Browse CVEs

CRITICAL 9.8 CVE-2023-37220 Synel Terminals - CWE-494: Download of Code Without Integrity Check Synergy\/a Firmware 3015.1+ Fix from $2,3002023-09-03 CRITICAL 9.8 CVE-2023-37213 Synel SYnergy Fingerprint Terminals - CWE-78: 'OS Command Injection' Synergy\/a Firmware 3015.1+ Fix from $2,3002023-07-30 CRITICAL 9.8 CVE-2023-32227 Synel SYnergy Fingerprint Terminals - CWE-798: Use of Hard-coded Credentials Synergy\/a Firmware 3015.1+ Fix from $2,3002023-07-30 MEDIUM 5.4 CVE-2022-36778 insert HTML / js code inside input how to get to the vulnerable input : Workers > worker nickname > inject in this input the code. Eharmony 11+ Fix from $1,6002022-09-13 HIGH 7.5 CVE-2022-22790 SYNEL - eharmony Directory Traversal. Directory Traversal - is an attack against a server or a Web application aimed at unauthorized access to the fi… Eharmony Mitigation only Fix from $1,9502022-01-28 MEDIUM 5.4 CVE-2022-22791 SYNEL - eharmony Authenticated Blind & Stored XSS. Inject JS code into the "comments" field could lead to potential stealing of cookies, loading of H… Eharmony Mitigation only Fix from $1,6002022-01-28 MEDIUM 6.5 CVE-2021-36718 SYNEL - eharmonynew / Synel Reports - The attacker can log in to the system with default credentials and export a report of eharmony system with sens… Eharmonynew 11.0+ Fix from $1,6002021-12-08 HIGH 7.8 CVE-2012-2970 The Synel SY-780/A Time & Attendance terminal allows remote attackers to cause a denial of service (device hang) via network traffic to port (1) 1641… Sy 780\/a Time \& Attendance Terminal Mitigation only Fix from $1,9502012-07-09