Login Request a demo
TE
Vendor
Tecnick
3 products with CVEs on record
37
CVEs
0
On KEV
0
New 30D
Products
TC
TCExam
Tecnick
9.8
29 CVEs0 on KEV0 new
TC
tcpdf
tecnick
9.8
6 CVEs0 on KEV0 new
AI
Aiocp
Tecnick
–
2 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-4169
TC
TCExam
Tecnick
2.4
0%
Mar 15Tecnick TCExam XML Export tce_xml_users.php F_xml_export_users cross site scripting
CVE-2026-4168
TC
TCExam
Tecnick
2.4
0%
Mar 15Tecnick TCExam Group tce_edit_group.php cross site scripting
CVE-2025-23176
TC
TCExam
Tecnick
8.8
0%
Apr 22Tecnick – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-23175
TC
TCExam
Tecnick
6.1
0%
Apr 22Tecnick - Multiple XSS (CWE-79)
CVE-2024-47926
TC
TCExam
Tecnick
9.8
1%
Dec 30Tecnick TCExam – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-47925
TC
TCExam
Tecnick
7.5
0%
Dec 30Tecnick TCExam – Multiple CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-56519
TC
tcpdf
tecnick
7.5
1%
Dec 27An issue was discovered in TCPDF before 6.8.0
CVE-2024-56527
TC
tcpdf
tecnick
7.5
1%
Dec 27An issue was discovered in TCPDF before 6.8.0
CVE-2024-56522
TC
tcpdf
tecnick
7.5
1%
Dec 27An issue was discovered in TCPDF before 6.8.0
CVE-2024-56521
TC
tcpdf
tecnick
9.8
1%
Dec 27An issue was discovered in TCPDF before 6.8.0
CVE-2024-56520
TC
tcpdf
tecnick
7.3
1%
Dec 27An issue was discovered in tc-lib-pdf-font before 2.6.4, as used in TCPDF before 6.8.0 and other products
CVE-2023-6554
TC
Tcexam
Tecnick
6.5
1%
Jan 11Missing authorisation in TCExam
CVE-2021-20116
TC
Tcexam
Tecnick
6.1
1%
Aug 5A reflected cross-site scripting vulnerability exists in TCExam <= 14.8.4
CVE-2021-20115
TC
Tcexam
Tecnick
6.1
1%
Aug 5A reflected cross-site scripting vulnerability exists in TCExam <= 14.8.3
CVE-2021-20114
TC
Tcexam
Tecnick
7.5
6%
Jul 30When installed following the default/recommended settings, TCExam <= 14.8.1 allowed unauthenticated users to access the /cache/backup/ directory, which included sensitive database…
CVE-2021-20113
TC
Tcexam
Tecnick
5.3
1%
Jul 30An exposure of sensitive information vulnerability exists in TCExam <= 14.8.1
CVE-2021-20112
TC
Tcexam
Tecnick
5.4
1%
Jul 30A stored cross-site scripting vulnerability exists in TCExam <= 14.8.1
CVE-2021-20111
TC
Tcexam
Tecnick
5.4
1%
Jul 30A stored cross-site scripting vulnerability exists in TCExam <= 14.8.1
CVE-2020-5751
TC
Tcexam
Tecnick
5.4
1%
May 7Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks by creating a crafted operator
CVE-2020-5750
TC
Tcexam
Tecnick
6.1
1%
May 7Insufficient output sanitization in TCExam 14.2.2 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting (XSS) attacks via the self-registration…
CVE-2020-5749
TC
Tcexam
Tecnick
5.4
1%
May 7Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks by creating a crafted group
CVE-2020-5748
TC
Tcexam
Tecnick
6.1
1%
May 7Insufficient output sanitization in TCExam 14.2.2 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting (XSS) attacks via the self-registration…
CVE-2020-5747
TC
Tcexam
Tecnick
5.4
1%
May 7Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks by creating a crafted test
CVE-2020-5746
TC
Tcexam
Tecnick
5.4
1%
May 7Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks by creating a crafted test
CVE-2020-5745
TC
Tcexam
Tecnick
7.4
1%
May 7Cross-site request forgery in TCExam 14.2.2 allows a remote attacker to perform sensitive application actions by tricking legitimate users into clicking a crafted link
CVE-2020-5744
TC
Tcexam
Tecnick
4.9
1%
May 7Relative Path Traversal in TCExam 14.2.2 allows a remote, authenticated attacker to read the contents of arbitrary files on disk
CVE-2020-5743
TC
Tcexam
Tecnick
4.3
1%
May 7Improper Control of Resource Identifiers in TCExam 14.2.2 allows a remote, authenticated attacker to access test metadata for which they don't have permission
CVE-2018-17057
TC
Tcpdf
Tecnick
9.8
26%
Sep 14An issue was discovered in TCPDF before 6.2.22
CVE-2018-13422
TC
Tcexam
Tecnick
6.1
1%
Jul 7TCExam before 14.1.2 has XSS via an ff_ or xl_ field
CVE-2012-4602
TC
Tcexam
Tecnick
–
2%
Nov 23Multiple cross-site scripting (XSS) vulnerabilities in admin/code/tce_select_users_popup.php in Nicola Asuni TCExam before 11.3.009 allow remote attackers to inject arbitrary web…
CVE-2012-4601
TC
Tcexam
Tecnick
–
2%
Nov 23Multiple SQL injection vulnerabilities in Nicola Asuni TCExam before 11.3.009 allow remote authenticated users with level 5 or greater permissions to execute arbitrary SQL…
CVE-2012-4238
TC
Tcexam
Tecnick
–
1%
Aug 20Cross-site scripting (XSS) vulnerability in admin/code/tce_edit_answer.php in TCExam before 11.3.008 allows remote authenticated users with level 5 or greater permissions to…
CVE-2012-4237
TC
Tcexam
Tecnick
–
2%
Aug 20Multiple SQL injection vulnerabilities in TCExam before 11.3.008 allow remote authenticated users with level 5 or greater permissions to execute arbitrary SQL commands via the…
CVE-2011-3806
TC
Tcexam
Tecnick
–
1%
Sep 24TCExam 11.1.015 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as…
CVE-2010-2153
TC
Tcexam
Tecnick
–
7%
Jun 3Unrestricted file upload vulnerability in admin/code/tce_functions_tcecode_editor.php in TCExam 10.1.006 and 10.1.007 allows remote attackers to execute arbitrary code by…
CVE-2009-4747
AI
Aiocp
Tecnick
–
3%
Mar 26PHP remote file inclusion vulnerability in public/code/cp_html2xhtmlbasic.php in All In One Control Panel (AIOCP) 1.4.001 allows remote attackers to execute arbitrary PHP code via…
CVE-2009-3220
AI
Aiocp
Tecnick
–
2%
Sep 16PHP remote file inclusion vulnerability in cp_html2txt.php in All In One Control Panel (AIOCP) 1.4.001 allows remote attackers to execute arbitrary PHP code via a URL in the page…