Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
supremainc biostar 2 vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv3
CVE-2023-33363
An authentication bypass vulnerability exists in Suprema BioStar 2 prior to 2.9.1, which allows unauthenticated users to access some functionality on BioStar 2 servers.
Supremainc Biostar 2
8.8
CVSSv3
CVE-2023-33364
An OS Command injection vulnerability exists in Suprema BioStar 2 before V2.9.1, which allows authenticated users to execute arbitrary OS commands on the BioStar 2 server.
Supremainc Biostar 2
7.5
CVSSv3
CVE-2023-33365
A path traversal vulnerability exists in Suprema BioStar 2 prior to 2.9.1, which allows unauthenticated malicious users to fetch arbitrary files from the server's web server.
Supremainc Biostar 2
8.8
CVSSv3
CVE-2023-33366
A SQL injection vulnerability exists in Suprema BioStar 2 prior to 2.9.1, which allows authenticated users to inject arbitrary SQL directives into an SQL statement and execute arbitrary SQL commands.
Supremainc Biostar 2
8.8
CVSSv3
CVE-2023-31923
Suprema BioStar 2 prior to 2022 Q4, v2.9.1 has Insecure Permissions. A vulnerability in the web application allows an authenticated attacker with "User Operator" privileges to create a highly privileged user account. The vulnerability is caused by missing server-side va...
Supremainc Biostar 2
6.5
CVSSv3
CVE-2023-27167
Suprema BioStar 2 v2.8.16 exists to contain a SQL injection vulnerability via the values parameter at /users/absence?search_month=1.
Supremainc Biostar 2
8.8
CVSSv3
CVE-2022-38351
A vulnerability in Suprema BioStar (aka Bio Star) 2 v2.8.16 allows malicious users to escalate privileges to System Administrator via a crafted PUT request to the update profile page.
Supremainc Biostar 2 2.8.16
7.5
CVSSv3
CVE-2020-15050
An issue exists in the Video Extension in Suprema BioStar 2 prior to 2.8.2. Remote attackers can read arbitrary files from the server via Directory Traversal.
Supremainc Biostar 2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-33572
CVE-2024-24919
CVE-2024-0230
CVE-2024-32714
HTML injection
local file inclusion
CVE-2024-31098
CVE-2024-31244
privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started