Lucene search
K

4 matches found

OSV
OSV
added 2022/02/09 2:15 p.m.0 views

CVE-2021-46354

Thinfinity VirtualUI 2.1.28.0, 2.1.32.1 and 2.5.26.2, fixed in version 3.0 is affected by an information disclosure vulnerability in the parameter "Addr" in cmd site. The ability to send requests to other systems can allow the vulnerable server to filtrate the real IP of the web server or increas...

7.5CVSS5.8AI score
Exploits0References3
Cvelist
Cvelist
added 2022/02/09 1:10 p.m.8 views

CVE-2021-46354

Thinfinity VirtualUI 2.1.28.0, 2.1.32.1 and 2.5.26.2, fixed in version 3.0 is affected by an information disclosure vulnerability in the parameter "Addr" in cmd site. The ability to send requests to other systems can allow the vulnerable server to filtrate the real IP of the web server or increas...

7.5AI score0.39202EPSS
Exploits3References3
CVE
CVE
added 2022/02/09 1:10 p.m.88 views

CVE-2021-46354

CVE-2021-46354 affects Thinfinity VirtualUI versions 2.1.28.0, 2.1.32.1, and 2.5.26.2; fixed in 3.0. The vulnerability is an information disclosure caused by the Addr parameter in the cmd site, enabling the vulnerable server to send requests to external systems and potentially reveal the real IP ...

7.5CVSS7.2AI score0.39202EPSS
Exploits3References3Affected Software1
CNNVD
CNNVD
added 2022/02/09 12:0 a.m.1 views

Cybele Software Thinfinity VirtualUI 信息泄露漏洞

Cybele Software Thinfinity VirtualUI is a solution from Cybele Software, Inc. that supports embedding remote Windows applications into standard web applications to allow two-way interaction with Javascript programming. Cybele Software Thinfinity VirtualUI suffers from an information disclosure...

7.5CVSS7.5AI score0.39202EPSS
Exploits3References7
Rows per page
Query Builder