Vendors / Thecontrolgroup Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 1
Exploited now Thecontrolgroup records in CISA KEV No Thecontrolgroup vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 51
Insecure Permission vulnerability found in Yoyager v.1.4 and before allows a remote attacker to execute arbitrary code via a crafted .php file to the media component.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01083 · Published 2023-04-26 · No fix listed CWE-281
Priority MEDIUM 50
DevDojo Voyager through version 1.8.0 is vulnerable to reflected XSS via /admin/compass.
CVSS 3.1 LOW 3.5· Network · High privileges · User interaction · EPSS 0.2005 · Published 2025-01-30 · No fix listed CWE-79
Priority MEDIUM 43
DevDojo Voyager through 1.8.0 is vulnerable to path traversal at the /admin/compass.
CVSS 3.1 MEDIUM 5.7· Network · Low privileges · User interaction · EPSS 0.17632 · Published 2025-01-30 · No fix listed CWE-22
Priority LOW 38
DevDojo Voyager through version 1.8.0 is vulnerable to bypassing the file type verification when an authenticated user uploads a file via /admin/media/upload.
CVSS 3.1 MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.15884 · Published 2025-01-30 · No fix listed CWE-434
Priority LOW 34
An issue was discovered in the Voyager package through 1.2.7 for Laravel.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01219 · Published 2019-09-30 · No fix listed CWE-639
Open these records in search → All records by CVSS severity
1 1 2 1 0
THREATIST.IORead the docs