Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

unspecified Security Vulnerabilities | CyStack CVE Database

CVE	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2020-36623`Pengu index.js runApp cross-site request forgery	Exploitation statusNot known exploited	FixNot confirmed	Affected productPengu	Published12/21/2022	SeverityMedium
`CVE-2022-4638`collective.contact.widget widgets.py title cross site scripting	Exploitation statusNot known exploited	FixNot confirmed	Affected productcollective.contact.widget	Published12/21/2022	SeverityLow
`CVE-2022-4641`pig-vector LogisticRegression.java LogisticRegression temp file	Exploitation statusNot known exploited	FixNot confirmed	Affected productpig-vector	Published12/21/2022	SeverityLow
`CVE-2021-4270`Imprint CMS ViewHelpers.cs SearchForm cross site scripting	Exploitation statusNot known exploited	FixNot confirmed	Affected productImprint CMS	Published12/21/2022	SeverityLow
`CVE-2021-4272`studygolang topics.js cross site scripting	Exploitation statusNot known exploited	FixNot confirmed	Affected productstudygolang	Published12/21/2022	SeverityLow
`CVE-2021-4268`phpRedisAdmin cross-site request forgery	Exploitation statusNot known exploited	FixNot confirmed	Affected productphpRedisAdmin	Published12/21/2022	SeverityMedium
`CVE-2021-4273`studygolang search.go Search cross site scripting	Exploitation statusNot known exploited	FixNot confirmed	Affected productstudygolang	Published12/21/2022	SeverityMedium
`CVE-2022-4639`sslh Packet Dumping probe.c hexdump format string	Exploitation statusNot known exploited	FixNot confirmed	Affected productsslh	Published12/21/2022	SeverityMedium
`CVE-2021-4267`tad_discuss cross site scripting	Exploitation statusNot known exploited	FixNot confirmed	Affected producttad_discuss	Published12/21/2022	SeverityLow
`CVE-2021-4269`SimpleRisk common.js checkAndSetValidation cross site scripting	Exploitation statusNot known exploited	FixNot confirmed	Affected productSimpleRisk	Published12/21/2022	SeverityLow
`CVE-2021-4265`siwapp-ror cross site scripting	Exploitation statusNot known exploited	FixNot confirmed	Affected productsiwapp-ror	Published12/21/2022	SeverityLow
`CVE-2022-4642`tatoeba2 Profile Name cross site scripting	Exploitation statusPublic exploit	FixNot confirmed	Affected producttatoeba2	Published12/21/2022	SeverityLow
`CVE-2022-4631`WP-Ban ban-options.php cross site scripting	Exploitation statusNot known exploited	FixNot confirmed	Affected productWP-Ban	Published12/21/2022	SeverityLow
`CVE-2021-4261`pacman-canvas db-handler.php addHighscore sql injection	Exploitation statusNot known exploited	FixNot confirmed	Affected productpacman-canvas	Published12/19/2022	SeverityMedium
`CVE-2020-36619`multimon-ng demod_flex.c add_ch format string	Exploitation statusNot known exploited	FixNot confirmed	Affected productmultimon-ng	Published12/19/2022	SeverityMedium
`CVE-2021-4260`oils-js Web.js redirect	Exploitation statusNot known exploited	FixNot confirmed	Affected productoils-js	Published12/19/2022	SeverityMedium
`CVE-2021-4258`whohas Package Information cleartext transmission	Exploitation statusNot known exploited	FixNot confirmed	Affected productwhohas	Published12/19/2022	SeverityLow
`CVE-2021-4262`laravel-jqgrid EloquentRepositoryAbstract.php getRows sql injection	Exploitation statusNot known exploited	FixNot confirmed	Affected productlaravel-jqgrid	Published12/19/2022	SeverityMedium
`CVE-2022-4595`django-openipam exposed_hosts.html cross site scripting	Exploitation statusNot known exploited	FixNot confirmed	Affected productdjango-openipam	Published12/18/2022	SeverityLow
`CVE-2021-4249`xml-conduit DOCTYPE Entity Expansion Parse.hs infinite loop	Exploitation statusNot known exploited	FixNot confirmed	Affected productxml-conduit	Published12/18/2022	SeverityMedium
