SU
Vendor
supremainc
9
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-31278 | B2 BioStar 2 supremainc | 7.7 | Sep 14 | An issue in the /api/v2/setting/adserversetting endpoint of Suprema BioStar 2 before 2.9.12 and and BioStar X before 1.0.2 allows attackers to obtain Active Directory service… |
| CVE-2023-33366 | B2 Biostar 2 Supremainc | 8.8 | Aug 3 | A SQL injection vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows authenticated users to inject arbitrary SQL directives into an SQL statement and execute… |
| CVE-2023-33365 | B2 Biostar 2 Supremainc | 7.5 | Aug 3 | A path traversal vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows unauthenticated attackers to fetch arbitrary files from the server's web server |
| CVE-2023-33364 | B2 Biostar 2 Supremainc | 8.8 | Aug 3 | An OS Command injection vulnerability exists in Suprema BioStar 2 before V2.9.1, which allows authenticated users to execute arbitrary OS commands on the BioStar 2 server |
| CVE-2023-33363 | B2 Biostar 2 Supremainc | 7.5 | Aug 3 | An authentication bypass vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows unauthenticated users to access some functionality on BioStar 2 servers |
| CVE-2023-31923 | B2 Biostar 2 Supremainc | 8.8 | May 22 | Suprema BioStar 2 before 2022 Q4, v2.9.1 has Insecure Permissions |
| CVE-2023-27167 | B2 Biostar 2 Supremainc | 6.5 | Mar 29 | Suprema BioStar 2 v2.8.16 was discovered to contain a SQL injection vulnerability via the values parameter at /users/absence?search_month=1 |
| CVE-2022-38351 | B2 Biostar 2 Supremainc | 8.8 | Sep 19 | A vulnerability in Suprema BioStar (aka Bio Star) 2 v2.8.16 allows attackers to escalate privileges to System Administrator via a crafted PUT request to the update profile page |
| CVE-2020-15050 | B2 Biostar 2 Supremainc | 7.5 | Jul 13 | An issue was discovered in the Video Extension in Suprema BioStar 2 before 2.8.2 |