Vulnerabilities > Nchsoftware > IVM Attendant > High

DATE CVE VULNERABILITY TITLE RISK
2021-07-25 CVE-2021-37443 Path Traversal vulnerability in Nchsoftware IVM Attendant 5.12
NCH IVM Attendant v5.12 and earlier allows path traversal via the logdeleteselected check0 parameter for file deletion.
network
low complexity
nchsoftware CWE-22
8.1
2021-07-25 CVE-2021-37444 Unrestricted Upload of File with Dangerous Type vulnerability in Nchsoftware IVM Attendant 5.12
NCH IVM Attendant v5.12 and earlier suffers from a directory traversal weakness upon uploading plugins in a ZIP archive.
network
low complexity
nchsoftware CWE-434
8.8