status records
8 published records for vendor status.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 2
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-20 Improper Input Validation1
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-306 Missing Authentication for Critical Function1
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
8 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2019-12164No exploit | ubuntu-server.js in Status React Native Desktop before v0.57.8_mobile_ui allows Remote Code Execution.status · react native desktop | Critical9.8 | — | 4.1% | Jul 23, 2019 |
39Monitor | CVE-2010-4660No exploit | Unspecified vulnerability in statusnet through 2010 due to the way addslashes are used in SQL string escapes..status · statusnet · CWE-20 | Critical9.8 | — | 1.3% | Nov 20, 2019 |
30Monitor | CVE-2013-4137No exploit | Multiple SQL injection vulnerabilities in StatusNet 1.0 before 1.0.2 and 1.1.0 allow remote attackers to execute arbitrary SQL commands via status · statusnet · CWE-89 | High7.5 | — | 1.1% | Oct 11, 2013 |
24Monitor | CVE-2011-3370No exploit | statusnet before 0.9.9 has XSSstatus · statusnet · CWE-79 | Medium6.1 | — | 1.0% | Nov 12, 2019 |
24Monitor | CVE-2010-4659No exploit | Cross-site scripting (XSS) vulnerability in statusnet through 2010 in error message contents.status · statusnet · CWE-79 | Medium6.1 | — | 0.9% | Nov 20, 2019 |
22Monitor | CVE-2023-25780No exploit | Status Internet Co.,Ltd. PowerBPM - Broken Access Controlstatus · powerbpm · CWE-306 | Medium5.7 | — | 0.3% | Jun 2, 2023 |
21Monitor | CVE-2010-4658No exploit | statusnet through 2010 allows attackers to spoof syslog messages via newline injection attacks.status · statusnet · CWE-74 | Medium5.3 | — | 0.9% | Feb 7, 2020 |
20Monitor | CVE-2011-3802No exploit | StatusNet 0.9.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation status · statusnet · CWE-200 | Medium5.0 | — | 1.2% | Sep 23, 2011 |
- CVE-2019-1216440Plan
ubuntu-server.js in Status React Native Desktop before v0.57.8_mobile_ui allows Remote Code Execution.
CriticalCVSS 9.8No exploitEPSS 4%status · react native desktopJul 23, 2019
- CVE-2010-466039Monitor
Unspecified vulnerability in statusnet through 2010 due to the way addslashes are used in SQL string escapes..
CriticalCVSS 9.8No exploitEPSS 1%status · statusnetNov 20, 2019
- CVE-2013-413730Monitor
Multiple SQL injection vulnerabilities in StatusNet 1.0 before 1.0.2 and 1.1.0 allow remote attackers to execute arbitrary SQL commands via
HighCVSS 7.5No exploitEPSS 1%status · statusnetOct 11, 2013
- CVE-2011-337024Monitor
statusnet before 0.9.9 has XSS
MediumCVSS 6.1No exploitEPSS 1%status · statusnetNov 12, 2019
- CVE-2010-465924Monitor
Cross-site scripting (XSS) vulnerability in statusnet through 2010 in error message contents.
MediumCVSS 6.1No exploitEPSS 1%status · statusnetNov 20, 2019
- CVE-2023-2578022Monitor
Status Internet Co.,Ltd. PowerBPM - Broken Access Control
MediumCVSS 5.7No exploitEPSS 0%status · powerbpmJun 2, 2023
- CVE-2010-465821Monitor
statusnet through 2010 allows attackers to spoof syslog messages via newline injection attacks.
MediumCVSS 5.3No exploitEPSS 1%status · statusnetFeb 7, 2020
- CVE-2011-380220Monitor
StatusNet 0.9.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation
MediumCVSS 5.0No exploitEPSS 1%status · statusnetSep 23, 2011