← Back

Epicentro

epicentro

Vendor: Adbglobal • 3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Adbglobal
1Epicentro
Nov 21, 2024
Oct 9, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Code injection in the /ui/login form Language parameter in Epicentro E_7.3.2+ allows attackers to execute JavaScript code by making a user issue a manipulated POST request.
1Adbglobal
1Epicentro
Nov 21, 2024
Oct 9, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Buffer Overflow in httpd in EpiCentro E_7.3.2+ allows attackers to cause a denial of service attack remotely via a specially crafted GET request with a leading "/" in the URL.
1Adbglobal
1Epicentro
Nov 21, 2024
Oct 9, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Buffer Overflow in httpd in EpiCentro E_7.3.2+ allows attackers to execute code remotely via a specially crafted GET request without a leading "/" and without authentication.