bumsys project records
8 published records for vendor bumsys project.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-1021 Improper Restriction of Rendered UI Layers or Frames1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
8 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
37Monitor | CVE-2023-2554No exploit | External Control of File Name or Path in unilogies/bumsysbumsys project · bumsys · CWE-73 | High7.2 | — | 29.1% | May 5, 2023 |
37Monitor | CVE-2023-0455Proof of concept | Unrestricted Upload of File with Dangerous Type in unilogies/bumsysbumsys project · bumsys · CWE-434 | High8.8 | — | 5.7% | Jan 26, 2023 |
36Monitor | CVE-2023-2551No exploit | PHP Remote File Inclusion in unilogies/bumsysbumsys project · bumsys · CWE-98 | High8.8 | — | 1.9% | May 5, 2023 |
35Monitor | CVE-2023-2552No exploit | Cross-Site Request Forgery (CSRF) in unilogies/bumsysbumsys project · bumsys · CWE-352 | High8.8 | — | 0.4% | May 5, 2023 |
28Monitor | CVE-2023-2832No exploit | SQL Injection in unilogies/bumsysbumsys project · bumsys · CWE-89 | High7.2 | — | 0.9% | May 22, 2023 |
26Monitor | CVE-2023-1361No exploit | SQL Injection in unilogies/bumsysbumsys project · bumsys · CWE-89 | Medium6.5 | — | 0.8% | Mar 13, 2023 |
24Monitor | CVE-2023-1362Proof of concept | Improper Restriction of Rendered UI Layers or Frames in unilogies/bumsysbumsys project · bumsys · CWE-1021 | Medium6.1 | — | 1.4% | Mar 13, 2023 |
21Monitor | CVE-2023-2553No exploit | Cross-site Scripting (XSS) - Stored in unilogies/bumsysbumsys project · bumsys · CWE-79 | Medium5.4 | — | 0.4% | May 5, 2023 |
- CVE-2023-255437Monitor
External Control of File Name or Path in unilogies/bumsys
HighCVSS 7.2No exploitEPSS 29%bumsys project · bumsysMay 5, 2023
- CVE-2023-045537Monitor
Unrestricted Upload of File with Dangerous Type in unilogies/bumsys
HighCVSS 8.8Proof of conceptEPSS 6%bumsys project · bumsysJan 26, 2023
- CVE-2023-255136Monitor
PHP Remote File Inclusion in unilogies/bumsys
HighCVSS 8.8No exploitEPSS 2%bumsys project · bumsysMay 5, 2023
- CVE-2023-255235Monitor
Cross-Site Request Forgery (CSRF) in unilogies/bumsys
HighCVSS 8.8No exploitEPSS 0%bumsys project · bumsysMay 5, 2023
- CVE-2023-283228Monitor
SQL Injection in unilogies/bumsys
HighCVSS 7.2No exploitEPSS 1%bumsys project · bumsysMay 22, 2023
- CVE-2023-136126Monitor
SQL Injection in unilogies/bumsys
MediumCVSS 6.5No exploitEPSS 1%bumsys project · bumsysMar 13, 2023
- CVE-2023-136224Monitor
Improper Restriction of Rendered UI Layers or Frames in unilogies/bumsys
MediumCVSS 6.1Proof of conceptEPSS 1%bumsys project · bumsysMar 13, 2023
- CVE-2023-255321Monitor
Cross-site Scripting (XSS) - Stored in unilogies/bumsys
MediumCVSS 5.4No exploitEPSS 0%bumsys project · bumsysMay 5, 2023