Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
  • Support the projectPage
Milesight

Milesight MilesightVPN vulnerabilities

6 published CVEs name Milesight MilesightVPN among the affected products.

Newest CVEs

  • CVE-2023-22844

    An authentication bypass vulnerability exists in the requestHandlers.js verifyToken functionality of Milesight VPN v2.0.2. A specially-crafted network request…

    Milesight · MilesightVPN

    High7.3
  • CVE-2023-22319

    A sql injection vulnerability exists in the requestHandlers.js LoginAuth functionality of Milesight VPN v2.0.2. A specially-crafted network request can lead to…

    Milesight · MilesightVPN

    High7.3
  • CVE-2023-23907

    A directory traversal vulnerability exists in the server.js start functionality of Milesight VPN v2.0.2. A specially-crafted network request can lead to…

    Milesight · MilesightVPN

    High7.5
  • CVE-2023-22371

    An os command injection vulnerability exists in the liburvpn.so create_private_key functionality of Milesight VPN v2.0.2. A specially-crafted network request…

    Milesight · MilesightVPN

    High8.1
  • CVE-2023-24497

    Cross-site scripting (xss) vulnerabilities exist in the requestHandlers.js detail_device functionality of Milesight VPN v2.0.2. A specially-crafted HTTP…

    Milesight · MilesightVPN

    Medium4.7
  • CVE-2023-24496

    Cross-site scripting (xss) vulnerabilities exist in the requestHandlers.js detail_device functionality of Milesight VPN v2.0.2. A specially-crafted HTTP…

    Milesight · MilesightVPN

    Medium4.7