corebos records
9 published records for vendor corebos.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-1236 Improper Neutralization of Formula Elements in a CSV File1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-620 Unverified Password Change1
- CWE-732 Incorrect Permission Assignment for Critical Resource1
- CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
9 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2022-4446No exploit | PHP Remote File Inclusion in tsolucio/coreboscorebos · corebos · CWE-98 | Critical9.8 | — | 1.3% | Dec 13, 2022 |
39Monitor | CVE-2023-3069No exploit | Unverified Password Change in tsolucio/coreboscorebos · corebos · CWE-620 | Critical9.8 | — | 0.6% | Jun 2, 2023 |
32Monitor | CVE-2023-48029No exploit | Corebos 8.0 and below is vulnerable to CSV Injection.corebos · corebos · CWE-1236 | High8.0 | — | 1.3% | Nov 17, 2023 |
26Monitor | CVE-2023-3075No exploit | Cross-Site Request Forgery (CSRF) in tsolucio/coreboscorebos · corebos · CWE-352 | Medium6.5 | — | 0.3% | Jun 2, 2023 |
21Monitor | CVE-2018-1000547No exploit | coreBOS version 7.0 and earlier contains a Incorrect Access Control vulnerability in Module: Contacts that can result in The error allows yocorebos · corebos · CWE-732 | Medium5.3 | — | 0.8% | Jun 26, 2018 |
21Monitor | CVE-2023-3070No exploit | Cross-site Scripting (XSS) - Stored in tsolucio/coreboscorebos · corebos · CWE-79 | Medium5.4 | — | 0.6% | Jun 2, 2023 |
21Monitor | CVE-2023-1527No exploit | Cross-site Scripting (XSS) - Generic in tsolucio/coreboscorebos · corebos · CWE-79 | Medium5.4 | — | 0.5% | Mar 20, 2023 |
21Monitor | CVE-2023-3074No exploit | Cross-site Scripting (XSS) - Stored in tsolucio/coreboscorebos · corebos · CWE-79 | Medium5.4 | — | 0.5% | Jun 2, 2023 |
21Monitor | CVE-2023-3073No exploit | Cross-site Scripting (XSS) - Stored in tsolucio/coreboscorebos · corebos · CWE-79 | Medium5.4 | — | 0.5% | Jun 2, 2023 |
- CVE-2022-444639Monitor
PHP Remote File Inclusion in tsolucio/corebos
CriticalCVSS 9.8No exploitEPSS 1%corebos · corebosDec 13, 2022
- CVE-2023-306939Monitor
Unverified Password Change in tsolucio/corebos
CriticalCVSS 9.8No exploitEPSS 1%corebos · corebosJun 2, 2023
- CVE-2023-4802932Monitor
Corebos 8.0 and below is vulnerable to CSV Injection.
HighCVSS 8.0No exploitEPSS 1%corebos · corebosNov 17, 2023
- CVE-2023-307526Monitor
Cross-Site Request Forgery (CSRF) in tsolucio/corebos
MediumCVSS 6.5No exploitEPSS 0%corebos · corebosJun 2, 2023
- CVE-2018-100054721Monitor
coreBOS version 7.0 and earlier contains a Incorrect Access Control vulnerability in Module: Contacts that can result in The error allows yo
MediumCVSS 5.3No exploitEPSS 1%corebos · corebosJun 26, 2018
- CVE-2023-307021Monitor
Cross-site Scripting (XSS) - Stored in tsolucio/corebos
MediumCVSS 5.4No exploitEPSS 1%corebos · corebosJun 2, 2023
- CVE-2023-152721Monitor
Cross-site Scripting (XSS) - Generic in tsolucio/corebos
MediumCVSS 5.4No exploitEPSS 1%corebos · corebosMar 20, 2023
- CVE-2023-307421Monitor
Cross-site Scripting (XSS) - Stored in tsolucio/corebos
MediumCVSS 5.4No exploitEPSS 1%corebos · corebosJun 2, 2023
- CVE-2023-307321Monitor
Cross-site Scripting (XSS) - Stored in tsolucio/corebos
MediumCVSS 5.4No exploitEPSS 0%corebos · corebosJun 2, 2023