Vangene deltaFlow Privilege Escalation

The vulnerability of the authentication mechanism of the Vangene deltaFlow electronic document management platform is related to insufficient protection of registration data. Exploiting this vulnerability can allow unauthorized actors to enhance their privileges...

EUVD-2021-14862

Malware in sbrugna...

EUVD-2021-14861

Malware in sbrugna...

CVE-2021-28173

The file upload function of Vangene deltaFlow E-platform does not perform access controlled properly. Remote attackers can upload and execute arbitrary files without login...

CVE-2021-28172

There is a Path Traversal vulnerability in the file download function of Vangene deltaFlow E-platform. Remote attackers can access credential data with this leakage...

CVE-2021-28171

The Vangene deltaFlow E-platform does not take properly protective measures. Attackers can obtain privileged permissions remotely by tampering with users’ data in the Cookie...

CVE-2021-28171

The Vangene deltaFlow E-platform does not take properly protective measures. Attackers can obtain privileged permissions remotely by tampering with users’ data in the Cookie...

Design/Logic Flaw

The Vangene deltaFlow E-platform does not take properly protective measures. Attackers can obtain privileged permissions remotely by tampering with users’ data in the Cookie...

Path traversal

There is a Path Traversal vulnerability in the file download function of Vangene deltaFlow E-platform. Remote attackers can access credential data with this leakage...

CVE-2021-28173

CVE-2021-28173 affects Vangene deltaFlow E-platform. The vulnerability is an unauthorized file upload due to improper access control, enabling remote attackers to upload and execute arbitrary files without authentication. Supported by multiple connected sources (NVD entry and regional disclosures...

CVE-2021-28173 Vangene deltaFlow E-platform - Arbitrary File Upload

The file upload function of Vangene deltaFlow E-platform does not perform access controlled properly. Remote attackers can upload and execute arbitrary files without login...

CVE-2021-28172 Vangene deltaFlow E-platform - Path Traversal

There is a Path Traversal vulnerability in the file download function of Vangene deltaFlow E-platform. Remote attackers can access credential data with this leakage...

CVE-2021-28172

CVE-2021-28172 describes a path traversal vulnerability in the file download function of Vangene deltaFlow E-platform. The underlying issue allows remote attackers to access credential data through the download mechanism. The entry cites a network-accessible vector with low attack complexity and ...

CVE-2021-28171

The CVE-2021-28171 entry concerns the Vangene deltaFlow E-platform. The vulnerability stems from improper protective measures that allow remote attackers to obtain privileged permissions by tampering with users’ cookie data. Affected component: cookie-based session/authorization data handling in ...

CVE-2021-28171 Vangene deltaFlow E-platform - Broken Authentication

The Vangene deltaFlow E-platform does not take properly protective measures. Attackers can obtain privileged permissions remotely by tampering with users’ data in the Cookie...

CVE-2021-28171

The Vangene deltaFlow E-platform does not take properly protective measures. Attackers can obtain privileged permissions remotely by tampering with users’ data in the Cookie...

PT-2021-17789

Name of the Vulnerable Software and Affected Versions: Vangene deltaFlow E-platform affected versions not specified Description: The issue concerns the file upload function, which does not properly perform access control. This allows remote attackers to upload and execute arbitrary files without...

PT-2021-17788

Name of the Vulnerable Software and Affected Versions: Vangene deltaFlow E-platform affected versions not specified Description: The issue concerns a Path Traversal vulnerability in the file download function, allowing remote attackers to access credential data. Recommendations: At the moment,...

CVE-2021-28172: Improper Limitation of a Pathname to a Restricted Directory

There is a Path Traversal vulnerability in the file download function of Vangene deltaFlow E-platform. Remote attackers can access credential data with this leakage...

CVE-2021-28173: Unrestricted Upload of File with Dangerous Type

The file upload function of Vangene deltaFlow E-platform does not perform access controlled properly. Remote attackers can upload and execute arbitrary files without login...