cym1102 records
6 published records for vendor cym1102.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.
Recurring classes
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-295 Improper Certificate Validation1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-502 Deserialization of Untrusted Data1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
6 records| Action | CVE | Vulnerability | Severity | EPSS · Published |
|---|---|---|---|---|
40Plan | CVE-2024-3739No exploit | cym1102 nginxWebUI upload os command injectioncym1102 · nginxwebui · CWE-78 | Critical9.8 | 2.8%Apr 13, 2024 |
39Monitor | CVE-2024-3737No exploit | cym1102 nginxWebUI addOver findCountByQuery path traversalcym1102 · nginxwebui · CWE-22 | Critical9.8 | 0.9%Apr 13, 2024 |
39Monitor | CVE-2024-3740No exploit | cym1102 nginxWebUI reload exec deserializationcym1102 · nginxwebui · CWE-502 | Critical9.8 | 0.8%Apr 13, 2024 |
39Monitor | CVE-2024-3738No exploit | cym1102 nginxWebUI saveCmd handlePath certificate validationcym1102 · nginxwebui · CWE-295 | Critical9.8 | 0.5%Apr 13, 2024 |
30Monitor | CVE-2024-3736No exploit | cym1102 nginxWebUI upload unrestricted uploadcym1102 · nginxwebui · CWE-434 | High7.5 | 0.9%Apr 13, 2024 |
8Monitor | CVE-2026-2145No exploit | cym1102 nginxWebUI Web Management check cross site scriptingcym1102 · nginxwebui · CWE-79 | Low2.0 | 0.3%Feb 8, 2026 |
- CVE-2024-373940Plan
cym1102 nginxWebUI upload os command injection
CriticalCVSS 9.8No exploitEPSS 2%cym1102 · nginxwebuiApr 13, 2024
- CVE-2024-373739Monitor
cym1102 nginxWebUI addOver findCountByQuery path traversal
CriticalCVSS 9.8No exploitEPSS 0%cym1102 · nginxwebuiApr 13, 2024
- CVE-2024-374039Monitor
cym1102 nginxWebUI reload exec deserialization
CriticalCVSS 9.8No exploitEPSS 0%cym1102 · nginxwebuiApr 13, 2024
- CVE-2024-373839Monitor
cym1102 nginxWebUI saveCmd handlePath certificate validation
CriticalCVSS 9.8No exploitEPSS 0%cym1102 · nginxwebuiApr 13, 2024
- CVE-2024-373630Monitor
cym1102 nginxWebUI upload unrestricted upload
HighCVSS 7.5No exploitEPSS 0%cym1102 · nginxwebuiApr 13, 2024
- CVE-2026-21458Monitor
cym1102 nginxWebUI Web Management check cross site scripting
LowCVSS 2.0No exploitEPSS 0%cym1102 · nginxwebuiFeb 8, 2026