Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Riello vulnerabilities

5 published CVEs name Riello among the affected products.

Newest CVEs

  • CVE-2025-68916

    Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/certsupload.cgi /../ directory traversal for file upload with resultant code execution.

    Riello · NetMan

    Critical9.1
  • CVE-2025-68915

    Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/loginbanner_w.cgi XSS via a crafted banner.

    Riello · NetMan

    Medium5.5
  • CVE-2025-68914

    Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/login.cgi username SQL Injection. For example, an attacker can delete the LOGINFAILEDTABLE table.

    Riello · NetMan

    Medium6.5
  • CVE-2024-8877

    SQL Injection

    Riello · Netman 204

    Medium6.9
  • CVE-2024-8878

    Unauthenticated Password Reset

    Riello · Netman 204

    Critical10.0