Lucene search

K

Viaware Security Vulnerabilities

cve
cve

CVE-2021-36356

KRAMER VIAware through August 2021 allows remote attackers to execute arbitrary code because ajaxPages/writeBrowseFilePathAjax.php accepts arbitrary executable pathnames (even though browseSystemFiles.php is no longer reachable via the GUI). NOTE: this issue exists because of an incomplete fix for....

9.8CVSS

9.8AI Score

0.881EPSS

2021-08-31 04:15 AM
60
In Wild
cve
cve

CVE-2021-35064

KramerAV VIAWare, all tested versions, allow privilege escalation through misconfiguration of sudo. Sudoers permits running of multiple dangerous commands, including unzip, systemctl and...

9.8CVSS

9.6AI Score

0.015EPSS

2021-07-12 12:15 PM
54
In Wild
4
cve
cve

CVE-2019-17124

Kramer VIAware 2.5.0719.1034 has Incorrect Access...

9.8CVSS

9.4AI Score

0.216EPSS

2019-10-09 04:15 PM
32
In Wild