daj records

7 published records for vendor daj.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

7 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
32Monitor	CVE-2017-10860No exploit	Untrusted search path vulnerability in "i-filter 6.0 installer" timestamp of code signing is before 23 Aug 2017 (JST) allows an attacker to daj · i-filter installer · CWE-426 RCE	High7.8	—	1.8%	Sep 15, 2017
31Monitor	CVE-2017-10859No exploit	Untrusted search path vulnerability in "i-filter 6.0 installer" timestamp of code signing is before 23 Aug 2017 (JST) allows an attacker to daj · i-filter installer · CWE-426 Local privilege escalation	High7.8	—	1.1%	Sep 15, 2017
31Monitor	CVE-2017-10858No exploit	Untrusted search path vulnerability in "i-filter 6.0 install program" file version 1.0.8.1 and earlier allows an attacker to gain privilegesdaj · i-filter installer · CWE-426 Local privilege escalation	High7.8	—	1.1%	Sep 15, 2017
24Monitor	CVE-2018-16181No exploit	HTTP header injection vulnerability in i-FILTER Ver.9.50R05 and earlier may allow remote attackers to inject arbitrary HTTP headers and conddaj · i-filter · CWE-113 Pre-auth	Medium6.1	—	0.8%	Jan 9, 2019
24Monitor	CVE-2018-16180No exploit	Cross-site scripting vulnerability in i-FILTER Ver.9.50R05 and earlier allows remote attackers to inject arbitrary web script or HTML via undaj · i-filter · CWE-79 Pre-auth XSS	Medium6.1	—	0.8%	Jan 9, 2019
21Monitor	CVE-2023-22278No exploit	m-FILTER prior to Ver.5.70R01 (Ver.5 Series) and m-FILTER prior to Ver.4.87R04 (Ver.4 Series) allows a remote unauthenticated attacker to bydaj · m-filter · CWE-287 Pre-auth Auth bypass	Medium5.3	—	0.7%	Jan 17, 2023
14Monitor	CVE-2022-21170No exploit	Improper check for certificate revocation in i-FILTER Ver.10.45R01 and earlier, i-FILTER Ver.9.50R10 and earlier, i-FILTER Browser & Cloud Mdaj · i-filter browser \& cloud multiagent · CWE-295 Pre-auth Weak crypto	Low3.7	—	1.0%	Mar 10, 2022

CVE-2017-10860
32Monitor
Untrusted search path vulnerability in "i-filter 6.0 installer" timestamp of code signing is before 23 Aug 2017 (JST) allows an attacker to
HighCVSS 7.8No exploitEPSS 2%
- RCE
daj · i-filter installerSep 15, 2017
CVE-2017-10859
31Monitor
Untrusted search path vulnerability in "i-filter 6.0 installer" timestamp of code signing is before 23 Aug 2017 (JST) allows an attacker to
HighCVSS 7.8No exploitEPSS 1%
- Local privilege escalation
daj · i-filter installerSep 15, 2017
CVE-2017-10858
31Monitor
Untrusted search path vulnerability in "i-filter 6.0 install program" file version 1.0.8.1 and earlier allows an attacker to gain privileges
HighCVSS 7.8No exploitEPSS 1%
- Local privilege escalation
daj · i-filter installerSep 15, 2017
CVE-2018-16181
24Monitor
HTTP header injection vulnerability in i-FILTER Ver.9.50R05 and earlier may allow remote attackers to inject arbitrary HTTP headers and cond
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
daj · i-filterJan 9, 2019
CVE-2018-16180
24Monitor
Cross-site scripting vulnerability in i-FILTER Ver.9.50R05 and earlier allows remote attackers to inject arbitrary web script or HTML via un
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
- XSS
daj · i-filterJan 9, 2019
CVE-2023-22278
21Monitor
m-FILTER prior to Ver.5.70R01 (Ver.5 Series) and m-FILTER prior to Ver.4.87R04 (Ver.4 Series) allows a remote unauthenticated attacker to by
MediumCVSS 5.3No exploitEPSS 1%
- Pre-auth
- Auth bypass
daj · m-filterJan 17, 2023
CVE-2022-21170
14Monitor
Improper check for certificate revocation in i-FILTER Ver.10.45R01 and earlier, i-FILTER Ver.9.50R10 and earlier, i-FILTER Browser & Cloud M
LowCVSS 3.7No exploitEPSS 1%
- Pre-auth
- Weak crypto
daj · i-filter browser \& cloud multiagentMar 10, 2022