SOUND4 Ltd. Stream vulnerabilities
20 published CVEs name SOUND4 Ltd. Stream among the affected products.
- Published CVEs
- 20
- Last 12 months
- 20
- Critical
- 6
- Known exploited
- 0
Critical 6High 9Medium 5Low 0Not scored 0
Newest CVEs
- CVE-2022-50796
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated Remote Code Execution via upload.cgi
SOUND4 Ltd. · Impact/Pulse/First
Critical9.3 - CVE-2022-50795
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Conditional Command Injection via traceroute.php
SOUND4 Ltd. · Impact/Pulse/First
High8.5 - CVE-2022-50794
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated Command Injection via Username
SOUND4 Ltd. · Impact/Pulse/First
Critical9.3 - CVE-2022-50793
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Authenticated Command Injection via www-data-handler.php
SOUND4 Ltd. · Impact/Pulse/First
High8.7 - CVE-2022-50792
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated File Disclosure Vulnerability
SOUND4 Ltd. · Impact/Pulse/First
High8.7 - CVE-2022-50791
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Conditional Command Injection via ping.php
SOUND4 Ltd. · Impact/Pulse/First
High8.5 - CVE-2022-50790
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated Radio Stream Disclosure
SOUND4 Ltd. · Impact/Pulse/First
Medium6.9 - CVE-2022-50789
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Conditional Command Injection via dns.php
SOUND4 Ltd. · Impact/Pulse/First
High8.5 - CVE-2022-50788
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Information Disclosure via Log Directory
SOUND4 Ltd. · Impact/Pulse/First
Medium6.9 - CVE-2022-50787
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated Stored Cross-Site Scripting
SOUND4 Ltd. · Impact/Pulse/First
Medium5.3
Most common weaknesses
- CWE-78 OS command injection6
- CWE-22 Path traversal3
- CWE-306 Missing authentication for a critical function2
- CWE-89 SQL injection2
- CWE-352 Cross-site request forgery (CSRF)1
- CWE-548 1
- CWE-613 1
- CWE-639 Authorization bypass through a user-controlled key (IDOR)1
- CWE-770 Allocation of resources without limits1
- CWE-79 Cross-site scripting (XSS)1