Skip to main content

Teller

2 CVEs product

Monthly

CVE-2023-42362 Sep 14, 21:15 MEDIUM This Month

An arbitrary file upload vulnerability in Teller Web App v.4.4.0 allows a remote attacker to execute arbitrary commands and obtain sensitive information via uploading a crafted file. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS File Upload Teller
NVD GitHub
CVSS 3.1
5.4
EPSS
0.6%
CVE-2019-1010306 Jul 15, 15:15 Ruby CRITICAL PATCH Act Now

Slanger 0.6.0 is affected by: Remote Code Execution (RCE). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Deserialization of Untrusted Data vulnerability could allow attackers to execute arbitrary code through malicious serialized objects.

RCE Deserialization Slanger Teller
NVD GitHub
CVSS 3.0
9.8
EPSS
4.0%
EPSS 1% CVSS 5.4
MEDIUM This Month

An arbitrary file upload vulnerability in Teller Web App v.4.4.0 allows a remote attacker to execute arbitrary commands and obtain sensitive information via uploading a crafted file. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS File Upload Teller
NVD GitHub
EPSS 4% CVSS 9.8
CRITICAL PATCH Act Now

Slanger 0.6.0 is affected by: Remote Code Execution (RCE). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Deserialization of Untrusted Data vulnerability could allow attackers to execute arbitrary code through malicious serialized objects.

RCE Deserialization Slanger +1
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy