PatchTheCVEvdgsecurity vulnerabilities
Recent CVEs affecting vdgsecurity products. 7 tracked.
vdgsecurity has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2015-01-08. Highest priority: CVE-2014-9451 (score 54/100).
- CVE-2014-9579 MEDIUM 5.0 DOWNGRADE VDG Security SENSE (formerly DIVA) 2.3.13 stores administrator credentials in cleartext, which allows attacker
- CVE-2014-9578 MEDIUM 5.0 DOWNGRADE VDG Security SENSE (formerly DIVA) 2.3.13 performs authentication with a password hash instead of a password,
- CVE-2014-9577 MEDIUM 4.0 DOWNGRADE VDG Security SENSE (formerly DIVA) 2.3.13 sends the user database when a user logs in, which allows remote aut
- CVE-2014-9576 MEDIUM 5.0 DOWNGRADE VDG Security SENSE (formerly DIVA) 2.3.13 has a hardcoded password of (1) ArpaRomaWi for the root Postgres acc
- CVE-2014-9575 MEDIUM 6.4 UPGRADE VDG Security SENSE (formerly DIVA) before 2.3.15 allows remote attackers to bypass authentication, and consequ
- CVE-2014-9452 MEDIUM 5.0 DOWNGRADE Directory traversal vulnerability in VDG Security SENSE (formerly DIVA) 2.3.13 allows remote attackers to read
- CVE-2014-9451 HIGH 7.5 DOWNGRADE Multiple stack-based buffer overflows in the DIVA web service API (/webservice) in VDG Security SENSE (formerl
FAQ
How do I fix vdgsecurity vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is vdgsecurity being exploited right now?
None of the tracked vdgsecurity CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which vdgsecurity CVE should I patch first?
CVE-2014-9451 currently ranks highest (54/100): Multiple stack-based buffer overflows in the DIVA web service API (/webservice) in VDG Security SENSE (formerl.