Vendors / Trms Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 3
Exploited now Trms records in CISA KEV No Trms vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 45
The fetch API in Tightrope Media Carousel before 7.1.3 has CarouselAPI/v0/fetch?url= SSRF.
CVSS 3.0 CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.01114 · Published 2019-08-26 · No fix listed CWE-918
Priority MEDIUM 43
The Tightrope Media Carousel digital signage product 7.0.4.104 contains an arbitrary file upload vulnerability in the Manage Bulletins/Upload feature, which can be leveraged to gain remote code execution.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0275 · Published 2019-10-29 · No fix listed CWE-434
Priority MEDIUM 41
An issue was discovered in the Tightrope Media Carousel digital signage product 7.0.4.104.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01631 · Published 2019-10-29 · No fix listed CWE-269
Priority MEDIUM 40
The Tightrope Media Carousel Seneca HDn Windows-based appliance 7.0.4.104 is shipped with a default local administrator username and password.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01114 · Published 2019-10-29 · No fix listed CWE-798
Priority LOW 34
A Local File Inclusion (LFI) vulnerability exists in the Web Interface API of TightRope Media Carousel Digital Signage before 7.3.5.
CVSS 3.0 MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.06394 · Published 2018-07-23 · No fix listed CWE-22
Open these records in search → All records by CVSS severity
1 3 1 0 0
THREATIST.IORead the docs