davistribe records
1 published records for vendor davistribe. 0 of them have been exploited in the wild (listed in CISA KEV) and 1 have a ready-made attack tool.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 1 · 100%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.
Records by year
Bar: total · dark part: CISA KEV.
Attack profile
All records
1 records| Action | CVE | Vulnerability | Severity | EPSS · Published |
|---|---|---|---|---|
40Plan | CVE-2012-4915Weaponized | Directory traversal vulnerability in the Google Doc Embedder plugin before 2.5.4 for WordPress allows remote attackers to read arbitrary filwordpress · wordpress · CWE-22 | Medium5.0 | 50.0%May 29, 2014 |
- CVE-2012-491540Plan
Directory traversal vulnerability in the Google Doc Embedder plugin before 2.5.4 for WordPress allows remote attackers to read arbitrary fil
MediumCVSS 5.0WeaponizedEPSS 50%wordpress · wordpressMay 29, 2014