vice records
9 published records for vendor vice.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 2
- With a fix record
- 11.1%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-434 Unrestricted Upload of File with Dangerous Type3
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
9 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2024-11018No exploit | Grand Vice info Webopac - Arbitrary File Uploadvice · webopac · CWE-434 | Critical9.8 | — | 0.8% | Nov 11, 2024 |
39Monitor | CVE-2024-11016No exploit | Grand Vice info Webopac - SQL Injectionvice · webopac · CWE-89 | Critical9.8 | — | 0.6% | Nov 11, 2024 |
39Monitor | CVE-2024-11020No exploit | Grand Vice info Webopac7 - SQL Injectionvice · webopac · CWE-89 | Critical9.8 | — | 0.5% | Nov 11, 2024 |
36Monitor | CVE-2021-42839No exploit | Grand Vice info Co. webopac7 - Arbitrary File Uploadvice · webopac · CWE-434 | High8.8 | — | 2.4% | Nov 15, 2021 |
35Monitor | CVE-2024-11017No exploit | Grand Vice info Webopac - Arbitrary File Uploadvice · webopac · CWE-434 | High8.8 | — | 0.8% | Nov 11, 2024 |
28Monitor | CVE-2004-0453No exploit | Format string vulnerability in the monitor "memory dump" command in VICE 1.6 to 1.14 allows local users to cause a denial of service (emulatvice · vice | High7.2 | — | 0.4% | Aug 6, 2004 |
24Monitor | CVE-2021-42838No exploit | Grand Vice info Co. webopac7 - Reflected XSSvice · webopac · CWE-79 | Medium6.1 | — | 0.6% | Nov 15, 2021 |
24Monitor | CVE-2024-11019No exploit | Grand Vice info Webopac7 - Reflected XSSvice · webopac · CWE-79 | Medium6.1 | — | 0.3% | Nov 11, 2024 |
21Monitor | CVE-2024-11021No exploit | Grand Vice info Webopac - Stored XSSvice · webopac · CWE-79 | Medium5.4 | — | 0.3% | Nov 11, 2024 |
- CVE-2024-1101839Monitor
Grand Vice info Webopac - Arbitrary File Upload
CriticalCVSS 9.8No exploitEPSS 1%vice · webopacNov 11, 2024
- CVE-2024-1101639Monitor
Grand Vice info Webopac - SQL Injection
CriticalCVSS 9.8No exploitEPSS 1%vice · webopacNov 11, 2024
- CVE-2024-1102039Monitor
Grand Vice info Webopac7 - SQL Injection
CriticalCVSS 9.8No exploitEPSS 0%vice · webopacNov 11, 2024
- CVE-2021-4283936Monitor
Grand Vice info Co. webopac7 - Arbitrary File Upload
HighCVSS 8.8No exploitEPSS 2%vice · webopacNov 15, 2021
- CVE-2024-1101735Monitor
Grand Vice info Webopac - Arbitrary File Upload
HighCVSS 8.8No exploitEPSS 1%vice · webopacNov 11, 2024
- CVE-2004-045328Monitor
Format string vulnerability in the monitor "memory dump" command in VICE 1.6 to 1.14 allows local users to cause a denial of service (emulat
HighCVSS 7.2No exploitEPSS 0%vice · viceAug 6, 2004
- CVE-2021-4283824Monitor
Grand Vice info Co. webopac7 - Reflected XSS
MediumCVSS 6.1No exploitEPSS 1%vice · webopacNov 15, 2021
- CVE-2024-1101924Monitor
Grand Vice info Webopac7 - Reflected XSS
MediumCVSS 6.1No exploitEPSS 0%vice · webopacNov 11, 2024
- CVE-2024-1102121Monitor
Grand Vice info Webopac - Stored XSS
MediumCVSS 5.4No exploitEPSS 0%vice · webopacNov 11, 2024