Visualware kayıtları
visualware üreticisine ait 8 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-611 Improper Restriction of XML External Entity Reference1
- CWE-749 Exposed Dangerous Method or Function1
- CWE-863 Incorrect Authorization1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
8 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
43Planlayın | CVE-2021-27198Kavram kanıtı | An issue was discovered in Visualware MyConnection Server before v11.1a.visualware · myconnection server · CWE-434 | Kritik9,8 | — | %13,6 | 26 Şub 2021 |
35İzleyin | CVE-2023-42034İstismar yok | Visualware MyConnection Server doRTAAccessCTConfig Cross-Site Scripting Authentication Bypass Vulnerabilityvisualware · myconnection server · CWE-79 | Yüksek8,8 | — | %1,4 | 2 May 2024 |
30İzleyin | CVE-2023-42032İstismar yok | Visualware MyConnection Server doRTAAccessUPass Exposed Dangerous Method Information Disclosure Vulnerabilityvisualware · myconnection server · CWE-749 | Yüksek7,5 | — | %1,2 | 2 May 2024 |
30İzleyin | CVE-2021-27509İstismar yok | In Visualware MyConnection Server before 11.0b build 5382, each published report is not associated with its own access code.visualware · myconnection server · CWE-863 | Yüksek7,5 | — | %1,0 | 19 Şub 2021 |
29İzleyin | CVE-2023-42033İstismar yok | Visualware MyConnection Server doPostUploadfiles Directory Traversal Remote Code Execution Vulnerabilityvisualware · myconnection server · CWE-22 | Yüksek7,2 | — | %3,3 | 2 May 2024 |
26İzleyin | CVE-2023-42035İstismar yok | Visualware MyConnection Server doIForward XML External Entity Processing Information Disclosure Vulnerabilityvisualware · myconnection server · CWE-611 | Orta6,5 | — | %1,2 | 2 May 2024 |
18İzleyin | CVE-2014-5113İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in test.php in Visualware MyConnection Server 9.7i allow remote attackers to inject arbivisualware · myconnection server · CWE-79 | Orta4,3 | — | %1,9 | 28 Tem 2014 |
17İzleyin | CVE-2015-2043İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in Visualware MyConnection Server 8.2b allow remote attackers to inject arbitrary web scvisualware · myconnection server · CWE-79 | Orta4,3 | — | %1,0 | 25 Şub 2015 |
- CVE-2021-2719843Planlayın
An issue was discovered in Visualware MyConnection Server before v11.1a.
KritikCVSS 9,8Kavram kanıtıEPSS %14visualware · myconnection server26 Şub 2021
- CVE-2023-4203435İzleyin
Visualware MyConnection Server doRTAAccessCTConfig Cross-Site Scripting Authentication Bypass Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1visualware · myconnection server2 May 2024
- CVE-2023-4203230İzleyin
Visualware MyConnection Server doRTAAccessUPass Exposed Dangerous Method Information Disclosure Vulnerability
YüksekCVSS 7,5İstismar yokEPSS %1visualware · myconnection server2 May 2024
- CVE-2021-2750930İzleyin
In Visualware MyConnection Server before 11.0b build 5382, each published report is not associated with its own access code.
YüksekCVSS 7,5İstismar yokEPSS %1visualware · myconnection server19 Şub 2021
- CVE-2023-4203329İzleyin
Visualware MyConnection Server doPostUploadfiles Directory Traversal Remote Code Execution Vulnerability
YüksekCVSS 7,2İstismar yokEPSS %3visualware · myconnection server2 May 2024
- CVE-2023-4203526İzleyin
Visualware MyConnection Server doIForward XML External Entity Processing Information Disclosure Vulnerability
OrtaCVSS 6,5İstismar yokEPSS %1visualware · myconnection server2 May 2024
- CVE-2014-511318İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in test.php in Visualware MyConnection Server 9.7i allow remote attackers to inject arbi
OrtaCVSS 4,3İstismar yokEPSS %2visualware · myconnection server28 Tem 2014
- CVE-2015-204317İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in Visualware MyConnection Server 8.2b allow remote attackers to inject arbitrary web sc
OrtaCVSS 4,3İstismar yokEPSS %1visualware · myconnection server25 Şub 2015