Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Internet Information DreamMaker 2025/10/22 Clear all filters
TI-2026-19935 CVE-2026-24729 · GHSA-345h-g8ww-x3jg

Interinfo DreamMaker - Unrestricted Upload of File with Dangerous Type

Priority MEDIUM 49

An unrestricted upload of file with dangerous type vulnerability in the file upload function of Interinfo DreamMaker versions before 2025/10/22 allows remote attackers to execute arbitrary system commands via a malicious…

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00366 Published 2026-01-30 Fixed in 2025/10/22 CWE-434
TI-2026-19934 CVE-2026-24728 · GHSA-3qgf-wxfj-pf5j

Interinfo DreamMaker - Missing Authentication for Critical Function

Priority MEDIUM 49

A missing authentication for critical function vulnerability in the /servlet/baServer3 endpoint of Interinfo DreamMaker versions before 2025/10/22 allows remote attackers to access exposed administrative functionality wi…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00524 Published 2026-01-30 Fixed in 2025/10/22 CWE-306