VISAM VBASE Editor
Successful exploitation of these vulnerabilities may allow un-neutralized user-controllable data input, disclosure of local files, access to NTLM (Windows New Technology LAN Manager) hashes, and access to sensitive files.
describes (9)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-42537US | high7.5 | — | ||
VISAM VBASE version 11.6.0.6 processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the prod… | ||||
| CVE-2021-42535US | medium6.1 | — | ||
VISAM VBASE version 11.6.0.6 does not neutralize or incorrectly neutralizes user-controllable input before the data is placed in output used as a public-facing webpage. | ||||
| CVE-2021-38417US | high7.5 | — | ||
VISAM VBASE version 11.6.0.6 is vulnerable to improper access control via the web-remote endpoint, which may allow an unauthenticated user viewing access to folders and files in th… | ||||
| CVE-2021-34803US | high7.8 | — | ||
TeamViewer before 14.7.48644 on Windows loads untrusted DLLs in certain situations. | ||||
| CVE-2020-13699US | high8.8 | Exploit | ||
TeamViewer Desktop for Windows before 15.8.3 does not properly quote its custom URI handlers. A malicious website could launch TeamViewer with arbitrary parameters, as demonstrated… | ||||
| CVE-2019-18988US | high7.0OT critical | KEV | ||
TeamViewer Desktop through 14.7.1965 allows a bypass of remote-login access control because the same key is used for different customers' installations. It used a shared AES key fo… | ||||
| CVE-2018-16550US | critical9.8 | — | ||
TeamViewer 10.x through 13.x allows remote attackers to bypass the brute-force authentication protection mechanism by skipping the "Cancel" step, which makes it easier to determine… | ||||
| CVE-2018-14333US | high8.1 | — | ||
TeamViewer through 13.1.1548 stores a password in Unicode format within TeamViewer.exe process memory between "[00 88] and "[00 00 00]" delimiters, which might make it easier for a… | ||||
| CVE-2005-2475US | low1.2 | — | ||
Race condition in Unzip 5.52 allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are chan… | ||||
references
External citations — patches, advisories, analysis.
remediations (9)
- MitigationVBASE Pro-RT/ Server-RT (Web Remote)
For more information, please contact VISAM using the information provided on the company contact page.
https://www.vbase.net/en/contact.php - MitigationVBASE Pro-RT/ Server-RT (Web Remote)
For more information, please contact VISAM using the information provided on the company contact page.
https://www.vbase.net/en/contact.php - MitigationVBASE Pro-RT/ Server-RT (Web Remote)
For more information, please contact VISAM using the information provided on the company contact page.
https://www.vbase.net/en/contact.php - MitigationVBASE Pro-RT/ Server-RT (Web Remote)
For more information, please contact VISAM using the information provided on the company contact page.
https://www.vbase.net/en/contact.php - MitigationVBASE Pro-RT/ Server-RT (Web Remote)
For more information, please contact VISAM using the information provided on the company contact page.
https://www.vbase.net/en/contact.php - MitigationVBASE Pro-RT/ Server-RT (Web Remote)
For more information, please contact VISAM using the information provided on the company contact page.
https://www.vbase.net/en/contact.php - MitigationVBASE Pro-RT/ Server-RT (Web Remote)
For more information, please contact VISAM using the information provided on the company contact page.
https://www.vbase.net/en/contact.php - MitigationVBASE Pro-RT/ Server-RT (Web Remote)
For more information, please contact VISAM using the information provided on the company contact page.
https://www.vbase.net/en/contact.php - MitigationVBASE Pro-RT/ Server-RT (Web Remote)
For more information, please contact VISAM using the information provided on the company contact page.
https://www.vbase.net/en/contact.php
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan