inventivetec records

7 published records for vendor inventivetec.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 1
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

7 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
31Monitor	CVE-2011-2080No exploit	Multiple SQL injection vulnerabilities in MediaCAST 8 and earlier allow remote attackers to execute arbitrary SQL commands via (1) a CP_ENLAinventivetec · mediacast · CWE-89 pre-auth RCE SQL injection	High7.5	—	1.8%	May 10, 2011
30Monitor	CVE-2011-2079No exploit	MediaCAST 8 and earlier allows remote attackers to have an unspecified impact via a (1) CP_RIGHTSOURCE or (2) bdclient_Inventive cookie to tinventivetec · mediacast · CWE-20 Pre-auth	High7.5	—	1.5%	May 10, 2011
30Monitor	CVE-2011-2077No exploit	The default configuration of the New Atlanta BlueDragon administrative interface in MediaCAST 8 and earlier enables external TCP connectionsinventivetec · mediacast · CWE-16 Pre-auth	High7.5	—	1.3%	May 10, 2011
21Monitor	CVE-2011-2081No exploit	MediaCAST 8 and earlier does not properly handle requests for inventivex/isptools/release/metadata/globalIncludeFolders.txt, which allows reinventivetec · mediacast · CWE-200 Pre-auth Info leak	Medium5.0	—	2.1%	May 10, 2011
20Monitor	CVE-2010-0216No exploit	authenticate_ad_setup_finished.cfm in MediaCAST 8 and earlier allows remote attackers to discover usernames and cleartext passwords by readiinventivetec · mediacast · CWE-310 Pre-auth	Medium5.0	—	1.6%	May 10, 2011
20Monitor	CVE-2011-2076No exploit	MediaCAST 8 and earlier stores passwords in cleartext, which makes it easier for context-dependent attackers to obtain sensitive informationinventivetec · mediacast · CWE-200 Pre-auth Info leak	Medium5.0	—	1.0%	May 10, 2011
17Monitor	CVE-2011-2078No exploit	Multiple cross-site scripting (XSS) vulnerabilities in the New Atlanta BlueDragon administrative interface in MediaCAST 8 and earlier allow inventivetec · mediacast · CWE-79 Pre-auth XSS	Medium4.3	—	0.9%	May 10, 2011

CVE-2011-2080
31Monitor
Multiple SQL injection vulnerabilities in MediaCAST 8 and earlier allow remote attackers to execute arbitrary SQL commands via (1) a CP_ENLA
HighCVSS 7.5No exploitEPSS 2%
- pre-auth RCE
- SQL injection
inventivetec · mediacastMay 10, 2011
CVE-2011-2079
30Monitor
MediaCAST 8 and earlier allows remote attackers to have an unspecified impact via a (1) CP_RIGHTSOURCE or (2) bdclient_Inventive cookie to t
HighCVSS 7.5No exploitEPSS 2%
- Pre-auth
inventivetec · mediacastMay 10, 2011
CVE-2011-2077
30Monitor
The default configuration of the New Atlanta BlueDragon administrative interface in MediaCAST 8 and earlier enables external TCP connections
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
inventivetec · mediacastMay 10, 2011
CVE-2011-2081
21Monitor
MediaCAST 8 and earlier does not properly handle requests for inventivex/isptools/release/metadata/globalIncludeFolders.txt, which allows re
MediumCVSS 5.0No exploitEPSS 2%
- Pre-auth
- Info leak
inventivetec · mediacastMay 10, 2011
CVE-2010-0216
20Monitor
authenticate_ad_setup_finished.cfm in MediaCAST 8 and earlier allows remote attackers to discover usernames and cleartext passwords by readi
MediumCVSS 5.0No exploitEPSS 2%
- Pre-auth
inventivetec · mediacastMay 10, 2011
CVE-2011-2076
20Monitor
MediaCAST 8 and earlier stores passwords in cleartext, which makes it easier for context-dependent attackers to obtain sensitive information
MediumCVSS 5.0No exploitEPSS 1%
- Pre-auth
- Info leak
inventivetec · mediacastMay 10, 2011
CVE-2011-2078
17Monitor
Multiple cross-site scripting (XSS) vulnerabilities in the New Atlanta BlueDragon administrative interface in MediaCAST 8 and earlier allow
MediumCVSS 4.3No exploitEPSS 1%
- Pre-auth
- XSS
inventivetec · mediacastMay 10, 2011