`CVE-2021-4252`WP-Ban ban-options.php toggle_checkbox cross site scripting	Exploitation statusNot known exploited	FixNot confirmed	Affected productWP-Ban	Published12/18/2022	SeverityLow
`CVE-2021-4251`as include.cdn.php getFullURL cross site scripting	Exploitation statusNot known exploited	FixNot confirmed	Affected productas	Published12/18/2022	SeverityLow
`CVE-2022-4596`Shoplazza Add Blog Post cross site scripting	Exploitation statusPublic exploit	FixNot confirmed	Affected productShoplazza	Published12/18/2022	SeverityLow
`CVE-2022-4603`ppp pppdump pppdump.c dumpppp array index	Exploitation statusNot confirmed	FixNot confirmed	Affected productppp	Published12/18/2022	SeverityMedium
`CVE-2022-4593`retra-system cross site scripting	Exploitation statusNot known exploited	FixNot confirmed	Affected productretra-system	Published12/18/2022	SeverityLow
`CVE-2022-4583`jLEMS JUtil.java unpackJar path traversal	Exploitation statusPublic exploit	FixNot confirmed	Affected productjLEMS	Published12/17/2022	SeverityMedium
`CVE-2022-4572`UBI Reader UBIFS File output.py ubireader_extract_files path traversal	Exploitation statusNot known exploited	FixNot confirmed	Affected productUBI Reader	Published12/17/2022	SeverityMedium
`CVE-2022-4582`starter-public-edition-4 cross site scripting	Exploitation statusNot known exploited	FixNot confirmed	Affected productstarter-public-edition-4	Published12/17/2022	SeverityLow
`CVE-2022-4561`SemanticDrilldown Extension GET Parameter SDBrowseDataPage.php printFilterLine cross site scripting	Exploitation statusNot known exploited	FixNot confirmed	Affected productSemanticDrilldown Extension	Published12/16/2022	SeverityLow
`CVE-2022-4522`CalendarXP cross site scripting	Exploitation statusNot known exploited	FixNot confirmed	Affected productCalendarXP	Published12/15/2022	SeverityLow
`CVE-2022-4526`django-photologue Default Template photo_detail.html cross site scripting	Exploitation statusNot known exploited	FixNot confirmed	Affected productdjango-photologue	Published12/15/2022	SeverityLow
`CVE-2022-4523`vexim2 cross site scripting	Exploitation statusNot confirmed	FixNot confirmed	Affected productvexim2	Published12/15/2022	SeverityLow
`CVE-2022-4493`scifio ZIP File DefaultSampleFilesService.java downloadAndUnpackResource path traversal	Exploitation statusNot known exploited	FixNot confirmed	Affected productscifio	Published12/14/2022	SeverityMedium
`CVE-2019-25078`pacparser pacparser.c pacparser_find_proxy buffer overflow	Exploitation statusNot confirmed	FixNot confirmed	Affected productpacparser	Published12/13/2022	SeverityMedium
`CVE-2022-4456`falling-fruit cross site scripting	Exploitation statusNot known exploited	FixNot confirmed	Affected productfalling-fruit	Published12/13/2022	SeverityLow
`CVE-2021-4244`yikes-inc-easy-mailchimp-extender Plugin add_field_to_form.php cross site scripting	Exploitation statusNot known exploited	FixNot confirmed	Affected productyikes-inc-easy-mailchimp-extender Plugin	Published12/12/2022	SeverityLow
`CVE-2022-4377`S-CMS Contact Information Page cross site scripting	Exploitation statusNot known exploited	FixNot confirmed	Affected productS-CMS	Published12/09/2022	SeverityLow
`CVE-2022-4322`maku-boot Scheduled Task AbstractScheduleJob.java doExecute injection	Exploitation statusPublic exploit	FixNot confirmed	Affected productmaku-boot	Published12/07/2022	SeverityMedium
`CVE-2022-4300`FastCMS Template edit injection	Exploitation statusPublic exploit	FixNot confirmed	Affected productFastCMS	Published12/06/2022	SeverityMedium
`CVE-2022-4281`Facepay camera.php authorization	Exploitation statusNot known exploited	FixNot confirmed	Affected productFacepay	Published12/05/2022	SeverityMedium
