Top technology
Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
Synthesis Image System
CRITICAL 9.8
CVE-2024-38466
Shenzhen Guoxin Synthesis image system before 8.3.0 has a 123456Qw default password.
Fix: 8.3.0+
Fix from $2,300
2024-06-16
Synthesis Image System
CRITICAL 9.8
CVE-2024-38468
Shenzhen Guoxin Synthesis image system before 8.3.0 allows unauthorized password resets via the resetPassword API.
Fix: 8.3.0+
Fix from $2,300
2024-06-16
Synthesis Image System
HIGH 7.5
CVE-2024-38467
Shenzhen Guoxin Synthesis image system before 8.3.0 allows unauthorized user information retrieval via the queryUser API.
Fix: 8.3.0+
Fix from $1,950
2024-06-16
Synthesis Image System
MEDIUM 5.3
CVE-2024-38465
Shenzhen Guoxin Synthesis image system before 8.3.0 allows username enumeration because of the response discrepancy of incorrect versus error.
Fix: 8.3.0+
Fix from $1,600
2024-06-16