE-2025-1789
|
2026-04-27 03:49 |
2026-02-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1356
|
4.2 |
MEDIUM
Local
|
genetec
|
genetec_update_service
|
Local admin could to leak information from the Genetec Update Service configuration web page. An authenticated, admin privileged, Windows user could exploit this vulnerability to gain elevated privil…
|
CWE-346
Origin Validation Error
|
CVE-2025-1787
|
2026-04-27 03:49 |
2026-02-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1357
|
4.2 |
MEDIUM
Local
|
genetec
|
genetec_update_service
|
El administrador local podría filtrar información de la página web de configuración del Servicio de Actualización de Genetec. Un usuario de Windows autenticado y con privilegios de administrador podr…
|
CWE-346
Origin Validation Error
|
CVE-2025-1787
|
2026-04-27 03:49 |
2026-02-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1358
|
8.8 |
HIGH
Network
|
mrsilaz
|
mfa_mail
|
The extension fails to properly reset the generated MFA code after successful authentication. This leads to a possible MFA bypass for future login attempts by providing an empty string as MFA code to…
|
CWE-639
Authorization Bypass Through User-Controlled Key
|
CVE-2026-4208
|
2026-04-26 03:43 |
2026-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1359
|
8.8 |
HIGH
Network
|
mrsilaz
|
mfa_mail
|
La extensión no restablece correctamente el código MFA generado después de una autenticación exitosa. Esto conduce a una posible omisión de MFA para futuros intentos de inicio de sesión al proporcion…
|
CWE-639
Authorization Bypass Through User-Controlled Key
|
CVE-2026-4208
|
2026-04-26 03:43 |
2026-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1360
|
4.3 |
MEDIUM
Network
|
ayacoo
|
redirect_tab
|
The extension fails to verify, if an authenticated user has permissions to access to redirects resulting in exposure of redirect records when editing a page.
|
CWE-200 CWE-862
Information Exposure Missing Authorization
|
CVE-2026-4202
|
2026-04-26 03:40 |
2026-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|