Lucene search
+L

7 matches found

VulnCheck KEV
VulnCheck KEV
•added 2024/01/22 12:00 a.m.•13 views

VulnCheck KEV: CVE-2021-45092

Thinfinity VirtualUI before 3.0 has functionality in /lab.html reachable by default that could allow IFRAME injection via the vpath parameter...

9.8CVSS8.1AI score0.40584EPSS
SaveIn wildExploits4References418
osv_cve
osv_cve
•added 2021/12/16 4:15 a.m.•23 views

CVE-2021-45092

Thinfinity VirtualUI before 3.0 has functionality in /lab.html reachable by default that could allow IFRAME injection via the vpath parameter...

9.8CVSS5.8AI score0.40584EPSS
SaveExploits4References2
attackerkb
attackerkb
•added 2021/12/16 4:15 a.m.•14 views

CVE-2021-45092

Thinfinity VirtualUI before 3.0 has functionality in /lab.html reachable by default that could allow IFRAME injection via the vpath parameter...

9.8CVSS7.3AI score0.40584EPSS
SaveExploits4References4
NVD
NVD
•added 2021/12/16 4:15 a.m.•47 views

CVE-2021-45092

Thinfinity VirtualUI before 3.0 has functionality in /lab.html reachable by default that could allow IFRAME injection via the vpath parameter...

9.8CVSS0.40584EPSS
SaveExploits4References2
Prion
Prion
•added 2021/12/16 4:15 a.m.•26 views

Design/Logic Flaw

Thinfinity VirtualUI before 3.0 has functionality in /lab.html reachable by default that could allow IFRAME injection via the vpath parameter...

7.5CVSS9.5AI score0.40584EPSS
SaveExploits4References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/16 12:00 a.m.•4 views

CVE-2021-45092: Undefined Security Weakness

Thinfinity VirtualUI before 3.0 has functionality in /lab.html reachable by default that could allow IFRAME injection via the vpath parameter...

9.8CVSS5.8AI score0.40584EPSS
SaveExploits4References1
CNNVD
CNNVD
•added 2021/12/16 12:00 a.m.•24 views

Cybele Software Thinfinity VirtualUI security vulnerability

Cybele Software Thinfinity VirtualUI is a solution from Cybele Software that supports embedding remote Windows applications into standard Web applications, allowing two-way interaction with Javascript programming. A security vulnerability exists in Cybele Software Thinfinity VirtualUI versions...

9.8CVSS8.4AI score0.40584EPSS
SaveExploits4References5
Rows per page
Query Builder