Vulnerability index

Browse CVEs

4 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

CRITICAL 9.8 CVE-2024-38466 Shenzhen Guoxin Synthesis image system before 8.3.0 has a 123456Qw default password. Synthesis Image System 8.3.0+ Fix from $2,3002024-06-16 CRITICAL 9.8 CVE-2024-38468 Shenzhen Guoxin Synthesis image system before 8.3.0 allows unauthorized password resets via the resetPassword API. Synthesis Image System 8.3.0+ Fix from $2,3002024-06-16 HIGH 7.5 CVE-2024-38467 Shenzhen Guoxin Synthesis image system before 8.3.0 allows unauthorized user information retrieval via the queryUser API. Synthesis Image System 8.3.0+ Fix from $1,9502024-06-16 MEDIUM 5.3 CVE-2024-38465 Shenzhen Guoxin Synthesis image system before 8.3.0 allows username enumeration because of the response discrepancy of incorrect versus error. Synthesis Image System 8.3.0+ Fix from $1,6002024-06-16