openwebif project records
4 published records for vendor openwebif project.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 2
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-20 Improper Input Validation1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2017-9807No exploit | An issue was discovered in the OpenWebif plugin through 1.2.4 for E2 open devices.openwebif project · openwebif · CWE-94 | Critical9.8 | — | 4.9% | Jun 21, 2017 |
36Monitor | CVE-2017-9333No exploit | OpenWebif 1.2.5 allows remote code execution via a URL to the CallOPKG function in the IpkgController class in plugin/controllers/ipkg.py, wopenwebif project · openwebif · CWE-20 | High8.8 | — | 2.3% | Sep 17, 2017 |
31Monitor | CVE-2018-20332No exploit | An issue has been discovered in the OpenWebif plugin through 1.2.4 for Enigma2 based devices.openwebif project · openwebif · CWE-22 | High7.5 | — | 2.2% | Dec 21, 2018 |
21Monitor | CVE-2021-38113No exploit | In addBouquet in js/bqe.js in OpenWebif (aka e2openplugin-OpenWebif) through 1.4.7, inserting JavaScript into the Add Bouquet feature of theopenwebif project · openwebif · CWE-79 | Medium5.4 | — | 0.5% | Aug 4, 2021 |
- CVE-2017-980740Plan
An issue was discovered in the OpenWebif plugin through 1.2.4 for E2 open devices.
CriticalCVSS 9.8No exploitEPSS 5%openwebif project · openwebifJun 21, 2017
- CVE-2017-933336Monitor
OpenWebif 1.2.5 allows remote code execution via a URL to the CallOPKG function in the IpkgController class in plugin/controllers/ipkg.py, w
HighCVSS 8.8No exploitEPSS 2%openwebif project · openwebifSep 17, 2017
- CVE-2018-2033231Monitor
An issue has been discovered in the OpenWebif plugin through 1.2.4 for Enigma2 based devices.
HighCVSS 7.5No exploitEPSS 2%openwebif project · openwebifDec 21, 2018
- CVE-2021-3811321Monitor
In addBouquet in js/bqe.js in OpenWebif (aka e2openplugin-OpenWebif) through 1.4.7, inserting JavaScript into the Add Bouquet feature of the
MediumCVSS 5.4No exploitEPSS 1%openwebif project · openwebifAug 4, 2021