Vendors / Contec Co., Ltd. Records 81 All Threatist records
Exploited (KEV) 1
CVSS critical 9
CVSS high 36
Exploited now Contec Co., Ltd. records in CISA KEV
Components Products in the NVD configurations · select one to filter the records Priority CRITICAL 88
There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassing internal restrictions through downloader.php.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.99291 · Published 2023-02-06 · No fix listed CWE-77
Priority HIGH 83
SolarView Compact <= 6.0 is vulnerable to Insecure Permissions.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.60221 · Published 2023-05-23 · No fix listed CWE-276
Priority HIGH 82
SolarView Compact 4.0 and 5.0 is vulnerable to Unrestricted File Upload via a crafted php file.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0165 · Published 2022-11-29 · No fix listed CWE-434
Priority HIGH 82
SolarView Compact 6.00 was discovered to contain a command injection vulnerability via network_test.php
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.31415 · Published 2022-11-17 · No fix listed CWE-77
Priority HIGH 72
SolarView Compact < 6.00 is vulnerable to Directory Traversal.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.03222 · Published 2023-09-08 · No fix listed CWE-22
Priority MEDIUM 60
SolarView Compact 7.0 is vulnerable to Cross-site Scripting (XSS) via /network_test.php.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01788 · Published 2022-11-29 · No fix listed CWE-79
Priority MEDIUM 51
An issue in Contec SolarView Compact v.6.0 and before allows an attacker to execute arbitrary code via the texteditor.php component.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00919 · Published 2023-10-27 · No fix listed CWE-94
Open these records in search → All records by CVSS severity
9 36 36 0 0
THREATIST.IORead the docs