Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

Secomea Security Vulnerabilities | CyStack CVE Database

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2026-1759`	Exploitation statusNot known exploited	FixYes	Affected productGateManager	Published09/15/2026	SeverityMedium
`CVE-2026-1758`Session Fixation	Exploitation statusNot known exploited	FixYes	Affected productGateManager	Published09/15/2026	SeverityHigh
`CVE-2025-14716`Unauthorized access to information	Exploitation statusNot known exploited	FixYes	Affected productGateManager	Published03/19/2026	SeverityMedium
`CVE-2021-32007`Missing security header: Referrer-Policy URL	Exploitation statusNot known exploited	FixYes	Affected productGateManager	Published12/13/2024	SeverityLow
`CVE-2024-1969`Heap buffer overflow	Exploitation statusNot known exploited	FixYes	Affected productGateManager	Published04/29/2024	SeverityHigh
`CVE-2024-1579`Insufficient seeding of random number generator	Exploitation statusNot known exploited	FixYes	Affected productGateManager	Published04/29/2024	SeverityHigh
`CVE-2023-3675`Insufficient input validation when downloading certain file types.	Exploitation statusNot known exploited	FixYes	Affected productGateManager	Published04/18/2024	SeverityMedium
`CVE-2023-2912`SiteManager Embedded service disruption	Exploitation statusNot known exploited	FixYes	Affected productSiteManager Embedded	Published07/17/2023	SeverityMedium
`CVE-2022-38125`FTP Agent forwards traffic on inactive ports to LinkManager	Exploitation statusNot known exploited	FixYes	Affected productSiteManager	Published04/19/2023	SeverityMedium
`CVE-2023-0317`GateManager debug interface is included in non-debug builds	Exploitation statusNot known exploited	FixYes	Affected productGateManager	Published04/19/2023	SeverityMedium
`CVE-2022-4308`Clear-text passwords in configuration files	Exploitation statusNot known exploited	FixYes	Affected productGateManager	Published04/19/2023	SeverityHigh
`CVE-2022-38124`Unwanted debug tool	Exploitation statusNot known exploited	FixYes	Affected productSiteManager	Published12/13/2022	SeverityMedium
`CVE-2022-2752`Potential vulnerabilities in GM login process	Exploitation statusNot known exploited	FixYes	Affected productGateManager	Published12/09/2022	SeverityMedium
`CVE-2022-38123`Insufficient validation of plugin files	Exploitation statusNot known exploited	FixYes	Affected productGateManager	Published12/06/2022	SeverityHigh
`CVE-2022-25786`GateManager debug interface is included in production builds	Exploitation statusNot confirmed	FixYes	Affected productGateManager	Published05/04/2022	SeverityMedium
`CVE-2022-25787`GTA URLs issued by LMM WEB API may leak information	Exploitation statusNot confirmed	FixYes	Affected productGateManager	Published05/04/2022	SeverityHigh
`CVE-2022-25785`Buffer overrun	Exploitation statusNot confirmed	FixYes	Affected productSiteManager	Published05/04/2022	SeverityMedium
`CVE-2022-25784`User controllable HTML element attribute (potential XSS)	Exploitation statusNot confirmed	FixYes	Affected productSiteManager	Published05/04/2022	SeverityCritical
`CVE-2022-25783`Hacking attempts from logged-in users are not properly logged by GM	Exploitation statusNot confirmed	FixYes	Affected productGateManager	Published05/04/2022	SeverityMedium
`CVE-2022-25782`Insufficient privilege checks on object access and updates.	Exploitation statusNot confirmed	FixYes	Affected productGateManager	Published05/04/2022	SeverityMedium
`CVE-2022-25781`Reflected XSS issues in GateManager	Exploitation statusNot confirmed	FixYes	Affected productGateManager	Published05/04/2022	SeverityMedium
`CVE-2022-25780`Information leak via device availability query function	Exploitation statusNot confirmed	FixYes	Affected productGateManager	Published05/04/2022	SeverityMedium
`CVE-2022-25779`Insufficient scope checks allows adding unrelated audit log entries	Exploitation statusNot confirmed	FixYes	Affected productGateManager	Published05/04/2022	SeverityMedium
`CVE-2022-25778`Unload handlers may unintentionally defeat CSRF guards	Exploitation statusNot confirmed	FixYes	Affected productGateManager	Published05/04/2022	SeverityMedium
