cret@cert.org
organizationUS01
roles
Roles this identity holds.
02
references
Other names and identifiers for this entity.
nvdUS cret@cert.org
03
assessed vulnerabilities (57)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-7299US | medium5.4 | Exploit | ||
Appsmith’s SQL query editor’s autocomplete functionality fails to sanitize database object names before rendering them in innerHTML, allowing an authenticated Developer to inject p… | ||||
| CVE-2022-40258US | medium5.3 | — | ||
AMI Megarac Weak password hashes for
Redfish & API | ||||
| CVE-2022-26872US | high8.8 | — | ||
AMI Megarac Password reset interception via API | ||||
| CVE-2022-40259US | critical9.8OT elevated | — | ||
MegaRAC Default Credentials Vulnerability | ||||
| CVE-2022-40242US | critical9.8OT elevated | — | ||
MegaRAC Default Credentials Vulnerability | ||||
| CVE-2022-2827US | high7.5 | — | ||
AMI MegaRAC User Enumeration Vulnerability | ||||
| CVE-2021-27859US | high8.8OT elevated | — | ||
A missing authorization vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 allows an authenticate… | ||||
| CVE-2021-27858US | medium5.3OT elevated | — | ||
A missing authorization vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 allows a remote attack… | ||||
| CVE-2021-27857US | high7.5OT elevated | — | ||
A missing authorization vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 allows a remote, unaut… | ||||
| CVE-2021-27856US | critical9.8OT elevated | — | ||
FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 includes an account named "cmuser" that has administrative privileges and no password. Older ve… | ||||
| CVE-2021-27855US | high8.8OT elevated | — | ||
FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 allows a remote, authenticated attacker with read-only privileges to grant themselves administr… | ||||
| CVE-2021-27860US | high8.8OT critical | KEV | ||
A vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p92 and 10.2.2r44p1 allows a remote, unauthenticated attacker… | ||||
| CVE-2021-27852US | critical9.8OT critical | KEV | ||
Deserialization of Untrusted Data vulnerability in CheckboxWeb.dll of Checkbox Survey allows an unauthenticated remote attacker to execute arbitrary code. This issue affects: Check… | ||||
| CVE-2020-10145US | high7.8OT elevated | — | ||
The Adobe ColdFusion installer fails to set a secure access-control list (ACL) on the default installation directory, such as C:\ColdFusion2021\. By default, unprivileged users can… | ||||
| CVE-2020-10143US | high7.8 | — | ||
Macrium Reflect includes an OpenSSL component that specifies an OPENSSLDIR variable as C:\openssl\. Macrium Reflect contains a privileged service that uses this OpenSSL component.… | ||||
| CVE-2020-10146US | medium5.4 | — | ||
The Microsoft Teams online service contains a stored cross-site scripting vulnerability in the displayName parameter that can be exploited on Teams clients to obtain sensitive info… | ||||
| CVE-2020-10140US | high7.3 | — | ||
Acronis True Image 2021 fails to properly set ACLs of the C:\ProgramData\Acronis directory. Because some privileged processes are executed from the C:\ProgramData\Acronis, an unpri… | ||||
| CVE-2020-10139US | high7.8 | — | ||
Acronis True Image 2021 includes an OpenSSL component that specifies an OPENSSLDIR variable as a subdirectory within C:\jenkins_agent\. Acronis True Image contains a privileged ser… | ||||
| CVE-2020-10138US | high7.8 | — | ||
Acronis Cyber Backup 12.5 and Cyber Protect 15 include an OpenSSL component that specifies an OPENSSLDIR variable as a subdirectory within C:\jenkins_agent\. Acronis Cyber Backup a… | ||||
| CVE-2020-10135US | medium5.4 | Exploit | ||
Legacy pairing and secure-connections pairing authentication in Bluetooth BR/EDR Core Specification v5.2 and earlier may allow an unauthenticated user to complete authentication wi… | ||||