Embedded System Vulnerabilities
A focused list of vulnerabilities relevant to embedded and IoT devices.
| CVE ID | Description | Severity | Published | Type |
|---|---|---|---|---|
| CVE-2020-21729 | JEECMS x1.1 contains a stored cross-site scripting (XSS) vulnerability in the component of /member-vipcenter.htm, which… | Medium (5.4) | 2021-10-07 | Environment Specific |
| CVE-2020-21726 | OpenSNS v6.1.0 contains a blind SQL injection vulnerability in /Controller/ChinaCityController.class.php via the cid pa… | Critical (9.8) | 2021-10-07 | Environment Specific |
| CVE-2020-21725 | OpenSNS v6.1.0 contains a blind SQL injection vulnerability in /Controller/ChinaCityController.class.php via the pid pa… | Critical (9.8) | 2021-10-07 | Environment Specific |
| CVE-2021-42088 | An issue was discovered in Zammad before 4.1.1. The Chat functionality allows XSS because clipboard data is mishandled. | Medium (6.1) | 2021-10-07 | Environment Specific |
| CVE-2021-42084 | An issue was discovered in Zammad before 4.1.1. An attacker with valid agent credentials may send a series of crafted r… | Medium (6.5) | 2021-10-07 | Environment Specific |