Gps Tracker
Approved changes feed: RSS · Atom
cpe:2.3:a:uffizio:gps_tracker:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Uffizio (69128439-c3a4-5695-a288-8e458d6d28b4) |
|---|---|
| Product | Gps Tracker (5feb1441-ed6d-57a4-85a4-04593f815fb3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-32929 |
vulnerable | 2026-06-08 05:32:08.209172 |
Uffizio GPS Tracker Cross-site Request Forgery
MEDIUM (4.3)
All versions of Uffizio GPS Tracker may allow an attacker to perform unintended actions on behalf of a user.
Published: 2022-04-22T15:00:23.000Z
Updated: 2025-04-16T16:28:08.137Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32927 |
vulnerable | 2026-06-08 05:32:08.207164 |
Uffizio GPS Tracker Cross-site Scripting
HIGH (7.1)
An attacker may be able to inject client-side JavaScript code on multiple instances within all versions of Uffizio GPS Tracker.
Published: 2022-04-22T15:01:26.000Z
Updated: 2025-04-16T16:27:59.873Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-17485 |
vulnerable | 2026-06-08 05:20:56.579559 |
Details available
A Remote Code Execution vulnerability exist in Uffizio's GPS Tracker all versions. The web server can be compromised by uploading and executing a web/reverse shell. An attacker could then run commands, browse system files, and browse local resources
Published: 2023-12-16T00:00:00.000Z
Updated: 2024-08-04T14:00:47.488Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-17484 |
vulnerable | 2026-06-08 05:20:56.579074 |
Details available
An Open Redirection vulnerability exists in Uffizio's GPS Tracker all versions allows an attacker to construct a URL within the application that causes a redirection to an arbitrary external domain.
Published: 2023-12-16T00:00:00.000Z
Updated: 2024-08-04T14:00:47.393Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-17483 |
vulnerable | 2026-06-08 05:20:56.578713 |
Details available
An improper access control vulnerability exists in Uffizio's GPS Tracker all versions that lead to sensitive information disclosure of all the connected devices. By visiting the vulnerable host at port 9000, we see it responds with a JSON body that has all the details about the devices which have been deployed.
Published: 2023-12-16T00:00:00.000Z
Updated: 2024-08-04T14:00:47.490Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.