VP
Product
ViewPower Pro
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 3Medium 0Low 0
Watch
Add ViewPower Pro to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-51595 | 9.8 | May 3 | Voltronic Power ViewPower Pro selectDeviceListBy SQL Injection Remote Code Execution Vulnerability Affected: 2.0-22165 |
| CVE-2023-51593 | 9.8 | May 3 | Voltronic Power ViewPower Pro Expression Language Injection Remote Code Execution Vulnerability Affected: 2.0-22165 |
| CVE-2023-51590 | 9.8 | May 3 | Voltronic Power ViewPower Pro UpLoadAction Unrestricted File Upload Remote Code Execution Vulnerability Affected: 2.0-22165 |
| CVE-2023-51586 | 9.8 | May 3 | Voltronic Power ViewPower Pro selectEventConfig SQL Injection Remote Code Execution Vulnerability Affected: 2.0-22165 |
| CVE-2023-51573 | 9.8 | Apr 1 | Voltronic Power ViewPower Pro updateManagerPassword Exposed Dangerous Function Authentication Bypass Vulnerability Affected: 2.0-22165 |
| CVE-2023-51572 | 9.8 | Apr 1 | Voltronic Power ViewPower Pro getMacAddressByIp Command Injection Remote Code Execution Vulnerability Affected: 2.0-22165 |
| CVE-2023-51570 | 9.8 | Apr 1 | Voltronic Power ViewPower Pro Deserialization of Untrusted Data Remote Code Execution Vulnerability Affected: 2.0-22165 |
| CVE-2023-51588 | 7.8 | May 3 | Voltronic Power ViewPower Pro MySQL Use of Hard-coded Credentials Local Privilege Escalation Vulnerability Affected: 2.0-22165 |
| CVE-2023-51591 | 7.5 | May 3 | Voltronic Power ViewPower Pro doDocument XML External Entity Processing Information Disclosure Vulnerability Affected: 2.0-22165 |
| CVE-2023-51571 | 7.5 | Apr 1 | Voltronic Power ViewPower Pro SocketService Missing Authentication Denial-of-Service Vulnerability Affected: 2.0-22165 |
Showing 10