`CVE-2022-4282`SpringBootCMS Template Management injection	Exploitation statusPublic exploit	FixNot confirmed	Affected productSpringBootCMS	Published12/05/2022	SeverityMedium
`CVE-2022-4274`House Rental System view-property.php sql injection	Exploitation statusPublic exploit	FixNot confirmed	Affected productHouse Rental System	Published12/03/2022	SeverityMedium
`CVE-2022-4275`House Rental System POST Request search-property.php sql injection	Exploitation statusPublic exploit	FixNot confirmed	Affected productHouse Rental System	Published12/03/2022	SeverityMedium
`CVE-2022-4276`House Rental System POST Request tenant-engine.php unrestricted upload	Exploitation statusPublic exploit	FixNot confirmed	Affected productHouse Rental System	Published12/03/2022	SeverityMedium
`CVE-2022-4249`Movie Ticket Booking System POST Request cross site scripting	Exploitation statusPublic exploit	FixNot confirmed	Affected productMovie Ticket Booking System	Published12/01/2022	SeverityLow
`CVE-2022-4247`Movie Ticket Booking System booking.php sql injection	Exploitation statusPublic exploit	FixNot confirmed	Affected productMovie Ticket Booking System	Published12/01/2022	SeverityMedium
`CVE-2022-4250`Movie Ticket Booking System booking.php cross site scripting	Exploitation statusPublic exploit	FixNot confirmed	Affected productMovie Ticket Booking System	Published12/01/2022	SeverityLow
`CVE-2022-4248`Movie Ticket Booking System editBooking.php sql injection	Exploitation statusPublic exploit	FixNot confirmed	Affected productMovie Ticket Booking System	Published12/01/2022	SeverityMedium
`CVE-2022-4251`Movie Ticket Booking System editBooking.php cross site scripting	Exploitation statusPublic exploit	FixNot confirmed	Affected productMovie Ticket Booking System	Published12/01/2022	SeverityLow
`CVE-2022-4202`GPAC lsr_dec.c lsr_translate_coords integer overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productGPAC	Published11/29/2022	SeverityMedium
`CVE-2022-4087`iPXE TLS tls.c tls_new_ciphertext information exposure	Exploitation statusNot known exploited	FixNot confirmed	Affected productiPXE	Published11/21/2022	SeverityLow
`CVE-2022-4053`Student Attendance Management System createClass.php cross site scripting	Exploitation statusPublic exploit	FixNot confirmed	Affected productStudent Attendance Management System	Published11/17/2022	SeverityLow
`CVE-2022-4051`Hostel Searching Project view-property.php sql injection	Exploitation statusPublic exploit	FixNot confirmed	Affected productHostel Searching Project	Published11/17/2022	SeverityMedium
`CVE-2022-4052`Student Attendance Management System createClass.php sql injection	Exploitation statusPublic exploit	FixNot confirmed	Affected productStudent Attendance Management System	Published11/17/2022	SeverityMedium
`CVE-2022-4013`Hospital Management Center appointment.php cross-site request forgery	Exploitation statusPublic exploit	FixNot confirmed	Affected productHospital Management Center	Published11/16/2022	SeverityMedium
`CVE-2022-4015`Sports Club Management System make_payments.php sql injection	Exploitation statusNot confirmed	FixNot confirmed	Affected productSports Club Management System	Published11/16/2022	SeverityMedium
`CVE-2022-4011`Simple History Plugin Header neutralization for logs	Exploitation statusPublic exploit	FixNot confirmed	Affected productSimple History Plugin	Published11/16/2022	SeverityMedium
`CVE-2022-4012`Hospital Management Center patient-info.php sql injection	Exploitation statusPublic exploit	FixNot confirmed	Affected productHospital Management Center	Published11/16/2022	SeverityMedium
`CVE-2022-4014`FeehiCMS Post My Comment Tab cross-site request forgery	Exploitation statusNot confirmed	FixNot confirmed	Affected productFeehiCMS	Published11/16/2022	SeverityMedium
