Idf And Zlf
Approved changes feed: RSS · Atom
cpe:2.3:a:ziv:idf_and_zlf:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Ziv (a1bd7afd-24c6-5a97-ae35-fd7595359570) |
|---|---|
| Product | Idf And Zlf (f61eafa8-3311-5cf0-a098-eb352daf860a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-41367 |
vulnerable | 2026-06-08 07:25:06.904470 |
Stored Cross-Site Scripting (XSS) vulnerability in IDF and ZLF
Stored Cross-Site Scripting (XSS) vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04. This vulnerability allows an attacker to store malicious JavaScript payload in software that will run in the victim's browser. Exploiting this vulnerability requires authenticating to the device and executing certain commands that can only be executed with permissions higher than the view permission.
Published: 2025-06-06T11:51:36.441Z
Updated: 2025-06-06T12:47:26.876Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41366 |
vulnerable | 2026-06-08 07:25:06.904031 |
CORS vulnerability in IDF and ZLF
In IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04, a configuration error has been detected in cross-origin resource sharing (CORS). Exploiting this vulnerability requires authenticating to the device and executing certain commands that can only be executed with permissions higher than the view permission.
Published: 2025-06-06T11:50:42.685Z
Updated: 2025-06-06T12:51:02.198Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41365 |
vulnerable | 2026-06-08 07:25:06.903543 |
Code injection vulnerability in IDF and ZLF
Code injection vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04. This vulnerability allows an attacker to store malicious payload in software that will run in the victim's browser. Exploiting this vulnerability requires authenticating to the device and executing certain commands that can be executed only with permissions higher than the view permission.
Published: 2025-06-06T11:49:51.858Z
Updated: 2025-06-06T13:06:59.821Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41364 |
vulnerable | 2026-06-08 07:25:06.903131 |
Stored Cross-Site Scripting (XSS) vulnerability in IDF and ZLF
Stored Cross-Site Scripting (XSS) vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04. This vulnerability allows an attacker to store malicious JavaScript payload in software that will run in the victim's browser. Exploiting this vulnerability requires authenticating to the device and executing certain commands that can be executed with view permission.
Published: 2025-06-06T11:49:03.631Z
Updated: 2025-06-06T13:10:40.776Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41363 |
vulnerable | 2026-06-08 07:25:06.901953 |
CORS vulnerability in IDF and ZLF
In IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04, a configuration error has been detected in cross-origin resource sharing (CORS). Exploiting this vulnerability requires authenticating to the device and executing certain commands that can be executed with view permission.
Published: 2025-06-06T11:47:55.640Z
Updated: 2025-06-06T14:19:23.725Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41362 |
vulnerable | 2026-06-08 07:25:06.901473 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41361 |
vulnerable | 2026-06-08 07:25:06.900976 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41360 |
vulnerable | 2026-06-08 07:25:06.900403 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.