EUVD-2021-14861

Malware in sbrugna...

CVE-2021-28172

There is a Path Traversal vulnerability in the file download function of Vangene deltaFlow E-platform. Remote attackers can access credential data with this leakage...

Path traversal

There is a Path Traversal vulnerability in the file download function of Vangene deltaFlow E-platform. Remote attackers can access credential data with this leakage...

CVE-2021-28172 Vangene deltaFlow E-platform - Path Traversal

There is a Path Traversal vulnerability in the file download function of Vangene deltaFlow E-platform. Remote attackers can access credential data with this leakage...

PT-2021-17788

Name of the Vulnerable Software and Affected Versions: Vangene deltaFlow E-platform affected versions not specified Description: The issue concerns a Path Traversal vulnerability in the file download function, allowing remote attackers to access credential data. Recommendations: At the moment,...

CVE-2021-28171: Insufficiently Protected Credentials

The Vangene deltaFlow E-platform does not take properly protective measures. Attackers can obtain privileged permissions remotely by tampering with users’ data in the Cookie...

CVE-2021-28172: Improper Limitation of a Pathname to a Restricted Directory

There is a Path Traversal vulnerability in the file download function of Vangene deltaFlow E-platform. Remote attackers can access credential data with this leakage...

CVE-2021-28173: Unrestricted Upload of File with Dangerous Type

The file upload function of Vangene deltaFlow E-platform does not perform access controlled properly. Remote attackers can upload and execute arbitrary files without login...

PT-2021-17789

Name of the Vulnerable Software and Affected Versions: Vangene deltaFlow E-platform affected versions not specified Description: The issue concerns the file upload function, which does not properly perform access control. This allows remote attackers to upload and execute arbitrary files without...

PT-2021-17787

Name of the Vulnerable Software and Affected Versions: Vangene deltaFlow E-platform affected versions not specified Description: The issue concerns the Vangene deltaFlow E-platform, which fails to implement proper protective measures. This allows attackers to remotely obtain privileged permission...