Vocabularyserver

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Vocabularyserver records in CISA KEV

No Vocabularyserver vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records

TI-2019-10689 CVE-2019-14345 · GHSA-fcfc-cp3g-xgf3

MEDIUM 46

TemaTres 3.0 allows remote unprivileged users to create an administrator account

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02022 Published 2019-11-15 No fix listed

TI-2019-10688 CVE-2019-14344 · GHSA-vxv8-fwqc-g2gq

LOW 28

TemaTres 3.0 has reflected XSS via the replace_string or search_string parameter to the vocab/admin.php?doAdmin=bulkReplace URI.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00718 Published 2019-12-13 No fix listed CWE-79

TI-2019-10687 CVE-2019-14343 · GHSA-3976-7rwg-xx73

LOW 26

TemaTres 3.0 has stored XSS via the value parameter to the vocab/admin.php?vocabulario_id=list URI.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0094 Published 2019-11-15 No fix listed CWE-79