Viaware

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-36356 Aug 31, 04:15 CRITICAL POC THREAT Act Now

KRAMER VIAware through August 2021 allows remote attackers to execute arbitrary code because ajaxPages/writeBrowseFilePathAjax.php accepts arbitrary executable pathnames (even though. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP RCE File Upload Viaware Kramerav

NVD Exploit-DB

CVSS 3.1

9.8

EPSS

54.4%

CVE-2021-35064 Jul 12, 12:15 CRITICAL POC THREAT Act Now

KramerAV VIAWare, all tested versions, allow privilege escalation through misconfiguration of sudo. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Privilege Escalation Viaware Kramerav

NVD Exploit-DB

CVSS 3.1

9.8

EPSS

70.8%

CVE-2019-17124 Oct 09, 16:15 CRITICAL POC THREAT Act Now

Kramer VIAware 2.5.0719.1034 has Incorrect Access Control. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Privilege Escalation Viaware Kramerav

NVD GitHub Exploit-DB

CVSS 3.1

9.8

EPSS

22.5%

CVE-2021-36356

EPSS 54% CVSS 9.8

CRITICAL POC THREAT Act Now

PHP RCE File Upload +2

NVD Exploit-DB

CVE-2021-35064

EPSS 71% CVSS 9.8

CRITICAL POC THREAT Act Now

Privilege Escalation Viaware Kramerav

NVD Exploit-DB

CVE-2019-17124

EPSS 23% CVSS 9.8

CRITICAL POC THREAT Act Now

Privilege Escalation Viaware Kramerav

NVD GitHub Exploit-DB