https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-24255.htmlhttps://patchthecve.com/cve/CVE-2022-24255.htmlThu, 09 Jul 2026 01:17:17 +0000HIGH 8.8: Extensis Portfolio v4.0 was discovered to contain hardcoded credentials which allows attackers to gain administrator privileges.https://patchthecve.com/cve/CVE-2022-24254.htmlhttps://patchthecve.com/cve/CVE-2022-24254.htmlThu, 09 Jul 2026 01:17:17 +0000HIGH 8.8: An unrestricted file upload vulnerability in the Backup/Restore Archive component of Extensis Portfolio v4.0 allows remote attackers to execute arbitrary code via a crafted ZIP file.https://patchthecve.com/cve/CVE-2022-24253.htmlhttps://patchthecve.com/cve/CVE-2022-24253.htmlThu, 09 Jul 2026 01:17:17 +0000HIGH 8.8: Extensis Portfolio v4.0 was discovered to contain an authenticated unrestricted file upload vulnerability via the component AdminFileTransferServlet.https://patchthecve.com/cve/CVE-2022-24252.htmlhttps://patchthecve.com/cve/CVE-2022-24252.htmlThu, 09 Jul 2026 01:17:16 +0000HIGH 8.8: An unrestricted file upload vulnerability in the FileTransferServlet component of Extensis Portfolio v4.0 allows remote attackers to execute arbitrary code via a crafted file.https://patchthecve.com/cve/CVE-2022-24251.htmlhttps://patchthecve.com/cve/CVE-2022-24251.htmlThu, 09 Jul 2026 01:17:16 +0000HIGH 8.8: Extensis Portfolio v4.0 was discovered to contain an authenticated unrestricted file upload vulnerability via the Catalog Asset Upload function.https://patchthecve.com/cve/CVE-2013-3946.htmlhttps://patchthecve.com/cve/CVE-2013-3946.htmlTue, 16 Jun 2026 23:56:04 +0000HIGH 7.8: Heap-based buffer overflow in the MrSID plugin (MrSID.dll) before 4.37 for IrfanView allows remote attackers to execute arbitrary code via a levels header.https://patchthecve.com/cve/CVE-2013-3945.htmlhttps://patchthecve.com/cve/CVE-2013-3945.htmlTue, 16 Jun 2026 23:56:03 +0000HIGH 7.8: The MrSID plugin (MrSID.dll) before 4.37 for IrfanView allows remote attackers to execute arbitrary code via a nband tag.https://patchthecve.com/cve/CVE-2013-3944.htmlhttps://patchthecve.com/cve/CVE-2013-3944.htmlTue, 16 Jun 2026 23:56:03 +0000HIGH 7.8: Stack-based buffer overflow in the MrSID plugin (MrSID.dll) before 4.37 for IrfanView allows remote attackers to execute arbitrary code via an IMAGE tag.https://patchthecve.com/cve/CVE-2017-18006.htmlhttps://patchthecve.com/cve/CVE-2017-18006.htmlWed, 17 Jun 2026 01:12:01 +0000MEDIUM 6.1: netpub/server.np in Extensis Portfolio NetPublish has XSS in the quickfind parameter, aka Open Bug Bounty ID OBB-290447.