supremainc records
8 published records for vendor supremainc.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-269 Improper Privilege Management1
- CWE-281 Improper Preservation of Permissions1
- CWE-287 Improper Authentication1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
8 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
45Plan | CVE-2020-15050Proof of concept | An issue was discovered in the Video Extension in Suprema BioStar 2 before 2.8.2.supremainc · biostar 2 · CWE-22 | High7.5 | — | 50.7% | Jul 13, 2020 |
35Monitor | CVE-2023-33364No exploit | An OS Command injection vulnerability exists in Suprema BioStar 2 before V2.9.1, which allows authenticated users to execute arbitrary OS cosupremainc · biostar 2 · CWE-78 | High8.8 | — | 1.5% | Aug 3, 2023 |
35Monitor | CVE-2022-38351No exploit | A vulnerability in Suprema BioStar (aka Bio Star) 2 v2.8.16 allows attackers to escalate privileges to System Administrator via a crafted PUsupremainc · biostar 2 · CWE-269 | High8.8 | — | 1.1% | Sep 19, 2022 |
35Monitor | CVE-2023-31923No exploit | Suprema BioStar 2 before 2022 Q4, v2.9.1 has Insecure Permissions.supremainc · biostar 2 · CWE-281 | High8.8 | — | 0.8% | May 22, 2023 |
35Monitor | CVE-2023-33366No exploit | A SQL injection vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows authenticated users to inject arbitrary SQL directives supremainc · biostar 2 · CWE-89 | High8.8 | — | 0.6% | Aug 3, 2023 |
30Monitor | CVE-2023-33365No exploit | A path traversal vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows unauthenticated attackers to fetch arbitrary files frosupremainc · biostar 2 · CWE-22 | High7.5 | — | 0.7% | Aug 3, 2023 |
30Monitor | CVE-2023-33363No exploit | An authentication bypass vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows unauthenticated users to access some functionasupremainc · biostar 2 · CWE-287 | High7.5 | — | 0.5% | Aug 3, 2023 |
28Monitor | CVE-2023-27167Proof of concept | Suprema BioStar 2 v2.8.16 was discovered to contain a SQL injection vulnerability via the values parameter at /users/absence?search_month=1.supremainc · biostar 2 · CWE-89 | Medium6.5 | — | 7.5% | Mar 29, 2023 |
- CVE-2020-1505045Plan
An issue was discovered in the Video Extension in Suprema BioStar 2 before 2.8.2.
HighCVSS 7.5Proof of conceptEPSS 50%supremainc · biostar 2Jul 13, 2020
- CVE-2023-3336435Monitor
An OS Command injection vulnerability exists in Suprema BioStar 2 before V2.9.1, which allows authenticated users to execute arbitrary OS co
HighCVSS 8.8No exploitEPSS 1%supremainc · biostar 2Aug 3, 2023
- CVE-2022-3835135Monitor
A vulnerability in Suprema BioStar (aka Bio Star) 2 v2.8.16 allows attackers to escalate privileges to System Administrator via a crafted PU
HighCVSS 8.8No exploitEPSS 1%supremainc · biostar 2Sep 19, 2022
- CVE-2023-3192335Monitor
Suprema BioStar 2 before 2022 Q4, v2.9.1 has Insecure Permissions.
HighCVSS 8.8No exploitEPSS 0%supremainc · biostar 2May 22, 2023
- CVE-2023-3336635Monitor
A SQL injection vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows authenticated users to inject arbitrary SQL directives
HighCVSS 8.8No exploitEPSS 0%supremainc · biostar 2Aug 3, 2023
- CVE-2023-3336530Monitor
A path traversal vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows unauthenticated attackers to fetch arbitrary files fro
HighCVSS 7.5No exploitEPSS 0%supremainc · biostar 2Aug 3, 2023
- CVE-2023-3336330Monitor
An authentication bypass vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows unauthenticated users to access some functiona
HighCVSS 7.5No exploitEPSS 0%supremainc · biostar 2Aug 3, 2023
- CVE-2023-2716728Monitor
Suprema BioStar 2 v2.8.16 was discovered to contain a SQL injection vulnerability via the values parameter at /users/absence?search_month=1.
MediumCVSS 6.5Proof of conceptEPSS 7%supremainc · biostar 2Mar 29, 2023