| Max CVSS | 5.0 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2014-3428 | 4.3 |
Cross-site scripting (XSS) vulnerability in Yealink VoIP Phones with firmware 28.72.0.2 allows remote attackers to inject arbitrary web script or HTML via the model parameter to servlet.
|
09-10-2018 - 19:43 | 16-06-2014 - 18:55 | |
| CVE-2014-3427 | 5.0 |
CRLF injection vulnerability in Yealink VoIP Phones with firmware 28.72.0.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the model parameter to servlet. <a href="https://cwe.mitre.org/data/d
|
09-10-2018 - 19:43 | 16-07-2014 - 14:19 |