Skip to contentUi vulnerabilities
Newest
- ubiquiti networks edgemax, ui edgeswitch firmware +1 moreCommand Injection in EdgeMAX EdgeSwitch prior to 1.8.2 allow an Admin user to execute commands as...CVE-2019-54467.2 High
- ubiquiti networks edgemax, ui edgeswitch firmware +1 moreDoS in EdgeMAX EdgeSwitch prior to 1.8.2 allow an Admin user to Crash the SSH CLI interface by...CVE-2019-54454.9 Medium
- ubiquiti airosOn certain Ubiquiti devices, Command Injection exists via a GET request to stainfo.cgi (aka Show...CVE-2010-5330In KEVEPSS 40.2%9.8 Critical
- ui unifi firmwareUbiquiti UniFi 52 devices, when Hotspot mode is used, allow remote attackers to bypass intended...CVE-2018-52645.9 Medium
- ui edgeosUbiquiti EdgeOS 1.9.1 on EdgeRouter Lite devices allows remote attackers to execute arbitrary...CVE-2018-52657.2 High
- ui aircam firmwareOn Ubiquiti airCam 3.1.4 devices, a Denial of Service vulnerability exists in the RTSP Service...CVE-2019-127277.5 High
- ui unifi videoIn UniFi Video 3.10.0 and prior, due to the lack of CSRF protection, it is possible to abuse the...CVE-2019-54308.8 High
- ui edgeswitch x, ubiquiti networks edgemax +1 moreIn Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, an unauthenticated user can use the "local...CVE-2019-54264.8 Medium
- ui edgeswitch x, ubiquiti networks edgemax +1 moreIn Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, an authenticated user can execute arbitrary...CVE-2019-54258.8 High
- ui edgeswitch x, ubiquiti networks edgemax +1 moreIn Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, a privileged user can execute arbitrary shell...CVE-2019-54248.8 High
- hackerone airmax, edgemax, ui airos, edgemax firmware +2 moreDenial of Service attack in airMAX < 8.3.2 , airMAX < 6.0.7 and EdgeMAX < 1.9.7 allow attackers...CVE-2017-0938EPSS 21.0%7.5 High
- ubnt airos 4 xs2, airos 4 xs5, edgeswitch xp firmware +9 more +11 moreUbiquiti airOS HTTP(S) unauthenticated arbitrary file uploadCVE-2015-9266Public exploitEPSS 73.7%9.8 Critical
- ui ucrmUbiquiti UCRM versions 2.5.0 to 2.7.7 are vulnerable to Stored Cross-site Scripting. Due to the...CVE-2017-09125.4 Medium
- ui edgeswitch firmwareUbiquiti Networks EdgeSwitch version 1.7.3 and prior suffer from an externally controlled format...CVE-2018-125907.2 High
- ui edgeos, ubiquiti edgerouter x +1 moreUbiquiti Networks EdgeOS version 1.9.1.1 and prior suffer from an Improper Privilege Management...CVE-2017-09358.8 High
- ui unifi videoUbiquiti UniFi Video before 3.8.0 for Windows uses weak permissions for the installation...CVE-2016-6914Public exploit7.8 High
- ui unifi controllerUbiquiti UniFi Controller before 3.2.1 logs the administrative password hash in syslog messages,...CVE-2014-22262.6 Low
- ui unifi videoThe default Flash cross-domain policy (crossdomain.xml) in Ubiquiti Networks UniFi Video ...CVE-2014-2227Public exploit6.0 Medium
- ui unifi controllerCross-site scripting (XSS) vulnerability in the administer interface in the UniFi Controller in...CVE-2013-35726.1 Medium
- ui aircam, airvision firmware, aircam dome +1 more +3 moreBuffer overflow in the ubnt-streamer RTSP service on the Ubiquiti UBNT AirCam with airVision...CVE-2013-1606Public exploitEPSS 23.4%7.5 High