Filtered by vendor Opswat Subscriptions
Total 7 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-36659 1 Opswat 1 Metadefender Kiosk 2024-11-21 9.8 Critical
An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996. Long inputs were not properly processed, which allows remote attackers to cause a denial of service (loss of communication).
CVE-2023-36658 1 Opswat 2 Media Validation Agent, Metadefender Kiosk 2024-11-21 7.8 High
An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996. It has an unquoted service path that can be abused locally.
CVE-2023-36657 1 Opswat 1 Metadefender Kiosk 2024-11-21 9.8 Critical
An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996. Built-in features of Windows (desktop shortcuts, narrator) can be abused for privilege escalation.
CVE-2022-40778 1 Opswat 1 Metadefender 2024-11-21 5.4 Medium
A stored Cross-Site Scripting (XSS) vulnerability in OPSWAT MetaDefender ICAP Server before 4.13.0 allows attackers to execute arbitrary JavaScript or HTML because of the blocked page response.
CVE-2022-32273 1 Opswat 1 Metadefender 2024-11-21 4.3 Medium
As a result of an observable discrepancy in returned messages, OPSWAT MetaDefender Core (MDCore) before 5.1.2 could allow an authenticated user to enumerate filenames on the server.
CVE-2022-32272 1 Opswat 1 Metadefender 2024-11-21 9.8 Critical
OPSWAT MetaDefender Core before 5.1.2, MetaDefender ICAP before 4.12.1, and MetaDefender Email Gateway Security before 5.6.1 have incorrect access control, resulting in privilege escalation.
CVE-2018-16275 1 Opswat 1 Metadefender 2024-11-21 N/A
OPSWAT MetaDefender before v4.11.2 allows CSV injection.