ArticaTech kayıtları
articatech üreticisine ait 17 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 3 · %17,6
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')5
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-288 Authentication Bypass Using an Alternate Path or Channel2
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-502 Deserialization of Untrusted Data1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
17 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
67Bu hafta | CVE-2020-17506Silahlaştırılmış | Artica Web Proxy 4.30.00000000 allows remote attacker to bypass privilege detection and gain web backend administrator privileges through SQarticatech · web proxy · CWE-89 | Kritik9,8 | — | %94,0 | 12 Ağu 2020 |
63Bu hafta | CVE-2024-2054Silahlaştırılmış | Artica Proxy Unauthenticated PHP Deserialization Vulnerabilityarticatech · artica proxy · CWE-502 | Kritik9,8 | — | %81,3 | 20 Mar 2024 |
60Bu hafta | CVE-2020-17505Silahlaştırılmış | Artica Web Proxy 4.30.000000 allows an authenticated remote attacker to inject commands via the service-cmds parameter in cyrus.php.articatech · web proxy · CWE-78 | Yüksek8,8 | — | %82,2 | 12 Ağu 2020 |
46Planlayın | CVE-2020-13158Kavram kanıtı | Artica Proxy before 4.30.000000 Community Edition allows Directory Traversal via the fw.progrss.details.php popup parameter.articatech · artica proxy · CWE-22 | Yüksek7,5 | — | %54,0 | 22 Haz 2020 |
44Planlayın | CVE-2024-2056İstismar yok | Artica Proxy Loopback Services Remotely Accessible Unauthenticatedarticatech · artica proxy · CWE-288 | Kritik9,8 | — | %16,7 | 5 Mar 2024 |
43Planlayın | CVE-2024-2053Kavram kanıtı | Artica Proxy Unauthenticated LFI Protection Bypass Vulnerabilityarticatech · artica proxy · CWE-23 | Yüksek7,5 | — | %44,6 | 20 Mar 2024 |
42Planlayın | CVE-2020-13159Kavram kanıtı | Artica Proxy before 4.30.000000 Community Edition allows OS command injection via the Netbios name, Server domain name, dhclient_mac, Hostnaarticatech · artica proxy · CWE-78 | Kritik9,8 | — | %9,3 | 22 Haz 2020 |
40Planlayın | CVE-2021-41739İstismar yok | A OS Command Injection vulnerability was discovered in Artica Proxy 4.30.000000.articatech · artica proxy · CWE-78 | Kritik9,8 | — | %2,6 | 5 May 2022 |
39İzleyin | CVE-2017-17055Kavram kanıtı | Artica Web Proxy before 3.06.112911 allows remote attackers to execute arbitrary code as root by conducting a cross-site scripting (XSS) attarticatech · artica proxy · CWE-78 | Kritik9,0 | — | %8,7 | 6 Ara 2017 |
39İzleyin | CVE-2024-2055İstismar yok | Artica Proxy Unauthenticated File Manager Vulnerabilityarticatech · artica proxy · CWE-288 | Kritik9,8 | — | %0,9 | 5 Mar 2024 |
32İzleyin | CVE-2021-40680İstismar yok | There is a Directory Traversal vulnerability in Artica Proxy (4.30.000000 SP206 through SP255, and VMware appliance 4.30.000000 through SP27articatech · web proxy · CWE-22 | Yüksek8,1 | — | %1,4 | 25 Nis 2022 |
31İzleyin | CVE-2020-15052Kavram kanıtı | An issue was discovered in Artica Proxy CE before 4.28.030.418.articatech · artica proxy · CWE-89 | Yüksek7,5 | — | %2,2 | 20 Tem 2020 |
29İzleyin | CVE-2020-10818İstismar yok | Artica Proxy 4.26 allows remote command execution for an authenticated user via shell metacharacters in the "Modify the hostname" field.articatech · artica proxy · CWE-78 | Yüksek7,2 | — | %2,9 | 22 Mar 2020 |
29İzleyin | CVE-2019-7300İstismar yok | Artica Proxy 3.06.200056 allows remote attackers to execute arbitrary commands as root by reading the ressources/settings.inc ldap_admin andarticatech · artica proxy · CWE-522 | Yüksek7,2 | — | %2,8 | 1 Şub 2019 |
25İzleyin | CVE-2020-15051Kavram kanıtı | An issue was discovered in Artica Proxy before 4.30.000000.articatech · artica proxy · CWE-79 | Orta6,1 | — | %2,5 | 15 Tem 2020 |
25İzleyin | CVE-2020-15053Kavram kanıtı | An issue was discovered in Artica Proxy CE before 4.28.030.418.articatech · artica proxy · CWE-79 | Orta6,1 | — | %1,8 | 20 Tem 2020 |
24İzleyin | CVE-2022-37153Kavram kanıtı | An issue was discovered in Artica Proxy 4.30.000000.articatech · artica proxy · CWE-79 | Orta6,1 | — | %1,6 | 24 Ağu 2022 |
- CVE-2020-1750667Bu hafta
Artica Web Proxy 4.30.00000000 allows remote attacker to bypass privilege detection and gain web backend administrator privileges through SQ
KritikCVSS 9,8SilahlaştırılmışEPSS %94articatech · web proxy12 Ağu 2020
- CVE-2024-205463Bu hafta
Artica Proxy Unauthenticated PHP Deserialization Vulnerability
KritikCVSS 9,8SilahlaştırılmışEPSS %81articatech · artica proxy20 Mar 2024
- CVE-2020-1750560Bu hafta
Artica Web Proxy 4.30.000000 allows an authenticated remote attacker to inject commands via the service-cmds parameter in cyrus.php.
