gleamtech records
5 published records for vendor gleamtech.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-20 Improper Input Validation1
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-284 Improper Access Control1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
5 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
27Monitor | CVE-2014-8789No exploit | GleamTech FileVista before 6.1 allows remote authenticated users to create arbitrary files and possibly execute arbitrary code via a craftedgleamtech · filevista · CWE-20 | Medium6.5 | — | 3.2% | Dec 2, 2014 |
26Monitor | CVE-2024-57248No exploit | Directory Traversal in File Upload in Gleamtech FileVista 9.2.0.0 allows remote attackers to achieve Code Execution, Information Disclosure,gleamtech · filevista · CWE-22 | Medium6.3 | — | 3.2% | Feb 7, 2025 |
26Monitor | CVE-2024-57249No exploit | Incorrect Access Control in the Preview Function of Gleamtech FileVista 9.2.0.0 allows remote attackers to gain unauthorized access via explgleamtech · filevista · CWE-284 | Medium6.5 | — | 0.4% | Feb 7, 2025 |
24Monitor | CVE-2020-15015No exploit | The FileExplorer component in GleamTech FileUltimate 6.1.5.0 allows XSS via an SVG document.gleamtech · fileultimate · CWE-79 | Medium6.1 | — | 0.6% | Jun 24, 2020 |
17Monitor | CVE-2014-8788No exploit | GleamTech FileVista before 6.1 allows remote authenticated users to obtain sensitive information via a crafted path when saving a zip file, gleamtech · filevista · CWE-200 | Medium4.0 | — | 1.8% | Dec 2, 2014 |
- CVE-2014-878927Monitor
GleamTech FileVista before 6.1 allows remote authenticated users to create arbitrary files and possibly execute arbitrary code via a crafted
MediumCVSS 6.5No exploitEPSS 3%gleamtech · filevistaDec 2, 2014
- CVE-2024-5724826Monitor
Directory Traversal in File Upload in Gleamtech FileVista 9.2.0.0 allows remote attackers to achieve Code Execution, Information Disclosure,
MediumCVSS 6.3No exploitEPSS 3%gleamtech · filevistaFeb 7, 2025
- CVE-2024-5724926Monitor
Incorrect Access Control in the Preview Function of Gleamtech FileVista 9.2.0.0 allows remote attackers to gain unauthorized access via expl
MediumCVSS 6.5No exploitEPSS 0%gleamtech · filevistaFeb 7, 2025
- CVE-2020-1501524Monitor
The FileExplorer component in GleamTech FileUltimate 6.1.5.0 allows XSS via an SVG document.
MediumCVSS 6.1No exploitEPSS 0%gleamtech · fileultimateJun 24, 2020
- CVE-2014-878817Monitor
GleamTech FileVista before 6.1 allows remote authenticated users to obtain sensitive information via a crafted path when saving a zip file,
MediumCVSS 4.0No exploitEPSS 1%gleamtech · filevistaDec 2, 2014