Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2021-28173

Vangene deltaFlow E-platform - Arbitrary File Upload

The file upload function of Vangene deltaFlow E-platform does not perform access controlled properly. Remote attackers can upload and execute arbitrary files without login.

CVSS 3.1 · 9.8 Critical EPSS 1.6% KEV · Not listed
Vendors
Deltaflow Project
Products
Deltaflow
CVE-2021-28172

Vangene deltaFlow E-platform - Path Traversal

There is a Path Traversal vulnerability in the file download function of Vangene deltaFlow E-platform. Remote attackers can access credential data with this leakage.

CVSS 3.1 · 7.5 High EPSS 1.9% KEV · Not listed
Vendors
Deltaflow Project
Products
Deltaflow
CVE-2021-28171

Vangene deltaFlow E-platform - Broken Authentication

The Vangene deltaFlow E-platform does not take properly protective measures. Attackers can obtain privileged permissions remotely by tampering with users’ data in the Cookie.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Deltaflow Project
Products
Deltaflow