MyNET
by MyNET
CVEs (7)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-27708 | Cri | 0.62 | 9.6 | 0.01 | Dec 22, 2025 | Iframe injection vulnerability in airc.pt/solucoes-servicos.solucoes MyNET v.26.06 and before allows a remote attacker to execute arbitrary code via the src parameter. | ||
| CVE-2024-39037 | Med | 0.42 | 6.5 | 0.00 | Dec 24, 2025 | MyNET up to v26.08.316 was discovered to contain an Unauthenticated SQL Injection vulnerability via the intmenu parameter. | ||
| CVE-2024-40317 | Med | 0.40 | 6.1 | 0.00 | Dec 24, 2025 | A reflected cross-site scripting (XSS) vulnerability in MyNET up to v26.08 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload into the parameter HTTP. | ||
| CVE-2024-35322 | Med | 0.40 | 6.1 | 0.00 | Dec 24, 2025 | MyNET up to v26.08 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the ficheiro parameter. | ||
| CVE-2024-25812 | Med | 0.40 | 6.1 | 0.00 | Dec 22, 2025 | MyNET up to v26.05 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the src parameter. | ||
| CVE-2024-25814 | Med | 0.40 | 6.1 | 0.00 | Dec 22, 2025 | MyNET up to v26.05 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the msg parameter. | ||
| CVE-2024-35321 | Med | 0.28 | 4.3 | 0.00 | Dec 22, 2025 | MyNET up to v26.08 was discovered to contain a Reflected cross-site scripting (XSS) vulnerability via the msgtipo parameter. |
- risk 0.62cvss 9.6epss 0.01
Iframe injection vulnerability in airc.pt/solucoes-servicos.solucoes MyNET v.26.06 and before allows a remote attacker to execute arbitrary code via the src parameter.
- risk 0.42cvss 6.5epss 0.00
MyNET up to v26.08.316 was discovered to contain an Unauthenticated SQL Injection vulnerability via the intmenu parameter.
- risk 0.40cvss 6.1epss 0.00
A reflected cross-site scripting (XSS) vulnerability in MyNET up to v26.08 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload into the parameter HTTP.
- risk 0.40cvss 6.1epss 0.00
MyNET up to v26.08 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the ficheiro parameter.
- risk 0.40cvss 6.1epss 0.00
MyNET up to v26.05 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the src parameter.
- risk 0.40cvss 6.1epss 0.00
MyNET up to v26.05 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the msg parameter.
- risk 0.28cvss 4.3epss 0.00
MyNET up to v26.08 was discovered to contain a Reflected cross-site scripting (XSS) vulnerability via the msgtipo parameter.