ikus-soft records

44 published records for vendor ikus-soft.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 95.5%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

44 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2022-3268No exploit	Weak Password Requirements in ikus060/minarcaikus-soft · minarca · CWE-521 Pre-auth	Critical9.8	—	1.4%	Sep 22, 2022
39Monitor	CVE-2022-3362No exploit	Insufficient Session Expiration in ikus060/rdiffwebikus-soft · rdiffweb · CWE-613 Pre-auth	Critical9.8	—	1.1%	Nov 14, 2022
39Monitor	CVE-2022-4719No exploit	Business Logic Errors in ikus060/rdiffwebikus-soft · rdiffweb · CWE-840 Pre-auth	Critical9.8	—	1.0%	Dec 27, 2022
39Monitor	CVE-2022-3327No exploit	Missing Authentication for Critical Function in ikus060/rdiffwebikus-soft · rdiffweb · CWE-306 Pre-auth Auth bypass	Critical9.8	—	1.0%	Oct 19, 2022
39Monitor	CVE-2022-3363No exploit	Business Logic Errors in ikus060/rdiffwebikus-soft · rdiffweb · CWE-840 Pre-auth	Critical9.8	—	0.9%	Oct 26, 2022
39Monitor	CVE-2022-3269No exploit	Session Fixation in ikus060/rdiffwebikus-soft · rdiffweb · CWE-384 Pre-auth	Critical9.8	—	0.9%	Sep 23, 2022
39Monitor	CVE-2022-4724No exploit	Improper Access Control in ikus060/rdiffwebikus-soft · rdiffweb · CWE-284 Pre-auth Broken access control (IDOR)	Critical9.8	—	0.8%	Dec 27, 2022
39Monitor	CVE-2022-4314No exploit	Improper Privilege Management in ikus060/rdiffwebikus-soft · rdiffweb · CWE-269 Pre-auth	Critical9.8	—	0.8%	Dec 12, 2022
39Monitor	CVE-2022-3439No exploit	Allocation of Resources Without Limits or Throttling in ikus060/rdiffwebikus-soft · rdiffweb · CWE-770 Pre-auth Denial of service	Critical9.8	—	0.8%	Oct 14, 2022
39Monitor	CVE-2022-3273No exploit	Allocation of Resources Without Limits or Throttling in ikus060/rdiffwebikus-soft · rdiffweb · CWE-770 Pre-auth Denial of service	Critical9.8	—	0.5%	Oct 6, 2022
39Monitor	CVE-2022-3457No exploit	Origin Validation Error in ikus060/rdiffwebikus-soft · rdiffweb · CWE-346 Pre-auth	Critical9.8	—	0.4%	Oct 13, 2022
39Monitor	CVE-2022-3456No exploit	Allocation of Resources Without Limits or Throttling in ikus060/rdiffwebikus-soft · rdiffweb · CWE-770 Pre-auth Denial of service	Critical9.8	—	0.4%	Oct 13, 2022
35Monitor	CVE-2022-3167No exploit	Improper Restriction of Rendered UI Layers or Frames in ikus060/rdiffwebikus-soft · rdiffweb · CWE-1021 Pre-auth	High8.8	—	1.1%	Sep 8, 2022
35Monitor	CVE-2022-3179No exploit	Weak Password Requirements in ikus060/rdiffwebikus-soft · rdiffweb · CWE-521	High8.8	—	1.0%	Sep 13, 2022
35Monitor	CVE-2022-3221No exploit	Cross-Site Request Forgery (CSRF) in ikus060/rdiffwebikus-soft · rdiffweb · CWE-352 Pre-auth CSRF	High8.8	—	0.7%	Sep 15, 2022
35Monitor	CVE-2023-5289No exploit	Allocation of Resources Without Limits or Throttling in ikus060/rdiffwebikus-soft · rdiffweb · CWE-770 Denial of service	High8.8	—	0.7%	Sep 29, 2023
31Monitor	CVE-2022-3272No exploit	Improper Handling of Length Parameter Inconsistency in ikus060/rdiffwebikus-soft · rdiffweb · CWE-130 Pre-auth Denial of service	High7.5	—	1.7%	Sep 26, 2022
30Monitor	CVE-2022-3389No exploit	Path Traversal in ikus060/rdiffwebikus-soft · rdiffweb · CWE-22 Pre-auth Path traversal	High7.5	—	1.3%	Oct 6, 2022
30Monitor	CVE-2022-3371No exploit	No limit in length of "Token name" parameter results in DOS attack /memory corruption in ikus060/rdiffweb prior to 2.5.0a3 in ikus060/rdiffwebikus-soft · rdiffweb · CWE-770 Pre-auth Denial of service	High7.5	—	1.3%	Sep 30, 2022
30Monitor	CVE-2022-3364No exploit	No limit in length of "Fullname" parameter results in DOS attack /memory corruption in ikus060/rdiffweb prior to 2.5.0a3 in ikus060/rdiffwebikus-soft · rdiffweb · CWE-770 Pre-auth Denial of service	High7.5	—	1.1%	Sep 29, 2022
30Monitor	CVE-2022-3295No exploit	Allocation of Resources Without Limits or Throttling in ikus060/rdiffwebikus-soft · rdiffweb · CWE-770 Pre-auth Denial of service	High7.5	—	1.1%	Sep 26, 2022
30Monitor	CVE-2022-3298No exploit	Allocation of Resources Without Limits or Throttling in ikus060/rdiffwebikus-soft · rdiffweb · CWE-770 Pre-auth Denial of service	High7.5	—	1.1%	Sep 26, 2022
30Monitor	CVE-2022-3290No exploit	Improper Handling of Length Parameter Inconsistency in ikus060/rdiffwebikus-soft · rdiffweb · CWE-130 Pre-auth Denial of service	High7.5	—	0.8%	Sep 26, 2022
30Monitor	CVE-2022-3174No exploit	Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in ikus060/rdiffwebikus-soft · rdiffweb · CWE-614 Pre-auth	High7.5	—	0.7%	Sep 13, 2022
28Monitor	CVE-2022-4722No exploit	Authentication Bypass by Primary Weakness in ikus060/rdiffwebikus-soft · rdiffweb · CWE-305 Auth bypass	High7.2	—	1.2%	Dec 27, 2022