YüksekCVSS 8,8SilahlaştırılmışEPSS %82articatech · web proxy12 Ağu 2020
- CVE-2020-1315846Planlayın
Artica Proxy before 4.30.000000 Community Edition allows Directory Traversal via the fw.progrss.details.php popup parameter.
YüksekCVSS 7,5Kavram kanıtıEPSS %54articatech · artica proxy22 Haz 2020
- CVE-2024-205644Planlayın
Artica Proxy Loopback Services Remotely Accessible Unauthenticated
KritikCVSS 9,8İstismar yokEPSS %17articatech · artica proxy5 Mar 2024
- CVE-2024-205343Planlayın
Artica Proxy Unauthenticated LFI Protection Bypass Vulnerability
YüksekCVSS 7,5Kavram kanıtıEPSS %45articatech · artica proxy20 Mar 2024
- CVE-2020-1315942Planlayın
Artica Proxy before 4.30.000000 Community Edition allows OS command injection via the Netbios name, Server domain name, dhclient_mac, Hostna
KritikCVSS 9,8Kavram kanıtıEPSS %9articatech · artica proxy22 Haz 2020
- CVE-2021-4173940Planlayın
A OS Command Injection vulnerability was discovered in Artica Proxy 4.30.000000.
KritikCVSS 9,8İstismar yokEPSS %3articatech · artica proxy5 May 2022
- CVE-2017-1705539İzleyin
Artica Web Proxy before 3.06.112911 allows remote attackers to execute arbitrary code as root by conducting a cross-site scripting (XSS) att
KritikCVSS 9,0Kavram kanıtıEPSS %9articatech · artica proxy6 Ara 2017
- CVE-2024-205539İzleyin
Artica Proxy Unauthenticated File Manager Vulnerability
KritikCVSS 9,8İstismar yokEPSS %1articatech · artica proxy5 Mar 2024
- CVE-2021-4068032İzleyin
There is a Directory Traversal vulnerability in Artica Proxy (4.30.000000 SP206 through SP255, and VMware appliance 4.30.000000 through SP27
YüksekCVSS 8,1İstismar yokEPSS %1articatech · web proxy25 Nis 2022
- CVE-2020-1505231İzleyin
An issue was discovered in Artica Proxy CE before 4.28.030.418.
YüksekCVSS 7,5Kavram kanıtıEPSS %2articatech · artica proxy20 Tem 2020
- CVE-2020-1081829İzleyin
Artica Proxy 4.26 allows remote command execution for an authenticated user via shell metacharacters in the "Modify the hostname" field.
YüksekCVSS 7,2İstismar yokEPSS %3articatech · artica proxy22 Mar 2020
- CVE-2019-730029İzleyin
Artica Proxy 3.06.200056 allows remote attackers to execute arbitrary commands as root by reading the ressources/settings.inc ldap_admin and
YüksekCVSS 7,2İstismar yokEPSS %3articatech · artica proxy1 Şub 2019
- CVE-2020-1505125İzleyin
An issue was discovered in Artica Proxy before 4.30.000000.
OrtaCVSS 6,1Kavram kanıtıEPSS %2articatech · artica proxy15 Tem 2020
- CVE-2020-1505325İzleyin
An issue was discovered in Artica Proxy CE before 4.28.030.418.
OrtaCVSS 6,1Kavram kanıtıEPSS %2articatech · artica proxy20 Tem 2020
- CVE-2022-3715324İzleyin
An issue was discovered in Artica Proxy 4.30.000000.
OrtaCVSS 6,1Kavram kanıtıEPSS %2articatech · artica proxy24 Ağu 2022