Visualware records
8 published records for vendor visualware.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-611 Improper Restriction of XML External Entity Reference1
- CWE-749 Exposed Dangerous Method or Function1
- CWE-863 Incorrect Authorization1
The weakness classes this vendor ships most often: where to look.
CWEAll records
8 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
43Plan | CVE-2021-27198Proof of concept | An issue was discovered in Visualware MyConnection Server before v11.1a.visualware · myconnection server · CWE-434 | Critical9.8 | — | 13.6% | Feb 26, 2021 |
35Monitor | CVE-2023-42034No exploit | Visualware MyConnection Server doRTAAccessCTConfig Cross-Site Scripting Authentication Bypass Vulnerabilityvisualware · myconnection server · CWE-79 | High8.8 | — | 1.4% | May 2, 2024 |
30Monitor | CVE-2023-42032No exploit | Visualware MyConnection Server doRTAAccessUPass Exposed Dangerous Method Information Disclosure Vulnerabilityvisualware · myconnection server · CWE-749 | High7.5 | — | 1.2% | May 2, 2024 |
30Monitor | CVE-2021-27509No exploit | In Visualware MyConnection Server before 11.0b build 5382, each published report is not associated with its own access code.visualware · myconnection server · CWE-863 | High7.5 | — | 1.0% | Feb 19, 2021 |
29Monitor | CVE-2023-42033No exploit | Visualware MyConnection Server doPostUploadfiles Directory Traversal Remote Code Execution Vulnerabilityvisualware · myconnection server · CWE-22 | High7.2 | — | 3.3% | May 2, 2024 |
26Monitor | CVE-2023-42035No exploit | Visualware MyConnection Server doIForward XML External Entity Processing Information Disclosure Vulnerabilityvisualware · myconnection server · CWE-611 | Medium6.5 | — | 1.2% | May 2, 2024 |
18Monitor | CVE-2014-5113No exploit | Multiple cross-site scripting (XSS) vulnerabilities in test.php in Visualware MyConnection Server 9.7i allow remote attackers to inject arbivisualware · myconnection server · CWE-79 | Medium4.3 | — | 1.9% | Jul 28, 2014 |
17Monitor | CVE-2015-2043No exploit | Multiple cross-site scripting (XSS) vulnerabilities in Visualware MyConnection Server 8.2b allow remote attackers to inject arbitrary web scvisualware · myconnection server · CWE-79 | Medium4.3 | — | 1.0% | Feb 25, 2015 |
- CVE-2021-2719843Plan
An issue was discovered in Visualware MyConnection Server before v11.1a.
CriticalCVSS 9.8Proof of conceptEPSS 14%visualware · myconnection serverFeb 26, 2021
- CVE-2023-4203435Monitor
Visualware MyConnection Server doRTAAccessCTConfig Cross-Site Scripting Authentication Bypass Vulnerability
HighCVSS 8.8No exploitEPSS 1%visualware · myconnection serverMay 2, 2024
- CVE-2023-4203230Monitor
Visualware MyConnection Server doRTAAccessUPass Exposed Dangerous Method Information Disclosure Vulnerability
HighCVSS 7.5No exploitEPSS 1%visualware · myconnection serverMay 2, 2024
- CVE-2021-2750930Monitor
In Visualware MyConnection Server before 11.0b build 5382, each published report is not associated with its own access code.
HighCVSS 7.5No exploitEPSS 1%visualware · myconnection serverFeb 19, 2021
- CVE-2023-4203329Monitor
Visualware MyConnection Server doPostUploadfiles Directory Traversal Remote Code Execution Vulnerability
HighCVSS 7.2No exploitEPSS 3%visualware · myconnection serverMay 2, 2024
- CVE-2023-4203526Monitor
Visualware MyConnection Server doIForward XML External Entity Processing Information Disclosure Vulnerability
MediumCVSS 6.5No exploitEPSS 1%visualware · myconnection serverMay 2, 2024
- CVE-2014-511318Monitor
Multiple cross-site scripting (XSS) vulnerabilities in test.php in Visualware MyConnection Server 9.7i allow remote attackers to inject arbi
MediumCVSS 4.3No exploitEPSS 2%visualware · myconnection serverJul 28, 2014
- CVE-2015-204317Monitor
Multiple cross-site scripting (XSS) vulnerabilities in Visualware MyConnection Server 8.2b allow remote attackers to inject arbitrary web sc
MediumCVSS 4.3No exploitEPSS 1%visualware · myconnection serverFeb 25, 2015