Lucene search
+L

27 matches found

NVD
NVD
•added 2021/12/16 4:15 a.m.•41 views

CVE-2021-45092

Thinfinity VirtualUI before 3.0 has functionality in /lab.html reachable by default that could allow IFRAME injection via the vpath parameter...

9.8CVSS0.40584EPSS
SaveExploits3References2
OSV
OSV
•added 2021/12/16 4:15 a.m.•16 views

CVE-2021-45092

Thinfinity VirtualUI before 3.0 has functionality in /lab.html reachable by default that could allow IFRAME injection via the vpath parameter...

9.8CVSS5.8AI score0.40584EPSS
SaveExploits3References2
attackerkb
attackerkb
•added 2021/12/16 4:15 a.m.•8 views

CVE-2021-45092

Thinfinity VirtualUI before 3.0 has functionality in /lab.html reachable by default that could allow IFRAME injection via the vpath parameter...

9.8CVSS7.3AI score0.40584EPSS
SaveExploits3References4
Prion
Prion
•added 2021/12/16 4:15 a.m.•22 views

Design/Logic Flaw

Thinfinity VirtualUI before 3.0 has functionality in /lab.html reachable by default that could allow IFRAME injection via the vpath parameter...

7.5CVSS9.5AI score0.40584EPSS
SaveExploits3References2Affected Software1
Cvelist
Cvelist
•added 2021/12/16 3:07 a.m.•50 views

CVE-2021-45092

Thinfinity VirtualUI before 3.0 has functionality in /lab.html reachable by default that could allow IFRAME injection via the vpath parameter...

9.8AI score0.40584EPSS
SaveExploits3References2
CNNVD
CNNVD
•added 2021/12/16 12:00 a.m.•17 views

Cybele Software Thinfinity VirtualUI 安全漏洞

Cybele Software Thinfinity VirtualUI is a solution from Cybele Software that supports embedding remote Windows applications into standard Web applications, allowing two-way interaction with Javascript programming. A security vulnerability exists in Cybele Software Thinfinity VirtualUI versions...

9.8CVSS8.4AI score0.40584EPSS
SaveExploits3References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/16 12:00 a.m.•1 views

CVE-2021-45092: Undefined Security Weakness

Thinfinity VirtualUI before 3.0 has functionality in /lab.html reachable by default that could allow IFRAME injection via the vpath parameter...

9.8CVSS5.8AI score0.40584EPSS
SaveExploits3References1
Rows per page
Query Builder