Browse CVEs

MEDIUM 5.4 CVE-2024-11021 Webopac from Grand Vice info has Stored Cross-site Scripting vulnerability. Remote attackers with regular privileges can inject arbitrary JavaScript … Webopac 6.5.1 / 7.2.3+ Fix from $1,6002024-11-11 CRITICAL 9.8 CVE-2024-11020 Webopac from Grand Vice info has a SQL Injection vulnerability, allowing unauthenticated remote attacks to inject arbitrary SQL commands to read, mod… Webopac 6.5.1 / 7.2.3+ Fix from $2,3002024-11-11 CRITICAL 9.8 CVE-2024-11018 Webopac from Grand Vice info does not properly validate uploaded file types, allowing unauthenticated remote attackers to upload and execute webshell… Webopac 6.5.1 / 7.2.3+ Fix from $2,3002024-11-11 MEDIUM 6.1 CVE-2024-11019 Webopac from Grand Vice info has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaS… Webopac 6.5.1 / 7.2.3+ Fix from $1,6002024-11-11 CRITICAL 9.8 CVE-2024-11016 Webopac from Grand Vice info has a SQL Injection vulnerability, allowing unauthenticated remote attacks to inject arbitrary SQL commands to read, mod… Webopac 6.5.1 / 7.2.3+ Fix from $2,3002024-11-11 HIGH 8.8 CVE-2024-11017 Webopac from Grand Vice info does not properly validate uploaded file types, allowing remote attackers with regular privileges to upload and execute … Webopac 6.5.1 / 7.2.3+ Fix from $1,9502024-11-11 HIGH 8.8 CVE-2021-42839 Grand Vice info Co. webopac7 file upload function fails to filter special characters. While logging in with general user’s permission, remote attacke… Webopac Mitigation only Fix from $1,9502021-11-15 MEDIUM 6.1 CVE-2021-42838 Grand Vice info Co. webopac7 book search field parameter does not properly restrict the input of special characters, thus unauthenticated attackers c… Webopac Mitigation only Fix from $1,6002021-11-15 HIGH 7.2 CVE-2004-0453 Format string vulnerability in the monitor "memory dump" command in VICE 1.6 to 1.14 allows local users to cause a denial of service (emulator crash)… Vice Patch available Fix from $1,9502004-08-06