`CVE-2021-4241`phpservermon User.php setUserLoggedIn predictable algorithm in random number generator	Exploitation statusPublic exploit	FixNot confirmed	Affected productphpservermon	Published11/15/2022	SeverityLow
`CVE-2021-4240`phpservermon User.php generatePasswordResetToken predictable algorithm in random number generator	Exploitation statusPublic exploit	FixNot confirmed	Affected productphpservermon	Published11/15/2022	SeverityLow
`CVE-2022-3988`Frappe Search navbar_search.html cross site scripting	Exploitation statusNot known exploited	FixNot confirmed	Affected productFrappe	Published11/14/2022	SeverityLow
`CVE-2022-3965`ffmpeg QuickTime Graphics Video Encoder smcenc.c smc_encode_stream out-of-bounds	Exploitation statusNot confirmed	FixNot confirmed	Affected productFFmpeg	Published11/13/2022	SeverityMedium
`CVE-2022-3968`emlog article_save.php cross site scripting	Exploitation statusNot known exploited	FixNot confirmed	Affected productemlog	Published11/13/2022	SeverityLow
`CVE-2022-3964`ffmpeg QuickTime RPZA Video Encoder rpzaenc.c out-of-bounds	Exploitation statusNot confirmed	FixNot confirmed	Affected productFFmpeg	Published11/13/2022	SeverityMedium
`CVE-2022-3967`Vesta Control Panel sed main.sh argument injection	Exploitation statusNot known exploited	FixNot confirmed	Affected productVesta Control Panel	Published11/13/2022	SeverityMedium
`CVE-2022-3978`NodeBB abort cross-site request forgery	Exploitation statusPublic exploit	FixNot confirmed	Affected productNodeBB	Published11/13/2022	SeverityMedium
`CVE-2022-3971`matrix-appservice-irc PgDataStore.ts sql injection	Exploitation statusNot known exploited	FixNot confirmed	Affected productmatrix-appservice-irc	Published11/13/2022	SeverityMedium
`CVE-2022-3966`Ultimate Member Plugin Template class-shortcodes.php load_template pathname traversal	Exploitation statusNot known exploited	FixNot confirmed	Affected productUltimate Member Plugin	Published11/13/2022	SeverityMedium
`CVE-2022-3970`LibTIFF tif_getimage.c TIFFReadRGBATileExt integer overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productLibTIFF	Published11/13/2022	SeverityMedium
`CVE-2022-3969`OpenKM FileUtils.java getFileExtension temp file	Exploitation statusPublic exploit	FixNot confirmed	Affected productOpenKM	Published11/13/2022	SeverityLow
`CVE-2022-3963`gnuboard5 FAQ Key ID faq.php cross site scripting	Exploitation statusNot known exploited	FixNot confirmed	Affected productgnuboard5	Published11/12/2022	SeverityLow
`CVE-2022-3959`drogon Session Hash small space of random values	Exploitation statusNot known exploited	FixNot confirmed	Affected productdrogon	Published11/11/2022	SeverityLow
`CVE-2022-3957`GPAC SVG Parser svg_attributes.c svg_parse_preserveaspectratio memory leak	Exploitation statusNot known exploited	FixNot confirmed	Affected productGPAC	Published11/11/2022	SeverityMedium
`CVE-2022-3941`Activity Log Plugin HTTP Header neutralization for logs	Exploitation statusNot confirmed	FixNot confirmed	Affected productActivity Log Plugin	Published11/11/2022	SeverityMedium
`CVE-2022-3827`centreon Contact Groups Form formContactGroup.php sql injection	Exploitation statusNot known exploited	FixNot confirmed	Affected productcentreon	Published11/02/2022	SeverityMedium
`CVE-2022-3845`phpipam Import Preview import-load-data.php cross site scripting	Exploitation statusNot known exploited	FixNot confirmed	Affected productphpipam	Published11/02/2022	SeverityLow
`CVE-2022-3783`node-red-dashboard ui_text Format ui-component-ctrl.js cross site scripting	Exploitation statusPublic exploit	FixNot confirmed	Affected productnode-red-dashboard	Published10/31/2022	SeverityLow
`CVE-2022-3734`Redis on Windows dbghelp.dll uncontrolled search path	Exploitation statusNot confirmed	FixNot confirmed	Affected productRedis	Published10/28/2022	SeverityMedium
