CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Pexip Infinity before 32 allows Webapp1 XSS via preconfigured links. |
| 25/12/2023 |
| CVE-2023-31455 | HIGH7.5 | Pexip Infinity before 31.2 has Improper Input Validation for RTCP, allowing remote attackers to trigger an abort. | 25/12/2023 |
| CVE-2023-31289 | HIGH7.5 | Pexip Infinity before 31.2 has Improper Input Validation for signalling, allowing remote attackers to trigger an abort. | 25/12/2023 |
| CVE-2022-32263 | HIGH7.5 | Pexip Infinity before 28.1 allows remote attackers to trigger a software abort via G.719. | 17/07/2022 |
| CVE-2022-29286 | HIGH7.5 | Pexip Infinity 27 before 28.0 allows remote attackers to trigger excessive resource consumption and termination because of registrar resource mishandling. | 17/07/2022 |
| CVE-2022-27937 | HIGH7.5 | Pexip Infinity before 27.3 allows remote attackers to trigger excessive resource consumption via H.264. | 17/07/2022 |
| CVE-2022-27936 | HIGH7.5 | Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via H.323. | 17/07/2022 |
| CVE-2022-27935 | HIGH7.5 | Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via Epic Telehealth. | 17/07/2022 |
| CVE-2022-27934 | HIGH7.5 | Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via HTTP. | 17/07/2022 |
| CVE-2022-27933 | HIGH8.2 | Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via One Touch Join. | 17/07/2022 |
| CVE-2022-27932 | HIGH7.5 | Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via One Touch Join. | 17/07/2022 |
| CVE-2022-27931 | HIGH7.5 | Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via the Session Initiation Protocol. | 17/07/2022 |
| CVE-2022-27930 | MEDIUM5.9 | Pexip Infinity 27.x before 27.3 allows remote attackers to trigger a software abort via single-sign-on if a random Universally Unique Identifier is guessed. | 17/07/2022 |
| CVE-2022-27929 | HIGH7.5 | Pexip Infinity 27.x before 27.3 allows remote attackers to trigger a software abort via HTTP. | 17/07/2022 |
| CVE-2022-27928 | HIGH7.5 | Pexip Infinity 27.x before 27.3 allows remote attackers to trigger a software abort via the Session Initiation Protocol. | 17/07/2022 |
| CVE-2022-26657 | HIGH7.5 | Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via One Touch Join. | 17/07/2022 |
| CVE-2022-26656 | HIGH8.2 | Pexip Infinity before 27.3 allows remote attackers to trigger a software abort, and possibly enumerate usernames, via One Touch Join. | 17/07/2022 |