Skip to content
Noroxi

canto records

9 published records for vendor canto.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
3
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 20
  2. 22
  3. 23
  4. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

9 records
  • CVE-2023-3452
    41Plan

    Canto <= 3.0.4 - Unauthenticated Remote File Inclusion

    CriticalCVSS 9.8Proof of conceptEPSS 7%

    canto · cantoAug 11, 2023

  • CVE-2022-40305
    39Monitor

    A Server-Side Request Forgery issue in Canto Cumulus through 11.1.3 allows attackers to enumerate the internal network, overload network res

    CriticalCVSS 9.8No exploitEPSS 2%

    canto · cantoSep 9, 2022

  • CVE-2024-4936
    39Monitor

    Canto <= 3.0.8 - Unauthenticated Remote File Inclusion

    CriticalCVSS 9.8No exploitEPSS 1%

    canto · cantoJun 14, 2024

  • CVE-2024-25096
    39Monitor

    WordPress canto plugin <= 3.0.7 - Unauth. Remote Code Execution (RCE) vulnerability

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    canto · cantoApr 3, 2024

  • CVE-2013-7416
    31Monitor

    canto_curses/guibase.py in Canto Curses before 0.9.0 allows remote feed servers to execute arbitrary commands via shell metacharacters in a

    HighCVSS 7.5No exploitEPSS 3%

    canto · canto cursesDec 3, 2014

  • CVE-2020-28976
    29Monitor

    The Canto plugin 1.3.0 for WordPress contains a blind SSRF vulnerability.

    MediumCVSS 5.3Proof of conceptEPSS 28%

    canto · cantoNov 30, 2020

  • CVE-2020-24063
    28Monitor

    The Canto plugin 1.3.0 for WordPress allows includes/lib/download.php?subdomain= SSRF.

    HighCVSS 7.2No exploitEPSS 1%

    canto · cantoNov 10, 2020

  • CVE-2020-28978
    26Monitor

    The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability.

    MediumCVSS 5.3Proof of conceptEPSS 15%

    canto · cantoNov 30, 2020

  • CVE-2020-28977
    26Monitor

    The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability.

    MediumCVSS 5.3Proof of conceptEPSS 15%

    canto · cantoNov 30, 2020