`CVE-2022-3704`Ruby on Rails _table.html.erb cross site scripting	Exploitation statusPublic exploit	FixNot confirmed	Affected productRuby on Rails	Published10/26/2022	SeverityLow
`CVE-2022-3705`vim autocmd quickfix.c qf_update_buffer use after free	Exploitation statusNot known exploited	FixNot confirmed	Affected productvim	Published10/26/2022	SeverityMedium
`CVE-2022-3620`Exim DMARC dmarc.c dmarc_dns_lookup use after free	Exploitation statusNot known exploited	FixNot confirmed	Affected productExim	Published10/20/2022	SeverityMedium
`CVE-2022-3559`Exim Regex use after free	Exploitation statusNot known exploited	FixNot confirmed	Affected productExim	Published10/17/2022	SeverityMedium
`CVE-2022-3502`Human Resource Management System Leave cross site scripting	Exploitation statusNot confirmed	FixNot confirmed	Affected productHuman Resource Management System	Published10/14/2022	SeverityLow
`CVE-2022-3464`puppyCMS settings.php cross site scripting	Exploitation statusNot known exploited	FixNot confirmed	Affected productpuppyCMS	Published10/12/2022	SeverityMedium
`CVE-2022-3354`Open5GS UDP Packet ogs-tlv-msg.c denial of service	Exploitation statusPublic exploit	FixNot confirmed	Affected productOpen5GS	Published09/28/2022	SeverityLow
`CVE-2022-3299`Open5GS AMF client.c denial of service	Exploitation statusPublic exploit	FixNot confirmed	Affected productOpen5GS	Published09/26/2022	SeverityMedium
`CVE-2022-2886`Laravel deserialization	Exploitation statusPublic exploit	FixNot confirmed	Affected productlaravel	Published08/19/2022	SeverityMedium
`CVE-2022-2870`laravel deserialization	Exploitation statusPublic exploit	FixNot confirmed	Affected productlaravel	Published08/17/2022	SeverityMedium
`CVE-2022-2726`SEMCMS Ant_Check.php sql injection	Exploitation statusNot known exploited	FixNot confirmed	Affected productSEMCMS	Published08/09/2022	SeverityMedium
`CVE-2022-2664`Private Cloud Management Platform POST Request global_config_query improper authentication	Exploitation statusNot known exploited	FixNot confirmed	Affected productPrivate Cloud Management Platform	Published08/05/2022	SeverityHigh
`CVE-2022-2647`jeecg-boot unrestricted upload	Exploitation statusNot known exploited	FixNot confirmed	Affected productjeecg-boot	Published08/04/2022	SeverityHigh
`CVE-2016-15004`InfiniteWP Client Plugin injection	Exploitation statusPublic exploit	FixNot confirmed	Affected productInfiniteWP Client Plugin	Published07/23/2022	SeverityHigh
`CVE-2017-20129`LogoStore search.php sql injection	Exploitation statusNot known exploited	FixNot confirmed	Affected productLogoStore	Published07/14/2022	SeverityMedium
`CVE-2017-20128`KB Messages PHP Script sql injection	Exploitation statusPublic exploit	FixNot confirmed	Affected productKB Messages PHP Script	Published07/13/2022	SeverityHigh
`CVE-2017-20127`KB Login Authentication Script sql injection	Exploitation statusPublic exploit	FixNot confirmed	Affected productKB Login Authentication Script	Published07/13/2022	SeverityHigh
`CVE-2017-20126`KB Affiliate Referral Script index.php sql injection	Exploitation statusNot known exploited	FixNot confirmed	Affected productKB Affiliate Referral Script	Published07/13/2022	SeverityHigh
`CVE-2022-2263`Online Hotel Booking System Room edit_room_cat.php sql injection	Exploitation statusPublic exploit	FixNot confirmed	Affected productOnline Hotel Booking System	Published07/12/2022	SeverityMedium
`CVE-2022-2262`Online Hotel Booking System Room edit_all_room.php sql injection	Exploitation statusPublic exploit	FixNot confirmed	Affected productOnline Hotel Booking System	Published07/12/2022	SeverityMedium
`CVE-2017-20125`Online Hotel Booking System Pro roomtype-details.php sql injection	Exploitation statusPublic exploit	FixNot confirmed	Affected productOnline Hotel Booking System Pro	Published06/30/2022	SeverityMedium