Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2024-7098

XML Injection in SFS Consulting's ww.Winsure

Improper Restriction of XML External Entity Reference vulnerability in SFS Consulting ww.Winsure allows XML Injection. This issue affects ww.Winsure: before 4.6.2.

CVSS 4.0 · 9.2 Critical EPSS < 1% KEV · Not listed
Vendors
Sfs Sfs Consulting
Products
Winsure Wwwinsure
CVE-2024-7104

Remote Code Execution in SFS Consulting's ww.Winsure

Improper Control of Generation of Code ('Code Injection') vulnerability in SFS Consulting ww.Winsure allows Code Injection. This issue affects ww.Winsure: before 4.6.2.

CVSS 4.0 · 9.2 Critical EPSS < 1% KEV · Not listed
Vendors
Sfs Sfs Consulting
Products
Winsure Wwwinsure