Synel
7 CVEs across 49 Synel products. Browse Synel vulnerabilities, severities, and proof-of-concept exploits.
Synel products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-37220 | High | 7.2 | 2023-09-03 | Synel Terminals - CWE-494: Download of Code Without Integrity Check |
CVE-2023-37213 | High | 8.8 | 2023-07-30 | Synel SYnergy Fingerprint Terminals - CWE-78: 'OS Command Injection' |
CVE-2023-32227 | Critical | 9.8 | 2023-07-30 | Synel SYnergy Fingerprint Terminals - CWE-798: Use of Hard-coded Credentials |
CVE-2022-36778 | Medium | 6.5 | 2022-09-13 | insert HTML / js code inside input how to get to the vulnerable input : Workers > worker nickname > inject in this input the code. |
CVE-2022-34768 | Medium | 6.5 | 2022-08-05 | insert HTML / js code inside input how to get to the vulnerable input : Workers > worker nickname > inject in this input the code. |
CVE-2022-22791 | Medium | 6.6 | 2022-01-28 | SYNEL - eharmony Authenticated Blind & Stored XSS. Inject JS code into the "comments" field could lead to potential stealing of cookies, loading of HTML tags a… |
CVE-2022-22790 | Medium | 5.6 | 2022-01-28 | SYNEL - eharmony Directory Traversal. Directory Traversal - is an attack against a server or a Web application aimed at unauthorized access to the file system… |
CVE-2021-36718 | Medium | 6.1 | 2021-12-08 | SYNEL - eharmonynew / Synel Reports - The attacker can log in to the system with default credentials and export a report of eharmony system with sensetive data… |
CVE-2012-2970 | | 2012-07-09 | The Synel SY-780/A Time & Attendance terminal allows remote attackers to cause a denial of service (device hang) via network traffic to port (1) 1641, (2) 3734… |