Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Ragic Enterprise Cloud Database 2024/08/08 09:45:25 Clear all filters
TI-2024-09268 CVE-2024-9985 · GHSA-9jqp-827w-wpmw

Ragic Enterprise Cloud Database - Arbitrary File Upload

Priority MEDIUM 44

Enterprise Cloud Database from Ragic does not properly validate the file type for uploads.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00649 Published 2024-10-15 Fixed in 2024/08/08 09:45:25 CWE-434
TI-2024-09267 CVE-2024-9984 · GHSA-qw66-2q7h-vq76

Ragic Enterprise Cloud Database - Missing Authentication

Priority MEDIUM 50

Enterprise Cloud Database from Ragic does not authenticate access to specific functionality, allowing unauthenticated remote attackers to use this functionality to obtain any user's session cookie.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00571 Published 2024-10-15 Fixed in 2024/08/08 09:45:25 CWE-306
TI-2024-09266 CVE-2024-9983 · GHSA-7f7q-jm58-6f8f

Ragic Enterprise Cloud Database - Arbitrary File Read through Path Traversal

Priority MEDIUM 40

Enterprise Cloud Database from Ragic does not properly validate a specific page parameter, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00666 Published 2024-10-15 Fixed in 2024/08/08 09:45:25 CWE-23