Trms

2 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2019-13020 Aug 26, 18:15 CRITICAL Act Now

The fetch API in Tightrope Media Carousel before 7.1.3 has CarouselAPI/v0/fetch?url= SSRF. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

SSRF Tightrope Media Carousel Trms

NVD

CVSS 3.0

10.0

EPSS

1.1%

CVE-2018-14573 Jul 23, 23:29 MEDIUM This Month

A Local File Inclusion (LFI) vulnerability exists in the Web Interface API of TightRope Media Carousel Digital Signage before 7.3.5. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Path Traversal Tightrope Media Carousel Digital Signage Trms

NVD

CVSS 3.0

5.5

EPSS

6.4%

CVE-2019-13020

EPSS 1% CVSS 10.0

CRITICAL Act Now

SSRF Tightrope Media Carousel Trms

NVD

CVE-2018-14573

EPSS 6% CVSS 5.5

MEDIUM This Month

Path Traversal Tightrope Media Carousel Digital Signage Trms

NVD