Browse CVEs

CRITICAL 9.8 CVE-2024-24398 Directory Traversal vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.2 allows a remote attacker to execute arbitrary code via… Dashboards.php 2024.1.2+ Fix from $2,3002024-02-06 MEDIUM 6.1 CVE-2024-24396 Cross Site Scripting vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.2 allows a remote attacker to execute arbitrary code vi… Dashboard.js 2024.1.2+ Fix from $1,6002024-02-05 MEDIUM 5.4 CVE-2024-24397 Cross Site Scripting vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.2 allows a remote attacker to execute arbitrary code vi… Dashboards.js 2024.1.2+ Fix from $1,6002024-02-05 HIGH 7.5 CVE-2023-25260 Stimulsoft Designer (Web) 2023.1.3 is vulnerable to Local File Inclusion. Designer No fix yet Fix from $1,9502023-03-28 HIGH 7.5 CVE-2023-25262 Stimulsoft GmbH Stimulsoft Designer (Web) 2023.1.3 is vulnerable to Server Side Request Forgery (SSRF). TThe Reporting Designer (Web) offers the poss… Designer No fix yet Fix from $1,9502023-03-28 CRITICAL 9.8 CVE-2023-25261 Certain Stimulsoft GmbH products are affected by: Remote Code Execution. This affects Stimulsoft Designer (Desktop) 2023.1.4 and Stimulsoft Designer … Designer Mitigation only Fix from $2,3002023-03-27 MEDIUM 5.5 CVE-2023-25263 In Stimulsoft Designer (Desktop) 2023.1.5, and 2023.1.4, once an attacker decompiles the Stimulsoft.report.dll the attacker is able to decrypt any co… Designer No fix yet Fix from $1,6002023-03-27 CRITICAL 9.8 CVE-2021-42777 Stimulsoft (aka Stimulsoft Reports) 2013.1.1600.0, when Compilation Mode is used, allows an attacker to execute arbitrary C# code on any machine that… Reports No fix yet Fix from $2,3002022-10-29 CRITICAL 9.8 CVE-2020-15865EPSS 5% A Remote Code Execution vulnerability in Stimulsoft (aka Stimulsoft Reports) 2013.1.1600.0 allows an attacker to encode C# scripts as base-64 in the … Reports No fix yet Fix from $2,3002020-08-18