Mar 19, 2025
3 new incidents, 0 with updates.
Started
- ClosedPatched
Edimax IC-7100 IP Camera: IC-7100 IP Camera OS Command Injection Vulnerability
Edimax IC-7100 IP camera contains an OS command injection vulnerability due to improper input sanitization that allows an attacker to achieve remote code execution via specially crafted requests. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization. Added to CISA KEV on 2025-03-19.
Edimax IC-7100 IP CameraClosed Mar 19, 2025
- ClosedPatched
NAKIVO Backup and Replication: Backup and Replication Absolute Path Traversal Vulnerability
NAKIVO Backup and Replication contains an absolute path traversal vulnerability that enables an attacker to read arbitrary files. Added to CISA KEV on 2025-03-19.
NAKIVO Backup and ReplicationClosed Mar 19, 2025
- ClosedPatched
SAP NetWeaver: NetWeaver Directory Traversal Vulnerability
SAP NetWeaver Application Server (AS) Java contains a directory traversal vulnerability in scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScriptJS that allows a remote attacker to read arbitrary files via a .. (dot dot) in the query string. Added to CISA KEV on 2025-03-19.
SAP NetWeaverClosed Mar 19, 2025
