Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2024-38971

vaeThink 1.0.2 is vulnerable to stored Cross Site Scripting (XSS) in the system backend.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Vaethink
Products
Vaethink
CVE-2024-38970

vaeThink 1.0.2 is vulnerable to Information Disclosure via the system backend,access management administrator function.

CVSS 3.1 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Vaethink
Products
Vaethink
CVE-2020-19302

An arbitrary file upload vulnerability in the avatar upload function of vaeThink v1.0.1 allows attackers to open a webshell via changing uploaded file suffixes to ".php".

CVSS 3.1 · 9.8 Critical EPSS 1.7% KEV · Not listed
Vendors
Vaethink
Products
Vaethink
CVE-2020-19301

A vulnerability in the vae_admin_rule database table of vaeThink v1.0.1 allows attackers to execute arbitrary code via a crafted payload in the condition parameter.

CVSS 3.1 · 9.8 Critical EPSS 2.5% KEV · Not listed
Vendors
Vaethink
Products
Vaethink