netsas kayıtları
netsas üreticisine ait 12 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %8,3
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-319 Cleartext Transmission of Sensitive Information2
- CWE-276 Incorrect Default Permissions1
- CWE-312 Cleartext Storage of Sensitive Information1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
12 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
47Planlayın | CVE-2019-16072Kavram kanıtı | An OS command injection vulnerability in the discover_and_manage CGI script in NETSAS Enigma NMS 65.0.0 and prior allows an attacker to execnetsas · enigma network management solution · CWE-78 | Kritik9,8 | — | %25,9 | 19 Mar 2020 |
38İzleyin | CVE-2019-16064İstismar yok | NETSAS Enigma NMS 65.0.0 and prior suffers from a directory traversal vulnerability that can allow an authenticated user to access files andnetsas · enigma network management solution · CWE-22 | Kritik9,6 | — | %1,3 | 19 Mar 2020 |
36İzleyin | CVE-2019-16065Kavram kanıtı | A remote SQL injection web vulnerability was discovered in the Enigma NMS 65.0.0 and prior web application that allows an attacker to executnetsas · enigma network management solution · CWE-89 | Yüksek8,8 | — | %2,8 | 19 Mar 2020 |
36İzleyin | CVE-2019-16066İstismar yok | An unrestricted file upload vulnerability exists in user and system file upload functions in NETSAS Enigma NMS 65.0.0 and prior.netsas · enigma network management solution · CWE-434 | Yüksek8,8 | — | %2,2 | 19 Mar 2020 |
35İzleyin | CVE-2019-16071İstismar yok | Enigma NMS 65.0.0 and prior allows administrative users to create low-privileged accounts that do not have the ability to modify any settingnetsas · enigma nms · CWE-269 | Yüksek8,8 | — | %1,0 | 19 Mar 2020 |
35İzleyin | CVE-2019-16061İstismar yok | A number of files on the NETSAS Enigma NMS server 65.0.0 and prior are granted weak world-readable and world-writable permissions, allowing netsas · enigma network management solution · CWE-276 | Yüksek8,8 | — | %1,0 | 19 Mar 2020 |
35İzleyin | CVE-2019-16068Kavram kanıtı | A CSRF vulnerability exists in NETSAS ENIGMA NMS version 65.0.0 and prior that could allow an attacker to be able to trick a victim into subnetsas · enigma network management solution · CWE-79 | Yüksek8,8 | — | %0,9 | 19 Mar 2020 |
30İzleyin | CVE-2019-16067İstismar yok | NETSAS Enigma NMS 65.0.0 and prior utilises basic authentication over HTTP for enforcing access control to the web application.netsas · enigma network management solution · CWE-319 | Yüksek7,5 | — | %0,8 | 19 Mar 2020 |
30İzleyin | CVE-2019-16063İstismar yok | NETSAS Enigma NMS 65.0.0 and prior does not encrypt sensitive data rendered within web pages.netsas · enigma network management solution · CWE-319 | Yüksek7,5 | — | %0,7 | 19 Mar 2020 |
26İzleyin | CVE-2019-16062İstismar yok | NETSAS Enigma NMS 65.0.0 and prior does not encrypt sensitive data stored within the SQL database.netsas · enigma network management solution · CWE-312 | Orta6,5 | — | %0,8 | 19 Mar 2020 |
24İzleyin | CVE-2019-16070İstismar yok | A number of stored Cross-site Scripting (XSS) vulnerabilities were identified in NETSAS Enigma NMS 65.0.0 and prior that could allow a threanetsas · enigma network management solution · CWE-79 | Orta6,1 | — | %0,7 | 19 Mar 2020 |
24İzleyin | CVE-2019-16069İstismar yok | A number of stored Cross-site Scripting (XSS) vulnerabilities were identified in NETSAS Enigma NMS 65.0.0 and prior that could allow a threanetsas · enigma network management solution · CWE-79 | Orta6,1 | — | %0,7 | 19 Mar 2020 |
- CVE-2019-1607247Planlayın
An OS command injection vulnerability in the discover_and_manage CGI script in NETSAS Enigma NMS 65.0.0 and prior allows an attacker to exec
KritikCVSS 9,8Kavram kanıtıEPSS %26netsas · enigma network management solution19 Mar 2020
- CVE-2019-1606438İzleyin
NETSAS Enigma NMS 65.0.0 and prior suffers from a directory traversal vulnerability that can allow an authenticated user to access files and
KritikCVSS 9,6İstismar yokEPSS %1netsas · enigma network management solution19 Mar 2020
- CVE-2019-1606536İzleyin
A remote SQL injection web vulnerability was discovered in the Enigma NMS 65.0.0 and prior web application that allows an attacker to execut
YüksekCVSS 8,8Kavram kanıtıEPSS %3netsas · enigma network management solution19 Mar 2020
- CVE-2019-1606636İzleyin
An unrestricted file upload vulnerability exists in user and system file upload functions in NETSAS Enigma NMS 65.0.0 and prior.
YüksekCVSS 8,8İstismar yokEPSS %2netsas · enigma network management solution19 Mar 2020
- CVE-2019-1607135İzleyin
Enigma NMS 65.0.0 and prior allows administrative users to create low-privileged accounts that do not have the ability to modify any setting
YüksekCVSS 8,8İstismar yokEPSS %1netsas · enigma nms19 Mar 2020
- CVE-2019-1606135İzleyin
A number of files on the NETSAS Enigma NMS server 65.0.0 and prior are granted weak world-readable and world-writable permissions, allowing
YüksekCVSS 8,8İstismar yokEPSS %1netsas · enigma network management solution19 Mar 2020
- CVE-2019-1606835İzleyin
A CSRF vulnerability exists in NETSAS ENIGMA NMS version 65.0.0 and prior that could allow an attacker to be able to trick a victim into sub
YüksekCVSS 8,8Kavram kanıtıEPSS %1netsas · enigma network management solution19 Mar 2020
- CVE-2019-1606730İzleyin
NETSAS Enigma NMS 65.0.0 and prior utilises basic authentication over HTTP for enforcing access control to the web application.
YüksekCVSS 7,5İstismar yokEPSS %1netsas · enigma network management solution19 Mar 2020
- CVE-2019-1606330İzleyin
NETSAS Enigma NMS 65.0.0 and prior does not encrypt sensitive data rendered within web pages.
YüksekCVSS 7,5İstismar yokEPSS %1netsas · enigma network management solution19 Mar 2020
- CVE-2019-1606226İzleyin
NETSAS Enigma NMS 65.0.0 and prior does not encrypt sensitive data stored within the SQL database.
OrtaCVSS 6,5İstismar yokEPSS %1netsas · enigma network management solution19 Mar 2020
- CVE-2019-1607024İzleyin
A number of stored Cross-site Scripting (XSS) vulnerabilities were identified in NETSAS Enigma NMS 65.0.0 and prior that could allow a threa
OrtaCVSS 6,1İstismar yokEPSS %1netsas · enigma network management solution19 Mar 2020
- CVE-2019-1606924İzleyin
A number of stored Cross-site Scripting (XSS) vulnerabilities were identified in NETSAS Enigma NMS 65.0.0 and prior that could allow a threa
OrtaCVSS 6,1İstismar yokEPSS %1netsas · enigma network management solution19 Mar 2020