gmo-pg records
2 published records for vendor gmo-pg.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-20 Improper Input Validation1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
2 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
28Monitor | CVE-2018-0658No exploit | Input validation issue in EC-CUBE Payment Module (2.12) version 3.5.23 and earlier, EC-CUBE Payment Module (2.11) version 2.3.17 and earlierec-cube · ec-cube payment module · CWE-20 | High7.2 | — | 1.0% | Sep 7, 2018 |
19Monitor | CVE-2018-0657No exploit | Cross-site scripting vulnerability in EC-CUBE Payment Module and GMO-PG Payment Module (PG Multi-Payment Service) for EC-CUBE (EC-CUBE Paymeec-cube · ec-cube payment module · CWE-79 | Medium4.8 | — | 0.5% | Sep 7, 2018 |
- CVE-2018-065828Monitor
Input validation issue in EC-CUBE Payment Module (2.12) version 3.5.23 and earlier, EC-CUBE Payment Module (2.11) version 2.3.17 and earlier
HighCVSS 7.2No exploitEPSS 1%ec-cube · ec-cube payment moduleSep 7, 2018
- CVE-2018-065719Monitor
Cross-site scripting vulnerability in EC-CUBE Payment Module and GMO-PG Payment Module (PG Multi-Payment Service) for EC-CUBE (EC-CUBE Payme
MediumCVSS 4.8No exploitEPSS 0%ec-cube · ec-cube payment moduleSep 7, 2018