Milesight MilesightVPN vulnerabilities

6 published CVEs name Milesight MilesightVPN among the affected products.

Critical 0High 4Medium 2Low 0Not scored 0

Newest CVEs

CVE-2023-22844
An authentication bypass vulnerability exists in the requestHandlers.js verifyToken functionality of Milesight VPN v2.0.2. A specially-crafted network request…
Milesight · MilesightVPN
High7.3
CVE-2023-22319
A sql injection vulnerability exists in the requestHandlers.js LoginAuth functionality of Milesight VPN v2.0.2. A specially-crafted network request can lead to…
Milesight · MilesightVPN
High7.3
CVE-2023-23907
A directory traversal vulnerability exists in the server.js start functionality of Milesight VPN v2.0.2. A specially-crafted network request can lead to…
Milesight · MilesightVPN
High7.5
CVE-2023-22371
An os command injection vulnerability exists in the liburvpn.so create_private_key functionality of Milesight VPN v2.0.2. A specially-crafted network request…
Milesight · MilesightVPN
High8.1
CVE-2023-24497
Cross-site scripting (xss) vulnerabilities exist in the requestHandlers.js detail_device functionality of Milesight VPN v2.0.2. A specially-crafted HTTP…
Milesight · MilesightVPN
Medium4.7
CVE-2023-24496
Cross-site scripting (xss) vulnerabilities exist in the requestHandlers.js detail_device functionality of Milesight VPN v2.0.2. A specially-crafted HTTP…
Milesight · MilesightVPN
Medium4.7