`CVE-2021-32010`Clients may connect to a GateManager with TLS 1.0	Exploitation statusNot confirmed	FixYes	Affected productSiteManager	Published05/04/2022	SeverityMedium
`CVE-2021-32009`Missing XSS guards on firmware page	Exploitation statusNot confirmed	FixNot confirmed	Affected productGateManager	Published03/11/2022	SeverityMedium
`CVE-2021-32005`SiteManager Log View XSS Issue	Exploitation statusNot confirmed	FixNot confirmed	Affected productSiteManager	Published03/07/2022	SeverityMedium
`CVE-2021-32006`GateManager information leak for LinkManager Users	Exploitation statusNot confirmed	FixNot confirmed	Affected productGateManager	Published03/07/2022	SeverityMedium
`CVE-2021-32008`Logged-in Administrator may get unrestricted file system access	Exploitation statusNot confirmed	FixNot confirmed	Affected productGateManager	Published03/04/2022	SeverityCritical
`CVE-2021-32004`GateManager does not enforce strict hostname matching for WEB server	Exploitation statusNot confirmed	FixYes	Affected productGateManager	Published11/22/2021	SeverityLow
`CVE-2021-32003`Configuration service port remains open 10 minutes after reboot even when already provisioned	Exploitation statusNot confirmed	FixYes	Affected productSiteManager	Published08/05/2021	SeverityHigh
`CVE-2021-32002`SiteManager troubleshooter allows access without authentication from local network	Exploitation statusNot confirmed	FixYes	Affected productSiteManager	Published08/05/2021	SeverityMedium
`CVE-2020-29030`Insufficient CSRF guards	Exploitation statusNot confirmed	FixYes	Affected productGateManager	Published03/05/2021	SeverityHigh
`CVE-2020-29020`Reject Remote Management via Cellular UPLINK2	Exploitation statusNot confirmed	FixYes	Affected productSiteManager	Published03/05/2021	SeverityCritical
`CVE-2020-29028`Reflected XSS issues	Exploitation statusNot confirmed	FixYes	Affected productGateManager	Published03/05/2021	SeverityMedium
`CVE-2020-29029`XSS issue due to insufficient sanitization of input field	Exploitation statusNot confirmed	FixYes	Affected productGateManager	Published03/05/2021	SeverityHigh
`CVE-2020-29032`Add integrity check of GateManager firmware	Exploitation statusNot confirmed	FixYes	Affected productGateManager	Published03/05/2021	SeverityHigh
`CVE-2020-29027`Reflected Cross Site Scripting	Exploitation statusNot confirmed	FixYes	Affected productSiteManager	Published02/16/2021	SeverityMedium
`CVE-2020-29025`DOM-based Javascript injection	Exploitation statusNot confirmed	FixYes	Affected productSiteManager Embedded (SM-E)	Published02/16/2021	SeverityMedium
`CVE-2020-29023`CSV Formula Injection possible due to improper fields escaping in GateManager	Exploitation statusNot confirmed	FixYes	Affected productGateManager	Published02/16/2021	SeverityLow
`CVE-2020-29022`Host Header Injection allowing web cache poisoning attacks	Exploitation statusNot confirmed	FixYes	Affected productGateManager	Published02/16/2021	SeverityMedium
`CVE-2020-29024`Missing HtppOnly and Secure flags	Exploitation statusNot confirmed	FixYes	Affected productGateManager	Published02/16/2021	SeverityMedium
`CVE-2020-29031`Insecure Direct Object Reference in GateManager WebUI can cause privilege escalation	Exploitation statusNot confirmed	FixYes	Affected productGateManager	Published02/15/2021	SeverityHigh
`CVE-2020-29026`	Exploitation statusNot confirmed	FixYes	Affected productGateManager	Published02/15/2021	SeverityCritical
`CVE-2020-29021`Scripting tag chars < > not filtered in input fields could cause Cross-Site Scripting (XSS)	Exploitation statusNot confirmed	FixYes	Affected productGateManager	Published02/08/2021	SeverityLow
`CVE-2020-14512`USE OF PASSWORD HASH WITH INSUFFICIENT COMPUTATIONAL EFFORT CWE-916	Exploitation statusNot confirmed	FixYes	Affected productGateManager	Published08/25/2020	SeverityHigh
`CVE-2020-14510`OFF-BY-ONE ERROR CWE-193	Exploitation statusNot confirmed	FixYes	Affected productGateManager	Published08/25/2020	SeverityCritical
`CVE-2020-14508`OFF-BY-ONE ERROR CWE-193	Exploitation statusNot confirmed	FixYes	Affected productGateManager	Published08/25/2020	SeverityHigh