Bugbang

9 kredili kayıt · son 12 ayda 0 · 0 tanesi CISA KEV’de

Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.

Kredili kayıtlar

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
40Planlayın	CVE-2021-24384İstismar yok	JoomSport < 5.1.8 - Unauthenticated PHP Object Injectionbeardev · joomsport · CWE-502 pre-auth RCE Deserializasyon	Kritik9,8	—	%2,1	6 Tem 2021
35İzleyin	CVE-2021-24195İstismar yok	Login as User or Customer (User Switching) < 1.9 - Arbitrary Plugin Installation/Activation via Low Privilege Userwp-buy · login as user or customer \(user switching\) · CWE-285 RCE Erişim denetimi (IDOR)	Yüksek8,8	—	%1,3	14 May 2021
35İzleyin	CVE-2021-24194İstismar yok	Login Protection - Limit Failed Login Attempts < 2.9 - Arbitrary Plugin Installation/Activation via Low Privilege Userwp-buy · login protection - limit failed login attempts · CWE-285 RCE Erişim denetimi (IDOR)	Yüksek8,8	—	%1,3	14 May 2021
35İzleyin	CVE-2021-24193İstismar yok	Visitor Traffic Real Time Statistics < 2.12 - Arbitrary Plugin Installation/Activation via Low Privilege Userwp-buy · visitor traffic real time statistics · CWE-285 RCE Erişim denetimi (IDOR)	Yüksek8,8	—	%1,3	14 May 2021
35İzleyin	CVE-2021-24192İstismar yok	Tree Sitemap < 2.9 - Arbitrary Plugin Installation/Activation via Low Privilege Usersitemap project · sitemap · CWE-285 RCE Erişim denetimi (IDOR)	Yüksek8,8	—	%1,3	14 May 2021
35İzleyin	CVE-2021-24191İstismar yok	WP Maintenance Mode & Site Under Construction < 1.8.2 - Arbitrary Plugin Installation/Activation via Low Privilege Userwpshopmart · coming soon page \& maintenance mode · CWE-285 RCE Erişim denetimi (IDOR)	Yüksek8,8	—	%1,3	14 May 2021
35İzleyin	CVE-2021-24190İstismar yok	WooCommerce Conditional Marketing Mailer < 1.5.2 - Arbitrary Plugin Installation/Activation via Low Privilege Userwp-buy · conditional marketing mailer · CWE-285 RCE Erişim denetimi (IDOR)	Yüksek8,8	—	%1,3	14 May 2021
35İzleyin	CVE-2021-24189İstismar yok	Captchinoo, Google recaptcha for admin login page < 2.4 - Arbitrary Plugin Installation/Activation via Low Privilege Userwp-buy · captchinoo · CWE-285 RCE Erişim denetimi (IDOR)	Yüksek8,8	—	%1,3	14 May 2021
35İzleyin	CVE-2021-24188İstismar yok	WP Content Copy Protection & No Right Click < 3.1.5 - Arbitrary Plugin Installation/Activation via Low Privilege Userwp-buy · wp content copy protection \& no right click · CWE-285 RCE Erişim denetimi (IDOR)	Yüksek8,8	—	%1,3	14 May 2021

CVE-2021-24384
40Planlayın
JoomSport < 5.1.8 - Unauthenticated PHP Object Injection
KritikCVSS 9,8İstismar yokEPSS %2
- pre-auth RCE
- Deserializasyon
beardev · joomsport6 Tem 2021
CVE-2021-24195
35İzleyin
Login as User or Customer (User Switching) < 1.9 - Arbitrary Plugin Installation/Activation via Low Privilege User
YüksekCVSS 8,8İstismar yokEPSS %1
- RCE
- Erişim denetimi (IDOR)
wp-buy · login as user or customer \(user switching\)14 May 2021
CVE-2021-24194
35İzleyin
Login Protection - Limit Failed Login Attempts < 2.9 - Arbitrary Plugin Installation/Activation via Low Privilege User
YüksekCVSS 8,8İstismar yokEPSS %1
- RCE
- Erişim denetimi (IDOR)
wp-buy · login protection - limit failed login attempts14 May 2021
CVE-2021-24193
35İzleyin
Visitor Traffic Real Time Statistics < 2.12 - Arbitrary Plugin Installation/Activation via Low Privilege User
YüksekCVSS 8,8İstismar yokEPSS %1
- RCE
- Erişim denetimi (IDOR)
wp-buy · visitor traffic real time statistics14 May 2021
CVE-2021-24192
35İzleyin
Tree Sitemap < 2.9 - Arbitrary Plugin Installation/Activation via Low Privilege User
YüksekCVSS 8,8İstismar yokEPSS %1
- RCE
- Erişim denetimi (IDOR)
sitemap project · sitemap14 May 2021
CVE-2021-24191
35İzleyin
WP Maintenance Mode & Site Under Construction < 1.8.2 - Arbitrary Plugin Installation/Activation via Low Privilege User
YüksekCVSS 8,8İstismar yokEPSS %1
- RCE
- Erişim denetimi (IDOR)
wpshopmart · coming soon page \& maintenance mode14 May 2021
CVE-2021-24190
35İzleyin
WooCommerce Conditional Marketing Mailer < 1.5.2 - Arbitrary Plugin Installation/Activation via Low Privilege User
YüksekCVSS 8,8İstismar yokEPSS %1
- RCE
- Erişim denetimi (IDOR)
wp-buy · conditional marketing mailer14 May 2021
CVE-2021-24189
35İzleyin
Captchinoo, Google recaptcha for admin login page < 2.4 - Arbitrary Plugin Installation/Activation via Low Privilege User
YüksekCVSS 8,8İstismar yokEPSS %1
- RCE
- Erişim denetimi (IDOR)
wp-buy · captchinoo14 May 2021
CVE-2021-24188
35İzleyin
WP Content Copy Protection & No Right Click < 3.1.5 - Arbitrary Plugin Installation/Activation via Low Privilege User
YüksekCVSS 8,8İstismar yokEPSS %1
- RCE
- Erişim denetimi (IDOR)
wp-buy · wp content copy protection \& no right click14 May 2021