dmasoftlab kayıtları
dmasoftlab üreticisine ait 4 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-287 Improper Authentication1
- CWE-352 Cross-Site Request Forgery (CSRF)1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
4 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2021-29012İstismar yok | DMA Softlab Radius Manager 4.4.0 assigns the same session cookie to every admin session.dmasoftlab · dma radius manager · CWE-287 | Kritik9,8 | — | %3,2 | 2 Nis 2021 |
36İzleyin | CVE-2021-30147Kavram kanıtı | DMA Softlab Radius Manager 4.4.0 allows CSRF with impacts such as adding new manager accounts via admin.php.dmasoftlab · radius manager · CWE-352 | Yüksek8,8 | — | %3,5 | 6 Nis 2021 |
24İzleyin | CVE-2021-29011İstismar yok | DMA Softlab Radius Manager 4.4.0 is affected by Cross Site Scripting (XSS) via the description, name, or address field (under admin.php).dmasoftlab · dma radius manager · CWE-79 | Orta6,1 | — | %1,4 | 2 Nis 2021 |
14İzleyin | CVE-2010-4275Kavram kanıtı | Multiple cross-site scripting (XSS) vulnerabilities in Radius Manager 3.8.0 allow remote authenticated administrators to inject arbitrary wedmasoftlab · radius manager · CWE-79 | Düşük3,5 | — | %1,3 | 21 Ara 2010 |
- CVE-2021-2901240Planlayın
DMA Softlab Radius Manager 4.4.0 assigns the same session cookie to every admin session.
KritikCVSS 9,8İstismar yokEPSS %3dmasoftlab · dma radius manager2 Nis 2021
- CVE-2021-3014736İzleyin
DMA Softlab Radius Manager 4.4.0 allows CSRF with impacts such as adding new manager accounts via admin.php.
YüksekCVSS 8,8Kavram kanıtıEPSS %4dmasoftlab · radius manager6 Nis 2021
- CVE-2021-2901124İzleyin
DMA Softlab Radius Manager 4.4.0 is affected by Cross Site Scripting (XSS) via the description, name, or address field (under admin.php).
OrtaCVSS 6,1İstismar yokEPSS %1dmasoftlab · dma radius manager2 Nis 2021
- CVE-2010-427514İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in Radius Manager 3.8.0 allow remote authenticated administrators to inject arbitrary we
DüşükCVSS 3,5Kavram kanıtıEPSS %1dmasoftlab · radius manager21 Ara 2010