Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 6

CVE-2026-4639

Galaxy Software Services｜Vitals ESP - Incorrect Authorization

Vitals ESP developed by Galaxy Software Services has a Incorrect Authorization vulnerability, allowing authenticated remote attackers to perform certain administrative functions, thereby escalating privileges.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Galaxy Software Services Corporation Gss
Products
Vitals Esp Vitalsesp
CVE-2026-4640

Galaxy Software Services｜Vitals ESP - Missing Authentication

Vitals ESP developed by Galaxy Software Services has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to execute certain functions to obtain sensitive information.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Galaxy Software Services Corporation Gss
Products
Vitals Esp Vitalsesp
CVE-2025-31342

Galaxy Software Services Vitals ESP Forum Module - Unrestricted Upload of File with Dangerous Type

An unrestricted upload of file with dangerous type vulnerability in the upload file function of Galaxy Software Services Corporation Vitals ESP Forum Module through 1.3 version allows remote authenticated users to execute arbitrary system commands via a malicious file.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Galaxy Software Services Corporation
Products
Vitals Esp
CVE-2025-14253

Galaxy Software Services｜Vitals ESP - Arbitrary File Read

Vitals ESP developed by Galaxy Software Services has an Arbitrary File Read vulnerability, allowing privileged remote attackers to exploit Absolute Path Traversal to download arbitrary system files.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Galaxy Software Services Corporation Gss
Products
Vitals Esp Vitalsesp
CVE-2025-14254

Galaxy Software Services｜Vitals ESP - SQL Injection

Vitals ESP developed by Galaxy Software Services has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Galaxy Software Services Corporation Gss
Products
Vitals Esp Vitalsesp
CVE-2025-14255

Galaxy Software Services｜Vitals ESP - SQL Injection

Vitals ESP developed by Galaxy Software Services has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Galaxy Software Services Corporation Gss
Products
Vitals Esp Vitalsesp