Vulnerability index

Browse CVEs

7 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Bdr Suite HIGH 7.8
CVE-2021-43458

An Unquoted Service Path vulnerability exits in Vembu BDR 4.2.0.1 via a specially crafted file in the (1) hsflowd, (2) VembuBDR360Agent, or (3) Vembu…

No fix yet
Fix from $1,950 2022-04-04
Bdr Suite CRITICAL 9.8
CVE-2021-26471

In VembuBDR before 4.2.0.1 and VembuOffsiteDR before 4.2.0.1, the http API located at /sgwebservice_o.php accepts a command argument. Using this comm…

Fix: 4.2.0.1+
Fix from $2,300 2021-06-08
Bdr Suite CRITICAL 9.8
CVE-2021-26472

In VembuBDR before 4.2.0.1 and VembuOffsiteDR before 4.2.0.1 installed on Windows, the http API located at /consumerweb/secure/download.php. Using th…

Fix: 4.2.0.1+
Fix from $2,300 2021-06-08
Bdr Suite CRITICAL 9.8
CVE-2021-26473

In VembuBDR before 4.2.0.1 and VembuOffsiteDR before 4.2.0.1 the http API located at /sgwebservice_o.php action logFilePath allows an attacker to wri…

Fix: 4.2.0.1+
Fix from $2,300 2021-06-08
Bdr Suite HIGH 8.8
CVE-2021-26474

Various Vembu products allow an attacker to execute a (non-blind) http-only Cross Site Request Forgery (Other products or versions of products in thi…

Fix: 4.2.0+
Fix from $1,950 2021-06-08
Storegrid MEDIUM 6.1
CVE-2014-10078

Vembu StoreGrid 4.4.x has XSS in interface/registercustomer/onlineregsuccess.php, interface/registerreseller/onlineregfailure.php, interface/register…

No fix yet
Fix from $1,600 2019-02-23
Storegrid MEDIUM 5.3
CVE-2014-10079EPSS 9%

In Vembu StoreGrid 4.4.x, the front page of the server web interface leaks the private IP address in the "ipaddress" hidden form value of the HTML so…

No fix yet
Fix from $1,600 2019-02-23