Vulnerability index

Browse CVEs

9 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Dashboards.php CRITICAL 9.8
CVE-2024-24398

Directory Traversal vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.2 allows a remote attacker to execute arbitrary code via…

Fix: 2024.1.2+
Fix from $2,300 2024-02-06
Dashboard.js MEDIUM 6.1
CVE-2024-24396

Cross Site Scripting vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.2 allows a remote attacker to execute arbitrary code vi…

Fix: 2024.1.2+
Fix from $1,600 2024-02-05
Dashboards.js MEDIUM 5.4
CVE-2024-24397

Cross Site Scripting vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.2 allows a remote attacker to execute arbitrary code vi…

Fix: 2024.1.2+
Fix from $1,600 2024-02-05
Designer HIGH 7.5
CVE-2023-25260

Stimulsoft Designer (Web) 2023.1.3 is vulnerable to Local File Inclusion.

No fix yet
Fix from $1,950 2023-03-28
Designer HIGH 7.5
CVE-2023-25262

Stimulsoft GmbH Stimulsoft Designer (Web) 2023.1.3 is vulnerable to Server Side Request Forgery (SSRF). TThe Reporting Designer (Web) offers the poss…

No fix yet
Fix from $1,950 2023-03-28
Designer CRITICAL 9.8
CVE-2023-25261

Certain Stimulsoft GmbH products are affected by: Remote Code Execution. This affects Stimulsoft Designer (Desktop) 2023.1.4 and Stimulsoft Designer …

Mitigation only
Fix from $2,300 2023-03-27
Designer MEDIUM 5.5
CVE-2023-25263

In Stimulsoft Designer (Desktop) 2023.1.5, and 2023.1.4, once an attacker decompiles the Stimulsoft.report.dll the attacker is able to decrypt any co…

No fix yet
Fix from $1,600 2023-03-27
Reports CRITICAL 9.8
CVE-2021-42777

Stimulsoft (aka Stimulsoft Reports) 2013.1.1600.0, when Compilation Mode is used, allows an attacker to execute arbitrary C# code on any machine that…

No fix yet
Fix from $2,300 2022-10-29
Reports CRITICAL 9.8
CVE-2020-15865EPSS 5%

A Remote Code Execution vulnerability in Stimulsoft (aka Stimulsoft Reports) 2013.1.1600.0 allows an attacker to encode C# scripts as base-64 in the …

No fix yet
Fix from $2,300 2020-08-18