İçeriğe atla
Noroxi

rallly kayıtları

rallly üreticisine ait 11 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
0
Düzeltme kaydı olan
%90,9
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

11 kayıt
  • CVE-2025-47781
    39İzleyin

    Rallly Insufficient Password Login Token Entropy Leads to Account Takeover

    KritikCVSS 9,8İstismar yokEPSS %1

    rallly · rallly14 May 2025

  • CVE-2025-65021
    36İzleyin

    Rallly Has Unauthorized Poll Finalization via Insecure Direct Object Reference (IDOR)

    KritikCVSS 9,1İstismar yokEPSS %0

    rallly · rallly19 Kas 2025

  • CVE-2025-65033
    32İzleyin

    Rallly Broken Authorization: Any User Can Pause or Resume Any Poll via Poll ID Manipulation

    YüksekCVSS 8,1İstismar yokEPSS %0

    rallly · rallly19 Kas 2025

  • CVE-2025-65034
    32İzleyin

    Rallly Improper Authorization Allows Reopening of Any Finalized Poll via Public pollId

    YüksekCVSS 8,1İstismar yokEPSS %0

    rallly · rallly19 Kas 2025

  • CVE-2025-65029
    32İzleyin

    Rallly Has an IDOR Vulnerability in Participant Deletion Endpoint Allows Unauthorized Removal of Poll Participants

    YüksekCVSS 8,1İstismar yokEPSS %0

    rallly · rallly19 Kas 2025

  • CVE-2025-66027
    28İzleyin

    Rallly Information Disclosure Vulnerability in Participant API Leaks Names and Emails Despite Pro Privacy Settings

    YüksekCVSS 7,1İstismar yokEPSS %0

    rallly · rallly28 Kas 2025

  • CVE-2025-65030
    28İzleyin

    Rallly Improper Authorization in Comment Deletion Endpoint Allows Unauthorized Comment Removal

    YüksekCVSS 7,1İstismar yokEPSS %0

    rallly · rallly19 Kas 2025

  • CVE-2025-65032
    26İzleyin

    Rallly Has an IDOR Vulnerability in Participant Rename Function Allows Unauthorized Modification of Other Users’ Names

    OrtaCVSS 6,5İstismar yokEPSS %0

    rallly · rallly19 Kas 2025

  • CVE-2025-65028
    26İzleyin

    Rallly Has an IDOR Vulnerability in Vote Update Endpoint Allows Unauthorized Manipulation of Participant Votes

    OrtaCVSS 6,5İstismar yokEPSS %0

    rallly · rallly19 Kas 2025

  • CVE-2025-65031
    26İzleyin

    Rallly Improper Authorization in Comment Endpoint Allows User Impersonation

    OrtaCVSS 6,5İstismar yokEPSS %0

    rallly · rallly19 Kas 2025

  • CVE-2025-65020
    26İzleyin

    Rallly Has Unauthorized Poll Duplication via Insecure Direct Object Reference (IDOR)

    OrtaCVSS 6,5İstismar yokEPSS %0

    rallly · rallly19 Kas 2025