Skip to content
Noroxi

ipa records

16 published records for vendor ipa.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 19

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

16 records
  • CVE-2017-2179
    36Monitor

    Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.2 and earlier allows remote code execution via unspecified vectors,

    HighCVSS 8.8No exploitEPSS 2%

    ipa · appgoatJun 9, 2017

  • CVE-2017-2182
    35Monitor

    Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.2 and earlier allow remote attackers to obtain local files via unspe

    HighCVSS 8.8No exploitEPSS 2%

    ipa · appgoatJun 9, 2017

  • CVE-2017-2181
    35Monitor

    Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.2 and earlier allow remote attackers to obtain local files via unspe

    HighCVSS 8.8No exploitEPSS 2%

    ipa · appgoatJun 9, 2017

  • CVE-2017-2102
    35Monitor

    Cross-site request forgery (CSRF) vulnerability in Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.0 and earlier all

    HighCVSS 8.8No exploitEPSS 1%

    ipa · appgoatApr 28, 2017

  • CVE-2017-2175
    31Monitor

    Untrusted search path vulnerability in Empirical Project Monitor - eXtended all versions allows remote attackers to gain privileges via a Tr

    HighCVSS 7.8No exploitEPSS 1%

    ipa · empirical project monitor - extendedMay 22, 2017

  • CVE-2017-10820
    31Monitor

    Untrusted search path vulnerability in Installer of IP Messenger for Win 4.60 and earlier allows an attacker to gain privileges via a Trojan

    HighCVSS 7.8No exploitEPSS 1%

    ipa · ip messengerAug 4, 2017

  • CVE-2017-2220
    31Monitor

    Untrusted search path vulnerability in Installer of CASL II simulator (self-extract format) allows an attacker to gain privileges via a Troj

    HighCVSS 7.8No exploitEPSS 1%

    ipa · casl ii simulatorJul 7, 2017

  • CVE-2019-6019
    31Monitor

    Untrusted search path vulnerability in STAMP Workbench installer all versions allows an attacker to gain privileges via a Trojan horse DLL i

    HighCVSS 7.8No exploitEPSS 1%

    ipa · stamp workbenchDec 26, 2019

  • CVE-2017-2101
    29Monitor

    Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.0 and earlier allows remote attackers to bypass authentication to pe

    HighCVSS 7.3No exploitEPSS 1%

    ipa · appgoatApr 28, 2017

  • CVE-2017-2099
    25Monitor

    Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.0 and earlier allows remote code execution via unspecified vectors.

    MediumCVSS 6.3No exploitEPSS 2%

    ipa · appgoatApr 28, 2017

  • CVE-2017-2100
    25Monitor

    Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.1 and earlier allows remote attackers to conduct DNS rebinding attac

    MediumCVSS 6.3No exploitEPSS 1%

    ipa · appgoatApr 28, 2017

  • CVE-2017-2174
    24Monitor

    Cross-site scripting vulnerability in Empirical Project Monitor - eXtended all versions allows remote attackers to inject arbitrary web scri

    MediumCVSS 6.1No exploitEPSS 1%

    ipa · empirical project monitor - extendedMay 22, 2017

  • CVE-2017-2194
    24Monitor

    Cross-site scripting vulnerability in Source code security studying tool iCodeChecker allows an attacker to inject arbitrary web script or H

    MediumCVSS 6.1No exploitEPSS 1%

    ipa · icodecheckerJul 7, 2017

  • CVE-2017-2173
    21Monitor

    Cross-site scripting vulnerability in Empirical Project Monitor - eXtended all versions allows remote authenticated attackers to inject arbi

    MediumCVSS 5.4No exploitEPSS 1%

    ipa · empirical project monitor - extendedMay 22, 2017

  • CVE-2014-7248
    17Monitor

    Cross-site scripting (XSS) vulnerability in IPA iLogScanner 4.0 allows remote attackers to inject arbitrary web script or HTML by triggering

    MediumCVSS 4.3No exploitEPSS 1%

    ipa · ilogscannerNov 14, 2014

  • CVE-2017-2180
    17Monitor

    Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.2 and earlier allow remote attackers to obtain local files via unspe

    MediumCVSS 4.3No exploitEPSS 1%

    ipa · appgoatJun 9, 2017