Approved changes feed: RSS · Atom

cpe:2.3:a:kramerav:viaware:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorKramerav (12a6b1ad-f99a-58a1-9907-ade7e2de6a4e)
ProductViaware (39b4d348-2566-568b-b43d-ba043efa4eb6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-36356 vulnerable 2026-06-08 05:32:52.078354 Details available
KRAMER VIAware through August 2021 allows remote attackers to execute arbitrary code because ajaxPages/writeBrowseFilePathAjax.php accepts arbitrary executable pathnames (even though browseSystemFiles.php is no longer reachable via the GUI). NOTE: this issue exists because of an incomplete fix for CVE-2019-17124.
Published: 2021-08-31T03:45:11.000Z
Updated: 2024-08-04T00:54:51.420Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-35064 vulnerable 2026-06-08 05:32:17.607199 Details available
KramerAV VIAWare, all tested versions, allow privilege escalation through misconfiguration of sudo. Sudoers permits running of multiple dangerous commands, including unzip, systemctl and dpkg.
Published: 2021-07-12T11:09:58.000Z
Updated: 2024-08-04T00:33:50.985Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.