Affected Products

Vendor / product matrix with CVE counts sourced from the CPE catalog.

Export CSV

Products

1 vendor
VendorProductsCVEsKEVAvg EPSSWorst Severity
vaethink
14053.2%CRITICAL

Related CVEs

4
CVE IDDescriptionSeverityCVSSKEVEPSSPublished
CVE-2024-38971vaeThink 1.0.2 is vulnerable to stored Cross Site Scripting (XSS) in the system backend.MEDIUM5.4—20.1%Jul 9, 2024
CVE-2024-38970vaeThink 1.0.2 is vulnerable to Information Disclosure via the system backend,access management administrator function.MEDIUM4.9—35.3%Jul 9, 2024
CVE-2020-19302An arbitrary file upload vulnerability in the avatar upload function of vaeThink v1.0.1 allows attackers to open a webshell via changing uploaded file suffixes to ".php".CRITICAL9.8—74.7%Aug 3, 2021
CVE-2020-19301A vulnerability in the vae_admin_rule database table of vaeThink v1.0.1 allows attackers to execute arbitrary code via a crafted payload in the condition parameter.CRITICAL9.8—82.7%Aug 3, 2021