Supremainc

9 CVEs across 2 Supremainc products. Browse Supremainc vulnerabilities, severities, and proof-of-concept exploits.

Supremainc products with known CVEs

ProductCVEs
Biostar 28
Biostar 21
Supremainc CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-31278High7.72026-09-14An issue in the /api/v2/setting/adserversetting endpoint of Suprema BioStar 2 before 2.9.12 and and BioStar X before 1.0.2 allows attackers to obtain Active Di…
CVE-2023-33366High8.82023-08-03A SQL injection vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows authenticated users to inject arbitrary SQL directives into an SQL stateme…
CVE-2023-33365High7.52023-08-03A path traversal vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows unauthenticated attackers to fetch arbitrary files from the server's web…
CVE-2023-33364High8.82023-08-03An OS Command injection vulnerability exists in Suprema BioStar 2 before V2.9.1, which allows authenticated users to execute arbitrary OS commands on the BioSt…
CVE-2023-33363High7.52023-08-03An authentication bypass vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows unauthenticated users to access some functionality on BioStar 2 s…
CVE-2023-31923High8.82023-05-22Suprema BioStar 2 before 2022 Q4, v2.9.1 has Insecure Permissions. A vulnerability in the web application allows an authenticated attacker with "User Operator"…
CVE-2023-27167Medium6.52023-03-29Suprema BioStar 2 v2.8.16 was discovered to contain a SQL injection vulnerability via the values parameter at /users/absence?search_month=1.
CVE-2022-38351High8.82022-09-19A vulnerability in Suprema BioStar (aka Bio Star) 2 v2.8.16 allows attackers to escalate privileges to System Administrator via a crafted PUT request to the up…
CVE-2020-15050High7.52020-07-13An issue was discovered in the Video Extension in Suprema BioStar 2 before 2.8.2. Remote attackers can read arbitrary files from the server via Directory Trave…