Vulnerabilities

TI-2025-37882 CVE-2025-60969 · GHSA-64pg-4849-m5gf

Directory Traversal vulnerability in EndRun Technologies Sonoma D12 Network Time Server…

LOW 26

Directory Traversal vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0076-000 Ver 4.00 allows attackers to gain sensitive information.

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00571 Published 2025-10-06 No fix listed CWE-22

TI-2025-37881 CVE-2025-60967 · GHSA-8q25-5qmv-7mp9

Cross Site Scripting (XSS) vulnerability in EndRun Technologies Sonoma D12 Network Time…

LOW 32

Cross Site Scripting (XSS) vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0076-000 Ver 4.00 allows attackers to gain sensitive information.

CVSS 3.1HIGH 7.3 Network Low privileges User interaction EPSS 0.00269 Published 2025-10-06 No fix listed CWE-79

TI-2025-37880 CVE-2025-60965 · GHSA-g9cj-hxqw-gxfg

OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server…

MEDIUM 44

OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of service, gain escalated privileges,…

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.0121 Published 2025-10-06 No fix listed CWE-78

TI-2025-37879 CVE-2025-60964 · GHSA-2r3w-2wv9-j7pp

OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server…

MEDIUM 44

OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of service, gain escalated privileges,…

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.0121 Published 2025-10-06 No fix listed CWE-78

TI-2025-37878 CVE-2025-60963 · GHSA-6gr7-rrxf-7j6f

OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server…

MEDIUM 45

OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of service, gain escalated privileges,…

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00921 Published 2025-10-06 No fix listed CWE-78

TI-2025-37877 CVE-2025-60962 · GHSA-2jmv-xwch-pcqf

OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server…

MEDIUM 45

OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-000 Ver 4.00 allows attackers to gain sensitive information, and possibly other unspecified impacts.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.0074 Published 2025-10-06 No fix listed CWE-78

TI-2025-37876 CVE-2025-60961 · GHSA-vjhq-w74h-wf6r

Cross Site Scripting (XSS) vulnerability in EndRun Technologies Sonoma D12 Network Time…

LOW 27

Cross Site Scripting (XSS) vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-000 Ver 4.00 allows attackers to gain sensitive information, and possibly other unspecified impacts.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00195 Published 2025-10-06 No fix listed CWE-79

TI-2025-37875 CVE-2025-60960 · GHSA-p3g9-p3xx-269g

OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server…

MEDIUM 45

OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of service, gain escalated privileges,…

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00913 Published 2025-10-06 No fix listed CWE-78

TI-2025-37874 CVE-2025-60959 · GHSA-v4hr-6882-m274

OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server…

MEDIUM 45

OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-000 Ver 4.00 allows attackers to gain sensitive information.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.0074 Published 2025-10-06 No fix listed CWE-78

TI-2025-37873 CVE-2025-60958 · GHSA-cjc6-p8m4-824m

Cross Site Scripting (XSS) vulnerability in EndRun Technologies Sonoma D12 Network Time…

LOW 32

Cross Site Scripting (XSS) vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-000 Ver 4.00 allows attackers to gain sensitive information.

CVSS 3.1HIGH 7.3 Network Low privileges User interaction EPSS 0.00266 Published 2025-10-06 No fix listed CWE-79

TI-2025-37872 CVE-2025-60957 · GHSA-99xj-vfcm-m8m2

OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server…

MEDIUM 45

OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of service, gain escalated privileges,…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01167 Published 2025-10-06 No fix listed CWE-78

TI-2025-37871 CVE-2025-60956 · GHSA-w7px-7mr6-r9g4

Cross Site Request Forgery (CSRF) vulnerability in EndRun Technologies Sonoma D12 Network…

LOW 36

Cross Site Request Forgery (CSRF) vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of service, gain escalated…

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00204 Published 2025-10-06 No fix listed CWE-352

Vulnerabilities

Filters