Show filters
2 Total Results
Displaying 1-2 of 2
Sort by:
Attacker Value
Unknown

CVE-2024-35429

Disclosure Date: May 30, 2024 (last updated July 19, 2024)
ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via eventRecord.
Attacker Value
Unknown

CVE-2024-35428

Disclosure Date: May 30, 2024 (last updated July 19, 2024)
ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via BaseMediaFile. An authenticated user can delete local files from the server which can lead to DoS.