mayswind records
3 published records for vendor mayswind.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 66.7%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-276 Incorrect Default Permissions1
- CWE-674 Uncontrolled Recursion1
- CWE-799 Improper Control of Interaction Frequency1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
3 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2024-57604No exploit | An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the token component.mayswind · ezbookkeeping · CWE-276 | Critical9.8 | — | 0.7% | Feb 12, 2025 |
26Monitor | CVE-2025-65519No exploit | mayswind ezbookkeeping versions 1.2.0 and earlier contain a critical vulnerability in JSON and XML file import processing.mayswind · ezbookkeeping · CWE-674 | Medium6.5 | — | 0.3% | Feb 18, 2026 |
25Monitor | CVE-2024-57603No exploit | An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the lack of rate limiting.mayswind · ezbookkeeping · CWE-799 | Medium6.3 | — | 0.4% | Feb 12, 2025 |
- CVE-2024-5760439Monitor
An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the token component.
CriticalCVSS 9.8No exploitEPSS 0%mayswind · ezbookkeepingFeb 12, 2025
- CVE-2025-6551926Monitor
mayswind ezbookkeeping versions 1.2.0 and earlier contain a critical vulnerability in JSON and XML file import processing.
MediumCVSS 6.5No exploitEPSS 0%mayswind · ezbookkeepingFeb 18, 2026
- CVE-2024-5760325Monitor
An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the lack of rate limiting.
MediumCVSS 6.3No exploitEPSS 0%mayswind · ezbookkeepingFeb 12, 2025