Where
-Infinity
0

Nozominetworks CmcIncorrect authorization for Reports configuration in Guardian/CMC before 24.2.0

Risk 44
Severity
6
First published (updated )

Nozominetworks CmcCheck Point IoT integration: WebSocket returns assets data without authentication in Guardian/CMC before 23.3.0

Risk 31
Severity
7.5
EPSS
0.18%
First published (updated )

Nozominetworks CmcDoS on IDS parsing of malformed asset fields in Guardian/CMC >= 22.6.0 before 22.6.3 and 23.1.0

Risk 43
Severity
8.2
First published (updated )

Nozominetworks CmcSQL Injection on IDS parsing of malformed asset fields in Guardian/CMC >= 22.6.0 before 22.6.3 and 23.1.0

Risk 76
Severity
9.2
First published (updated )

Nozominetworks CmcAuthenticated SQL Injection on Query functionality in Guardian/CMC before 22.6.3 and 23.1.0

Risk 79
Severity
8.8
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Nozominetworks CmcDoS via SAML configuration in Guardian/CMC before 22.6.2

Risk 36
Severity
6.9
First published (updated )

Nozominetworks CmcPartial DoS on Reports section due to null report name in Guardian/CMC before 22.6.2

Risk 26
Severity
5.3
First published (updated )

Nozominetworks CmcInformation disclosure via the debug function in assertions in Guardian/CMC before 22.6.2

Risk 38
Severity
6.5
First published (updated )

Nozominetworks CmcStored Cross-Site Scripting (XSS) in Threat Intelligence rules in Guardian/CMC before 22.6.2

Risk 55
Severity
7.3
First published (updated )

Nozominetworks CmcAuthenticated Blind SQL Injection on alerts count in Guardian/CMC before 22.6.2

Risk 79
Severity
8.8
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Nozominetworks CmcAuthenticated Blind SQL Injection on sorting in Guardian/CMC before 22.6.2

Risk 79
Severity
8.8
First published (updated )

Nozominetworks CmcSession Fixation in Guardian/CMC before 22.6.2

Risk 63
Severity
7
First published (updated )

Nozominetworks CmcAuthenticated SQL Injection on Alerts in Guardian/CMC before 22.5.2

Risk 79
Severity
8.8
First published (updated )

Nozominetworks CmcAuthenticated RCE on project configuration import in Guardian/CMC before 22.0.0

Risk 72
Severity
8.6
First published (updated )

Nozominetworks CmcAuthenticated RCE on logo report upload in Guardian/CMC before 22.0.0

Risk 72
Severity
8.6
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Nozominetworks Central Management ControlAuthenticated command injection when changing date settings or hostname in Guardian/CMC before 20.0.7.4

Risk 78
Severity
9
First published (updated )

Nozominetworks Central Management ControlAuthenticated command path traversal on timezone settings in Guardian/CMC before 20.0.7.4

Risk 66
Severity
7.2
First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203