Known vulnerabilities in Vanilla

Vendor: Lussumo
Software: Vanilla
Software CPE: cpe:2.3:a:lussumo:vanilla:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 14
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Vanilla Vanilla is affected by 14 known vulnerabilities: 1 high, 6 medium, 7 low Critical High Medium Low

Vulnerabilities (14)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU34870 - Improper input validation
CVE-2011-3614
CWE-20 High
No
No
2.0.17.9 22.01.2020 SB2020012247
#VU30434 - Exposure of sensitive information to an unauthorized actor
CVE-2011-3613
CWE-200 Medium
No
No
2.0.17.9 22.01.2020 SB2020012234
#VU31142 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2019-9889
CWE-22 Low
No
No
2.6.4 21.03.2019 SB2019032121
#VU16045 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2018-16410
CWE-89 Low
No
No
2.6.1 24.11.2018 SB2018090313
#VU16044 - Improper Control of Generation of Code ('Code Injection')
CVE-2018-18903
CWE-94 Low
No
No
2.6.4 24.11.2018 SB2018110304
#VU16043 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-17571
CWE-79 Low
No
No
2.6.1 24.11.2018 SB2018092809
#VU16042 - Deserialization of Untrusted Data
CVE-2018-19499
CWE-502 Low
No
No
2.5.5, 2.6.2 24.11.2018 SB2018112317
#VU42847 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2013-3527
CWE-89 Medium
Available
No
- 11.05.2013 SB2013051102
#VU42848 - Improper input validation
CVE-2013-3528
CWE-20 Medium
Available
No
- 11.05.2013 SB2013051102
#VU44664 - Exposure of sensitive information to an unauthorized actor
CVE-2011-3812
CWE-200 Medium
No
No
- 24.09.2011 SB2011092406
#VU45361 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2011-0526
CWE-79 Low
No
No
- 08.02.2011 SB2011020801
#VU45362 - Improper input validation
CVE-2011-0908
CWE-20 Medium
No
No
- 08.02.2011 SB2011020802
#VU45363 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2011-0909
CWE-79 Low
No
No
- 08.02.2011 SB2011020802
#VU45364 - Improper input validation
CVE-2011-0910
CWE-20 Medium
No
No
- 08.02.2011 SB2011020802