PatchTheCVEtechvill vulnerabilities
Recent CVEs affecting techvill products. 3 tracked.
techvill has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-09-14. Highest priority: CVE-2022-37140 (score 52/100).
- CVE-2022-37140 HIGH 8.0 DOWNGRADE PayMoney 3.3 is vulnerable to Client Side Remote Code Execution (RCE)
- CVE-2022-37137 MEDIUM 5.4 DOWNGRADE PayMoney 3.3 is vulnerable to Stored Cross-Site Scripting (XSS) during replying the ticket
- CVE-2022-34991 MEDIUM 5.4 DOWNGRADE Paymoney v3.3 was discovered to contain multiple reflected cross-site scripting (XSS) vulnerabilities via the
FAQ
How do I fix techvill vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is techvill being exploited right now?
None of the tracked techvill CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which techvill CVE should I patch first?
CVE-2022-37140 currently ranks highest (52/100): PayMoney 3.3 is vulnerable to Client Side Remote Code Execution (RCE).