CVE-2022-3268
39Monitor
Weak Password Requirements in ikus060/minarca
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
ikus-soft · minarcaSep 22, 2022
CVE-2022-3362
39Monitor
Insufficient Session Expiration in ikus060/rdiffweb
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
ikus-soft · rdiffwebNov 14, 2022
CVE-2022-4719
39Monitor
Business Logic Errors in ikus060/rdiffweb
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
ikus-soft · rdiffwebDec 27, 2022
CVE-2022-3327
39Monitor
Missing Authentication for Critical Function in ikus060/rdiffweb
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Auth bypass
ikus-soft · rdiffwebOct 19, 2022
CVE-2022-3363
39Monitor
Business Logic Errors in ikus060/rdiffweb
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
ikus-soft · rdiffwebOct 26, 2022
CVE-2022-3269
39Monitor
Session Fixation in ikus060/rdiffweb
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
ikus-soft · rdiffwebSep 23, 2022
CVE-2022-4724
39Monitor
Improper Access Control in ikus060/rdiffweb
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
ikus-soft · rdiffwebDec 27, 2022
CVE-2022-4314
39Monitor
Improper Privilege Management in ikus060/rdiffweb
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
ikus-soft · rdiffwebDec 12, 2022
CVE-2022-3439
39Monitor
Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Denial of service
ikus-soft · rdiffwebOct 14, 2022
CVE-2022-3273
39Monitor
Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Denial of service
ikus-soft · rdiffwebOct 6, 2022
CVE-2022-3457
39Monitor
Origin Validation Error in ikus060/rdiffweb
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
ikus-soft · rdiffwebOct 13, 2022
CVE-2022-3456
39Monitor
Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Denial of service
ikus-soft · rdiffwebOct 13, 2022
CVE-2022-3167
35Monitor
Improper Restriction of Rendered UI Layers or Frames in ikus060/rdiffweb
HighCVSS 8.8No exploitEPSS 1%
- Pre-auth
ikus-soft · rdiffwebSep 8, 2022
CVE-2022-3179
35Monitor
Weak Password Requirements in ikus060/rdiffweb
HighCVSS 8.8No exploitEPSS 1%
ikus-soft · rdiffwebSep 13, 2022
CVE-2022-3221
35Monitor
Cross-Site Request Forgery (CSRF) in ikus060/rdiffweb
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
ikus-soft · rdiffwebSep 15, 2022
CVE-2023-5289
35Monitor
Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb
HighCVSS 8.8No exploitEPSS 0%
- Denial of service
ikus-soft · rdiffwebSep 29, 2023
CVE-2022-3272
31Monitor
Improper Handling of Length Parameter Inconsistency in ikus060/rdiffweb
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Denial of service
ikus-soft · rdiffwebSep 26, 2022
CVE-2022-3389
30Monitor
Path Traversal in ikus060/rdiffweb
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Path traversal
ikus-soft · rdiffwebOct 6, 2022
CVE-2022-3371
30Monitor
No limit in length of "Token name" parameter results in DOS attack /memory corruption in ikus060/rdiffweb prior to 2.5.0a3 in ikus060/rdiffweb
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Denial of service
ikus-soft · rdiffwebSep 30, 2022
CVE-2022-3364
30Monitor
No limit in length of "Fullname" parameter results in DOS attack /memory corruption in ikus060/rdiffweb prior to 2.5.0a3 in ikus060/rdiffweb
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Denial of service
ikus-soft · rdiffwebSep 29, 2022
CVE-2022-3295
30Monitor
Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Denial of service
ikus-soft · rdiffwebSep 26, 2022
CVE-2022-3298
30Monitor
Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Denial of service
ikus-soft · rdiffwebSep 26, 2022
CVE-2022-3290
30Monitor
Improper Handling of Length Parameter Inconsistency in ikus060/rdiffweb
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
ikus-soft · rdiffwebSep 26, 2022
CVE-2022-3174
30Monitor
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in ikus060/rdiffweb
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
ikus-soft · rdiffwebSep 13, 2022
CVE-2022-4722
28Monitor
Authentication Bypass by Primary Weakness in ikus060/rdiffweb
HighCVSS 7.2No exploitEPSS 1%
- Auth bypass
ikus-soft · rdiffwebDec 27, 2022