Vfairs

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Vfairs records in CISA KEV

No Vfairs vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Vfairs 4 records MEDIUM

Records

4 records in Vfairs · all components

TI-2020-16241 CVE-2020-26678 · GHSA-979x-3p5w-qvgc

vFairs 3.3 is affected by Remote Code Execution.

MEDIUM 42

vFairs 3.3 is affected by Remote Code Execution.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01785 Published 2021-05-26 No fix listed CWE-434

TI-2020-16240 CVE-2020-26677 · GHSA-m7m4-55vc-v5w2

Any user logged in to a vFairs 3.3 virtual conference or event can perform SQL injection…

MEDIUM 40

Any user logged in to a vFairs 3.3 virtual conference or event can perform SQL injection with a malicious query to the API.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00882 Published 2021-05-26 No fix listed CWE-89

TI-2020-16243 CVE-2020-26680 · GHSA-f24c-hgx2-f289

In vFairs 3.3, any user logged in to a vFairs virtual conference or event can modify any…

LOW 25

In vFairs 3.3, any user logged in to a vFairs virtual conference or event can modify any other users profile information to include a cross-site scripting payload.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0046 Published 2021-05-26 No fix listed CWE-79

TI-2020-16242 CVE-2020-26679 · GHSA-8xfc-9q6x-h2xp

vFairs 3.3 is affected by Insecure Permissions.

LOW 21

vFairs 3.3 is affected by Insecure Permissions.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00773 Published 2021-05-26 No fix listed CWE-639

Open these records in search →

Critical	0
High	2
Medium	2
Low	0
No CVSS	0