CVE Intelligence

Vulnerabilidades de DivvyDrive Information Technologies Inc.

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de DivvyDrive Information Technologies Inc.: 6 registro(s), com severidade, exploração e correções.

DivvyDrive 5Digital Corporate Warehouse 1

Somente exploradas (KEV) →

CVE-2026-6795 Crítica · 9.6 CWE-601 07/05/2026
Open Redirect no DivvyDrive via Injeção de Parâmetro (CWE-601)
Vulnerabilidade de redirecionamento de URL para site não confiável ('open redirect') em DivvyDrive Information Technologies Inc. O DivvyDrive permite Injeção de Parâmetro. Esta questão afeta o DivvyDrive: da versão 4.8.2.9 anterior à 4.8.3.2.
CVE-2025-14341 Alta · 8.3 CWE-770 07/05/2026
Input Data Manipulation in DivvyDrive Information Technologies' DivvyDrive
Improperly controlled modification of Dynamically-Determined object attributes, Allocation of resources without limits or throttling vulnerability in DivvyDrive Information Technologies Inc. DivvyDrive allows Excessive Allocation, Flooding. This issue affects DivvyDrive: from 4.8.2.19 before 4.8.3.2.
CVE-2026-6002 Alta · 8.8 CWE-80 07/05/2026
HTML Injection in DivvyDrive Information Technologies' DivvyDrive
Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in DivvyDrive Information Technologies Inc. DivvyDrive allows Cross-Site Scripting (XSS). This issue affects DivvyDrive: from 4.8.2.9 before 4.8.3.2.
CVE-2026-5791 Média · 6.5 CWE-352 07/05/2026
CSRF in DivvyDrive Information Technologies' DivvyDrive
Cross-Site request forgery (CSRF) vulnerability in DivvyDrive Information Technologies Inc. DivvyDrive allows Cross Site Request Forgery. This issue affects DivvyDrive: from 4.8.2.9 before 4.8.3.2.
CVE-2026-5784 Alta · 8.8 CWE-79 07/05/2026
Stored XSS in DivvyDrive Information Technologies' DivvyDrive
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in DivvyDrive Information Technologies Inc. DivvyDrive allows Stored XSS. This issue affects DivvyDrive: from 4.8.2.9 before 4.8.3.2.
CVE-2025-11962 Alta · 7.3 CWE-79 12/11/2025
Stored XSS in DivvyDrive Information Technologies' Digital Corporate Warehouse
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in DivvyDrive Information Technologies Inc. Digital Corporate Warehouse allows Stored XSS. This issue affects Digital Corporate Warehouse: before v.4.8.2.22.