Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Vembu Component: Storegrid Clear all filters
TI-2014-08235 CVE-2014-10079 · GHSA-3vx9-wcw7-gppj

In Vembu StoreGrid 4.4.x, the front page of the server web interface leaks the private IP…

Priority LOW 35

In Vembu StoreGrid 4.4.x, the front page of the server web interface leaks the private IP address in the "ipaddress" hidden form value of the HTML source code, which is disclosed because of incorrect processing of an ind…

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.08749 Published 2019-02-23 No fix listed CWE-200
TI-2014-08234 CVE-2014-10078 · GHSA-7wx2-436r-cm2r

Vembu StoreGrid 4.4.x has XSS in interface/registercustomer/onlineregsuccess.php…

Priority LOW 33

Vembu StoreGrid 4.4.x has XSS in interface/registercustomer/onlineregsuccess.php, interface/registerreseller/onlineregfailure.php, interface/registerclient/onlineregfailure.php, and interface/registercustomer/onlineregfa…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.03251 Published 2019-02-23 No fix listed CWE-79