Browse CVEs

HIGH 7.8 CVE-2021-43458 An Unquoted Service Path vulnerability exits in Vembu BDR 4.2.0.1 via a specially crafted file in the (1) hsflowd, (2) VembuBDR360Agent, or (3) Vembu… Bdr Suite No fix yet Fix from $1,9502022-04-04 CRITICAL 9.8 CVE-2021-26471 In VembuBDR before 4.2.0.1 and VembuOffsiteDR before 4.2.0.1, the http API located at /sgwebservice_o.php accepts a command argument. Using this comm… Bdr Suite 4.2.0.1+ Fix from $2,3002021-06-08 CRITICAL 9.8 CVE-2021-26472 In VembuBDR before 4.2.0.1 and VembuOffsiteDR before 4.2.0.1 installed on Windows, the http API located at /consumerweb/secure/download.php. Using th… Bdr Suite 4.2.0.1+ Fix from $2,3002021-06-08 CRITICAL 9.8 CVE-2021-26473 In VembuBDR before 4.2.0.1 and VembuOffsiteDR before 4.2.0.1 the http API located at /sgwebservice_o.php action logFilePath allows an attacker to wri… Bdr Suite 4.2.0.1+ Fix from $2,3002021-06-08 HIGH 8.8 CVE-2021-26474 Various Vembu products allow an attacker to execute a (non-blind) http-only Cross Site Request Forgery (Other products or versions of products in thi… Bdr Suite 4.2.0+ Fix from $1,9502021-06-08 MEDIUM 6.1 CVE-2014-10078 Vembu StoreGrid 4.4.x has XSS in interface/registercustomer/onlineregsuccess.php, interface/registerreseller/onlineregfailure.php, interface/register… Storegrid No fix yet Fix from $1,6002019-02-23 MEDIUM 5.3 CVE-2014-10079EPSS 9% In Vembu StoreGrid 4.4.x, the front page of the server web interface leaks the private IP address in the "ipaddress" hidden form value of the HTML so… Storegrid No fix yet Fix from $1,6002019-02-23