Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

CVE-2023-48383

NetVision Information airPASS - Path Traversal

NetVision Information airPASS has a path traversal vulnerability within its parameter in a specific URL. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Netvision
Products
Airpass
CVE-2025-0456

NetVision Information airPASS - Missing Authentication

The airPASS from NetVision Information has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access the specific administrative functionality to retrieve * all accounts and passwords.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Netvision
Products
Airpass
CVE-2025-0455

NetVision Information airPASS - SQL injection

The airPASS from NetVision Information has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Netvision
Products
Airpass
CVE-2024-3776

Netvision airPASS - Reflected XSS

The parameter used in the login page of Netvision airPASS is not properly filtered for user input. An unauthenticated remote attacker can insert JavaScript code to the parameter for Reflected Cross-site scripting attacks.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Netvision
Products
Airpass