PatchTheCVEwebglimpse vulnerabilities and fixes
Recent CVEs affecting webglimpse, with upgrade or downgrade steps. 2 tracked.
webglimpse has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2012-03-20. Highest priority: CVE-2012-1795 (score 49/100).
- CVE-2012-1795 HIGH 7.5 UPGRADE webglimpse.cgi in Webglimpse before 2.20.0 allows remote attackers to execute arbitrary commands via shell met
- CVE-2005-4328 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in webglimpse.cgi in Webglimpse 2.14.1 and earlier allows remote atta
FAQ
How do I fix webglimpse vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is webglimpse being exploited right now?
None of the tracked webglimpse CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which webglimpse CVE should I patch first?
CVE-2012-1795 currently ranks highest (49/100): webglimpse.cgi in Webglimpse before 2.20.0 allows remote attackers to execute arbitrary commands via shell met.