gleeztech records
4 published records for vendor gleeztech.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-307 Improper Restriction of Excessive Authentication Attempts1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-639 Authorization Bypass Through User-Controlled Key1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
35Monitor | CVE-2018-13340No exploit | Gleez CMS 1.2.0 has CSRF, as demonstrated by a /page/add request.gleeztech · gleez cms · CWE-352 | High8.8 | — | 0.6% | Jul 5, 2018 |
21Monitor | CVE-2018-16703No exploit | A vulnerability in the Gleez CMS 1.2.0 login page could allow an unauthenticated, remote attacker to perform multiple user enumerations, whigleeztech · gleez cms · CWE-307 | Medium5.3 | — | 1.5% | Sep 7, 2018 |
21Monitor | CVE-2018-1999021No exploit | Gleezcms Gleez Cms version 1.3.0 contains a Cross Site Scripting (XSS) vulnerability in Profile page that can result in Inject arbitrary webgleeztech · gleezcms · CWE-79 | Medium5.4 | — | 0.6% | Jul 23, 2018 |
17Monitor | CVE-2018-16704No exploit | An issue was discovered in Gleez CMS v1.2.0.gleeztech · gleezcms · CWE-639 | Medium4.3 | — | 0.7% | Sep 7, 2018 |
- CVE-2018-1334035Monitor
Gleez CMS 1.2.0 has CSRF, as demonstrated by a /page/add request.
HighCVSS 8.8No exploitEPSS 0%gleeztech · gleez cmsJul 5, 2018
- CVE-2018-1670321Monitor
A vulnerability in the Gleez CMS 1.2.0 login page could allow an unauthenticated, remote attacker to perform multiple user enumerations, whi
MediumCVSS 5.3No exploitEPSS 1%gleeztech · gleez cmsSep 7, 2018
- CVE-2018-199902121Monitor
Gleezcms Gleez Cms version 1.3.0 contains a Cross Site Scripting (XSS) vulnerability in Profile page that can result in Inject arbitrary web
MediumCVSS 5.4No exploitEPSS 0%gleeztech · gleezcmsJul 23, 2018
- CVE-2018-1670417Monitor
An issue was discovered in Gleez CMS v1.2.0.
MediumCVSS 4.3No exploitEPSS 0%gleeztech · gleezcmsSep 7, 2018