Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Avm Component: Fritz! Os Clear all filters
TI-2015-06014 CVE-2015-7242 · GHSA-65xx-2x9j-ccgr

Cross-site scripting (XSS) vulnerability in the Push-Service-Mails feature in AVM…

Priority LOW 30

Cross-site scripting (XSS) vulnerability in the Push-Service-Mails feature in AVM FRITZ!OS before 6.30 allows remote attackers to inject arbitrary web script or HTML via the display name in the FROM field of an SIP INVIT…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01515 Published 2016-01-12 No fix listed CWE-79
TI-2014-07255 CVE-2014-8886 · GHSA-w6v8-ffc7-5f5p

AVM FRITZ!OS before 6.30 extracts the contents of firmware updates before verifying their…

Priority MEDIUM 44

AVM FRITZ!OS before 6.30 extracts the contents of firmware updates before verifying their cryptographic signature, which allows remote attackers to create symlinks or overwrite critical files, and consequently execute ar…

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.06137 Published 2016-01-08 No fix listed CWE-310