consona records
9 published records for vendor consona.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 3
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Records by year
Bar: total · dark part: CISA KEV.
Recurring classes
- CWE-264 Permissions, Privileges, and Access Controls2
- CWE-310 Cryptographic Issues2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer1
- CWE-287 Improper Authentication1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
9 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2010-1912No exploit | The SdcWebSecureBase interface in tgctlcm.dll in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance allows remote attackers tconsona · consona dynamic agent · CWE-264 | Critical9.3 | — | 5.1% | May 12, 2010 |
39Monitor | CVE-2010-1913No exploit | The default configuration of pluginlicense.ini for the SdcWebSecureBase interface in tgctlcm.dll in Consona Live Assistance, Dynamic Agent, consona · consona dynamic agent · CWE-16 | Critical9.3 | — | 5.0% | May 12, 2010 |
38Monitor | CVE-2010-1911No exploit | The site-locking implementation in the SdcWebSecureBase interface in tgctlcm.dll in Consona Live Assistance, Dynamic Agent, and Subscriber Aconsona · consona dynamic agent · CWE-310 | Critical9.3 | — | 3.1% | May 12, 2010 |
38Monitor | CVE-2010-1908No exploit | The SdcUser.TgConCtl ActiveX control in tgctlcm.dll in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance does not properly rconsona · consona dynamic agent · CWE-264 | Critical9.3 | — | 2.3% | May 12, 2010 |
32Monitor | CVE-2010-1909No exploit | Buffer overflow in the RunCmd method in the SdcUser.TgConCtl ActiveX control in tgctlcm.dll in Consona Live Assistance, Dynamic Agent, and Sconsona · consona dynamic agent · CWE-119 | High7.6 | — | 5.6% | May 12, 2010 |
29Monitor | CVE-2010-1906No exploit | tgsrv.exe in the Repair Service in Consona Dynamic Agent, Repair Manager, Subscriber Activation, and Subscriber Agent relies on a predictablconsona · consona dynamic agent · CWE-310 | High7.2 | — | 4.0% | May 12, 2010 |
21Monitor | CVE-2010-1910No exploit | The Forgot Password implementation in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance allows remote attackers to reset pasconsona · consona dynamic agent · CWE-287 | Medium5.1 | — | 2.4% | May 12, 2010 |
18Monitor | CVE-2010-1905Proof of concept | Multiple cross-site scripting (XSS) vulnerabilities in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance allow remote attackconsona · consona live assistance · CWE-79 | Medium4.3 | — | 2.4% | May 12, 2010 |
17Monitor | CVE-2010-1907No exploit | The SdcUser.TgConCtl ActiveX control in tgctlcm.dll in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance allows remote attacconsona · consona dynamic agent · CWE-200 | Medium4.3 | — | 1.5% | May 12, 2010 |
- CVE-2010-191239Monitor
The SdcWebSecureBase interface in tgctlcm.dll in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance allows remote attackers t
CriticalCVSS 9.3No exploitEPSS 5%consona · consona dynamic agentMay 12, 2010
- CVE-2010-191339Monitor
The default configuration of pluginlicense.ini for the SdcWebSecureBase interface in tgctlcm.dll in Consona Live Assistance, Dynamic Agent,
CriticalCVSS 9.3No exploitEPSS 5%consona · consona dynamic agentMay 12, 2010
- CVE-2010-191138Monitor
The site-locking implementation in the SdcWebSecureBase interface in tgctlcm.dll in Consona Live Assistance, Dynamic Agent, and Subscriber A
CriticalCVSS 9.3No exploitEPSS 3%consona · consona dynamic agentMay 12, 2010
- CVE-2010-190838Monitor
The SdcUser.TgConCtl ActiveX control in tgctlcm.dll in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance does not properly r
CriticalCVSS 9.3No exploitEPSS 2%consona · consona dynamic agentMay 12, 2010
- CVE-2010-190932Monitor
Buffer overflow in the RunCmd method in the SdcUser.TgConCtl ActiveX control in tgctlcm.dll in Consona Live Assistance, Dynamic Agent, and S
HighCVSS 7.6No exploitEPSS 5%consona · consona dynamic agentMay 12, 2010
- CVE-2010-190629Monitor
tgsrv.exe in the Repair Service in Consona Dynamic Agent, Repair Manager, Subscriber Activation, and Subscriber Agent relies on a predictabl
HighCVSS 7.2No exploitEPSS 4%consona · consona dynamic agentMay 12, 2010
- CVE-2010-191021Monitor
The Forgot Password implementation in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance allows remote attackers to reset pas
MediumCVSS 5.1No exploitEPSS 2%consona · consona dynamic agentMay 12, 2010
- CVE-2010-190518Monitor
Multiple cross-site scripting (XSS) vulnerabilities in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance allow remote attack
MediumCVSS 4.3Proof of conceptEPSS 2%consona · consona live assistanceMay 12, 2010
- CVE-2010-190717Monitor
The SdcUser.TgConCtl ActiveX control in tgctlcm.dll in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance allows remote attac
MediumCVSS 4.3No exploitEPSS 1%consona · consona dynamic agentMay 12, 2010