Filtered by vendor Vaethink
Subscriptions
Filtered by product Vaethink
Subscriptions
Total
4 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2024-38971 | 1 Vaethink | 1 Vaethink | 2024-11-21 | 5.4 Medium |
| vaeThink 1.0.2 is vulnerable to stored Cross Site Scripting (XSS) in the system backend. | ||||
| CVE-2024-38970 | 1 Vaethink | 1 Vaethink | 2024-11-21 | 4.9 Medium |
| vaeThink 1.0.2 is vulnerable to Information Disclosure via the system backend,access management administrator function. | ||||
| CVE-2020-19302 | 1 Vaethink | 1 Vaethink | 2024-11-21 | 9.8 Critical |
| An arbitrary file upload vulnerability in the avatar upload function of vaeThink v1.0.1 allows attackers to open a webshell via changing uploaded file suffixes to ".php". | ||||
| CVE-2020-19301 | 1 Vaethink | 1 Vaethink | 2024-11-21 | 9.8 Critical |
| A vulnerability in the vae_admin_rule database table of vaeThink v1.0.1 allows attackers to execute arbitrary code via a crafted payload in the condition parameter. | ||||
Page 1 of 1.