VULNERABILITY

CVE search

Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.

404.385 vulnerabilities · 1.768 actively exploited (CISA KEV)

upspowercom ✕Clear filters

4 results

ID	Severity	Summary	Published
CVE-2022-38122	HOCH7.5	UPSMON PRO transmits sensitive data in cleartext over HTTP protocol. An unauthenticated remote attacker can exploit this vulnerability to access sensitive data.	10/11/2022
CVE-2022-38121	MITTEL6.5	UPSMON PRO configuration file stores user password in plaintext under public user directory. A remote attacker with general user privilege can access all users‘ and administrators' account names and passwords via this unprotected configuration file.	10/11/2022
CVE-2022-38120	MITTEL6.5	UPSMON PRO’s has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerability to bypass authentication and access arbitrary system files.	10/11/2022