Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9A vulnerability was found in ZKTeco BioTime 9.5.6 Build 20260130.3206.Check if you run itEPSS 0.28%Oct 12, 2026
- Medium5.3A flaw has been found in ZKTeco BioTime 9.5.6 Build 20260130.3206.Check if you run itEPSS 0.22%Oct 12, 2026
- Medium5.3A security vulnerability has been detected in ZKTeco BioTime 9.5.6 Build 20260130.3206.Check if you run itEPSS 0.20%Oct 12, 2026
- Critical9.1An undocumented configuration export port is accessible on some models of ZKTeco CCTV cameras.Check if you run itEPSS 0.59%May 20, 2026
- Medium5.1ZKTeco ZKAccess Security System 5.3.1 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary HTML and script code by injecting…Check if you run itEPSS 0.26%Mar 16, 2026
- Medium6.8ZKTeco ZKBioSecurity 3.0 contains a local authorization bypass vulnerability in visLogin.jsp that allows attackers to authenticate without valid credentials by spoofin…Check if you run itEPSS 0.15%Mar 16, 2026
- Critical9.3ZKTeco ZKBioSecurity 3.0 contains a user enumeration vulnerability that allows unauthenticated attackers to discover valid usernames by submitting partial characters v…Check if you run itEPSS 0.57%Mar 16, 2026
- Medium6.9ZKTeco ZKBioSecurity 3.0 contains a file path manipulation vulnerability that allows attackers to access arbitrary files by modifying file paths used to retrieve local resources.Check if you run itEPSS 0.21%Mar 16, 2026
- Medium5.3ZKTeco ZKBioSecurity 3.0 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions by tricking logged-in users into v…Check if you run itEPSS 0.21%Mar 16, 2026
- Medium5.1ZKTeco ZKBioSecurity 3.0 contains multiple reflected cross-site scripting vulnerabilities that allow attackers to execute arbitrary HTML and script code by injecting m…Check if you run itEPSS 0.25%Mar 16, 2026
- Critical9.3ZKTeco ZKBioSecurity 3.0 contains hardcoded credentials in the bundled Apache Tomcat server that allow unauthenticated attackers to access the manager application.Check if you run itEPSS 0.79%Mar 16, 2026
- High8.7ZKTeco ZKAccess Professional 3.5.3 contains an insecure file permissions vulnerability that allows authenticated users to escalate privileges by modifying executable files.Check if you run itEPSS 0.45%Mar 16, 2026
- Critical9.3ZKTeco ZKTime.Net 3.0.1.6 contains an insecure file permissions vulnerability that allows unprivileged users to escalate privileges by modifying executable files.Check if you run itEPSS 0.75%Mar 16, 2026
- Medium6.5In ZKT ZKBio CVSecurity 6.4.1_R an unauthenticated attacker can craft JWT token using the hardcoded secret to authenticate to the service console.Check if you run itEPSS 0.37%May 13, 2025
- UnknownZKTeco BioTime Files or Directories Accessible to External PartiesPatch nowKEVEPSS 2.66%May 2, 2025
- UnknownZKTeco BioTime Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 3.26%May 2, 2025
- UnknownZKTeco zmm200_firmware Direct Request ('Forced Browsing')Patch nowKEVEPSS 4.97%Jan 6, 2024
- High7.5ZKTeco BioTime Path Traversal VulnerabilityPatch nowKEVEPSS 92.47%Aug 3, 2023
18 records · page 1 of 1
PreviousNext