Priority HIGH 82
Unauthenticated OS Command Injection (restore_settings.php) in DB Electronica Telecomunicazioni S.p.A.
CVSS 4.0CRITICAL 9.9· Network · No auth · No interaction · EPSS 0.02302 · Published 2025-11-26 · No fix listed CWE-78
Priority HIGH 82
Unauthenticated Arbitrary File Upload (patch_contents.php) in DB Electronica Telecomunicazioni S.p.A.
CVSS 4.0CRITICAL 9.9· Network · No auth · No interaction · EPSS 0.00469 · Published 2025-11-26 · No fix listed CWE-434
Priority HIGH 82
Unauthenticated Arbitrary File Upload (upgrade_contents.php) in DB Electronica Telecomunicazioni S.p.A.
CVSS 4.0CRITICAL 9.9· Network · No auth · No interaction · EPSS 0.00406 · Published 2025-11-26 · No fix listed CWE-345
Priority HIGH 82
Unauthenticated OS Command Injection (start_upgrade.php) in DB Electronica Telecomunicazioni S.p.A.
CVSS 4.0CRITICAL 9.9· Network · No auth · No interaction · EPSS 0.02302 · Published 2025-11-26 · No fix listed CWE-78
Priority HIGH 81
Unauthenticated Arbitrary File Deletion (patch_contents.php) in DB Electronica Telecomunicazioni S.p.A.
CVSS 4.0CRITICAL 9.2· Network · No auth · No interaction · EPSS 0.00411 · Published 2025-11-26 · No fix listed CWE-73
Priority HIGH 78
Infinite Loop Denial of Service via Failed File Deletion in DB Electronica Telecomunicazioni S.p.A.
CVSS 4.0HIGH 8.4· Network · High privileges · No interaction · EPSS 0.00389 · Published 2025-11-26 · No fix listed CWE-835
Priority HIGH 73
Unauthenticated Arbitrary File Deletion (upgrade_contents.php) in DB Electronica Telecomunicazioni S.p.A.
CVSS 4.0HIGH 7.8· Network · No auth · No interaction · EPSS 0.00411 · Published 2025-11-26 · No fix listed CWE-73
Priority HIGH 65
PostgreSQL SQL Injection (status_sql.php) in DB Electronica Telecomunicazioni S.p.A.
CVSS 4.0HIGH 7.2· Network · Low privileges · No interaction · EPSS 0.00328 · Published 2025-11-26 · No fix listed CWE-89
Priority MEDIUM 64
Stored Cross-Site Scripting via XML Injection in DB Electronica Telecomunicazioni S.p.A.
CVSS 4.0HIGH 7.1· Network · No auth · User interaction · EPSS 0.00206 · Published 2025-11-26 · No fix listed CWE-79
Priority MEDIUM 58
The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains a reflected Cross-Site Scripting (XSS) vulnerability in the /main0.php endpoint.
CVSS 3.1MEDIUM 5.4· Network · No auth · User interaction · EPSS 0.00298 · Published 2025-11-18 · No fix listed CWE-79
Priority MEDIUM 51
Arbitrary File Overwrite via Tar Extraction Path Traversal in DB Electronica Telecomunicazioni S.p.A.
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.01527 · Published 2025-11-26 · No fix listed CWE-22
Priority MEDIUM 50
The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains an unauthenticated file upload vulnerability in the /upload_file.php endpoint.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00817 · Published 2025-11-18 · No fix listed CWE-434
Priority MEDIUM 49
Authenticated Root Remote Code Execution via improrer user input filtering in DB Electronica Telecomunicazioni S.p.A.
CVSS 4.0CRITICAL 9.3· Network · High privileges · No interaction · EPSS 0.00707 · Published 2025-11-26 · No fix listed CWE-20
Priority MEDIUM 46
Unauthenticated Arbitrary File Upload (status_contents.php) in DB Electronica Telecomunicazioni S.p.A.
CVSS 4.0CRITICAL 9.2· Network · No auth · No interaction · EPSS 0.00469 · Published 2025-11-26 · No fix listed CWE-434
Priority MEDIUM 40
Unauthenticated Path Traversal with Arbitrary File Deletion in DB Electronica Telecomunicazioni S.p.A.
CVSS 4.0HIGH 7.7· Network · No auth · No interaction · EPSS 0.00523 · Published 2025-11-26 · No fix listed CWE-22
Priority LOW 39
Unauthenticated Arbitrary File Read via Null Byte Injection in DB Electronica Telecomunicazioni S.p.A.
CVSS 4.0HIGH 8.9· Network · No auth · No interaction · EPSS 0.00421 · Published 2025-11-26 · No fix listed CWE-158
Priority LOW 35
The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains an unrestricted file upload vulnerability in the /patch.php endpoint.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00609 · Published 2025-11-18 · No fix listed CWE-434
THREATIST.IORead the docs