LuxSoft kayıtları

luxsoft üreticisine ait 10 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 1
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')4
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
CWE-306 Missing Authentication for Critical Function1

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

10 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
39İzleyin	CVE-2021-45914İstismar yok	In LuxSoft LuxCal Web Calendar before 5.2.0, an unauthenticated attacker can manipulate a POST request.luxsoft · luxcal Kimlik doğrulamasız	Kritik9,8	—	%1,6	24 May 2022
39İzleyin	CVE-2021-45915İstismar yok	In LuxSoft LuxCal Web Calendar before 5.2.0, an unauthenticated attacker can manipulate a cookie value.luxsoft · luxcal Kimlik doğrulamasız	Kritik9,8	—	%1,6	24 May 2022
39İzleyin	CVE-2023-46700İstismar yok	SQL injection vulnerability in LuxCal Web Calendar prior to 5.2.4M (MySQL version) and LuxCal Web Calendar prior to 5.2.4L (SQLite version) luxsoft · luxcal web calendar · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Kritik9,8	—	%1,0	20 Kas 2023
39İzleyin	CVE-2025-25221İstismar yok	The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains an SQL injection vulnerability in pdf.luxsoft · luxcal web calendar · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Kritik9,8	—	%0,5	17 Şub 2025
39İzleyin	CVE-2025-25222İstismar yok	The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains an SQL injection vulnerability in retrluxsoft · luxcal web calendar · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Kritik9,8	—	%0,5	17 Şub 2025
36İzleyin	CVE-2023-39939İstismar yok	SQL injection vulnerability in LuxCal Web Calendar prior to 5.2.3M (MySQL version) and LuxCal Web Calendar prior to 5.2.3L (SQLite version) luxsoft · luxcal web calendar · CWE-89 pre-auth RCE SQL enjeksiyonu	Kritik9,1	—	%1,0	21 Ağu 2023
30İzleyin	CVE-2025-25224İstismar yok	The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains a missing authentication vulnerabilityluxsoft · luxcal web calendar · CWE-306 Kimlik doğrulamasız Kimlik doğrulama atlatma	Yüksek7,5	—	%0,6	17 Şub 2025
24İzleyin	CVE-2023-47175İstismar yok	Cross-site scripting vulnerability in LuxCal Web Calendar prior to 5.2.4M (MySQL version) and LuxCal Web Calendar prior to 5.2.4L (SQLite veluxsoft · luxcal web calendar · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,7	20 Kas 2023
24İzleyin	CVE-2023-39543İstismar yok	Cross-site scripting vulnerability in LuxCal Web Calendar prior to 5.2.3M (MySQL version) and LuxCal Web Calendar prior to 5.2.3L (SQLite veluxsoft · luxcal web calendar · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,7	21 Ağu 2023
21İzleyin	CVE-2025-25223İstismar yok	The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains a path traversal vulnerability in dloaluxsoft · luxcal web calendar · CWE-22 Kimlik doğrulamasız Yol geçişi	Orta5,3	—	%0,6	17 Şub 2025

CVE-2021-45914
39İzleyin
In LuxSoft LuxCal Web Calendar before 5.2.0, an unauthenticated attacker can manipulate a POST request.
KritikCVSS 9,8İstismar yokEPSS %2
- Kimlik doğrulamasız
luxsoft · luxcal24 May 2022
CVE-2021-45915
39İzleyin
In LuxSoft LuxCal Web Calendar before 5.2.0, an unauthenticated attacker can manipulate a cookie value.
KritikCVSS 9,8İstismar yokEPSS %2
- Kimlik doğrulamasız
luxsoft · luxcal24 May 2022
CVE-2023-46700
39İzleyin
SQL injection vulnerability in LuxCal Web Calendar prior to 5.2.4M (MySQL version) and LuxCal Web Calendar prior to 5.2.4L (SQLite version)
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- SQL enjeksiyonu
luxsoft · luxcal web calendar20 Kas 2023
CVE-2025-25221
39İzleyin
The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains an SQL injection vulnerability in pdf.
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- SQL enjeksiyonu
luxsoft · luxcal web calendar17 Şub 2025
CVE-2025-25222
39İzleyin
The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains an SQL injection vulnerability in retr
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- SQL enjeksiyonu
luxsoft · luxcal web calendar17 Şub 2025
CVE-2023-39939
36İzleyin
SQL injection vulnerability in LuxCal Web Calendar prior to 5.2.3M (MySQL version) and LuxCal Web Calendar prior to 5.2.3L (SQLite version)
KritikCVSS 9,1İstismar yokEPSS %1
- pre-auth RCE
- SQL enjeksiyonu
luxsoft · luxcal web calendar21 Ağu 2023
CVE-2025-25224
30İzleyin
The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains a missing authentication vulnerability
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
luxsoft · luxcal web calendar17 Şub 2025
CVE-2023-47175
24İzleyin
Cross-site scripting vulnerability in LuxCal Web Calendar prior to 5.2.4M (MySQL version) and LuxCal Web Calendar prior to 5.2.4L (SQLite ve
OrtaCVSS 6,1İstismar yokEPSS %1
- Kimlik doğrulamasız
- XSS
luxsoft · luxcal web calendar20 Kas 2023
CVE-2023-39543
24İzleyin
Cross-site scripting vulnerability in LuxCal Web Calendar prior to 5.2.3M (MySQL version) and LuxCal Web Calendar prior to 5.2.3L (SQLite ve
OrtaCVSS 6,1İstismar yokEPSS %1
- Kimlik doğrulamasız
- XSS
luxsoft · luxcal web calendar21 Ağu 2023
CVE-2025-25223
21İzleyin
The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains a path traversal vulnerability in dloa
OrtaCVSS 5,3İstismar yokEPSS %1
- Kimlik doğrulamasız
- Yol geçişi
luxsoft · luxcal web calendar17 Şub 2025