dkd records
6 published records for vendor dkd.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-862 Missing Authorization3
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')1
- CWE-770 Allocation of Resources Without Limits or Throttling1
The weakness classes this vendor ships most often: where to look.
CWEAll records
6 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
30Monitor | CVE-2013-7400No exploit | The Direct Mail (direct_mail) extension before 3.1.2 for TYPO3 allows remote attackers to obtain sensitive information by leveraging impropedkd · direct mail · CWE-200 | High7.5 | — | 1.7% | Dec 29, 2017 |
24Monitor | CVE-2020-12699No exploit | The direct_mail extension through 5.2.3 for TYPO3 has an Open Redirect via jumpUrl.dkd · direct mail · CWE-601 | Medium6.1 | — | 0.8% | May 13, 2020 |
21Monitor | CVE-2020-12697No exploit | The direct_mail extension through 5.2.3 for TYPO3 allows Denial of Service via log entries.dkd · direct mail · CWE-770 | Medium5.3 | — | 1.3% | May 13, 2020 |
17Monitor | CVE-2020-12698No exploit | The direct_mail extension through 5.2.3 for TYPO3 has Broken Access Control for newsletter subscriber tables.dkd · direct mail · CWE-862 | Medium4.3 | — | 0.8% | May 13, 2020 |
17Monitor | CVE-2020-12700No exploit | The direct_mail extension through 5.2.3 for TYPO3 allows Information Disclosure via a newsletter subscriber data Special Query.dkd · direct mail · CWE-862 | Medium4.3 | — | 0.8% | May 13, 2020 |
17Monitor | CVE-2019-16698No exploit | The direct_mail (aka Direct Mail) extension through 5.2.2 for TYPO3 has a missing access check in the backend module, allowing a user (with dkd · direct mail · CWE-862 | Medium4.3 | — | 0.7% | Oct 16, 2019 |
- CVE-2013-740030Monitor
The Direct Mail (direct_mail) extension before 3.1.2 for TYPO3 allows remote attackers to obtain sensitive information by leveraging imprope
HighCVSS 7.5No exploitEPSS 2%dkd · direct mailDec 29, 2017
- CVE-2020-1269924Monitor
The direct_mail extension through 5.2.3 for TYPO3 has an Open Redirect via jumpUrl.
MediumCVSS 6.1No exploitEPSS 1%dkd · direct mailMay 13, 2020
- CVE-2020-1269721Monitor
The direct_mail extension through 5.2.3 for TYPO3 allows Denial of Service via log entries.
MediumCVSS 5.3No exploitEPSS 1%dkd · direct mailMay 13, 2020
- CVE-2020-1269817Monitor
The direct_mail extension through 5.2.3 for TYPO3 has Broken Access Control for newsletter subscriber tables.
MediumCVSS 4.3No exploitEPSS 1%dkd · direct mailMay 13, 2020
- CVE-2020-1270017Monitor
The direct_mail extension through 5.2.3 for TYPO3 allows Information Disclosure via a newsletter subscriber data Special Query.
MediumCVSS 4.3No exploitEPSS 1%dkd · direct mailMay 13, 2020
- CVE-2019-1669817Monitor
The direct_mail (aka Direct Mail) extension through 5.2.2 for TYPO3 has a missing access check in the backend module, allowing a user (with
MediumCVSS 4.3No exploitEPSS 1%dkd · direct mailOct 16, 2019