open source development network records
6 published records for vendor open source development network.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 2
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Records by year
Bar: total · dark part: CISA KEV.
Attack profile
All records
6 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
31Monitor | CVE-2000-1015No exploit | The default configuration of Slashcode before version 2.0 Alpha has a default administrative password, which allows remote attackers to gainopen source development network · slashcode | High7.5 | — | 2.1% | Dec 11, 2000 |
28Monitor | CVE-2002-1748No exploit | Unknown vulnerability in Slash 2.1.x and 2.2 through 2.2.2, as used in Slashcode, allows remote authenticated users to gain access to arbitropen source development network · slashcode | High7.2 | — | 0.7% | Dec 31, 2002 |
27Monitor | CVE-2002-1681No exploit | Cross-site scripting (XSS) vulnerability in Slashcode CVS releases June 17 through July 1 2002 allows remote attackers to execute arbitrary open source development network · slashcode | Medium6.8 | — | 1.3% | Dec 31, 2002 |
18Monitor | CVE-2001-1535No exploit | Slashcode 2.0 creates new accounts with an 8-character random password, which could allow local users to obtain session ID's from cookies anopen source development network · slashcode | Medium4.6 | — | 0.3% | Dec 31, 2001 |
17Monitor | CVE-2004-2656No exploit | Multiple cross-site scripting (XSS) vulnerabilities in Slashdot Like Automated Storytelling Homepage (Slash) (aka Slashcode) before R_2_5_0_open source development network · slashcode | Medium4.3 | — | 1.4% | Dec 31, 2004 |
10Monitor | CVE-2002-0292No exploit | Cross-site scripting vulnerability in Slash before 2.2.5, as used in Slashcode and elsewhere, allows remote attackers to steal cookies and aopen source development network · slashcode | Low2.6 | — | 1.3% | May 31, 2002 |
- CVE-2000-101531Monitor
The default configuration of Slashcode before version 2.0 Alpha has a default administrative password, which allows remote attackers to gain
HighCVSS 7.5No exploitEPSS 2%open source development network · slashcodeDec 11, 2000
- CVE-2002-174828Monitor
Unknown vulnerability in Slash 2.1.x and 2.2 through 2.2.2, as used in Slashcode, allows remote authenticated users to gain access to arbitr
HighCVSS 7.2No exploitEPSS 0%open source development network · slashcodeDec 31, 2002
- CVE-2002-168127Monitor
Cross-site scripting (XSS) vulnerability in Slashcode CVS releases June 17 through July 1 2002 allows remote attackers to execute arbitrary
MediumCVSS 6.8No exploitEPSS 1%open source development network · slashcodeDec 31, 2002
- CVE-2001-153518Monitor
Slashcode 2.0 creates new accounts with an 8-character random password, which could allow local users to obtain session ID's from cookies an
MediumCVSS 4.6No exploitEPSS 0%open source development network · slashcodeDec 31, 2001
- CVE-2004-265617Monitor
Multiple cross-site scripting (XSS) vulnerabilities in Slashdot Like Automated Storytelling Homepage (Slash) (aka Slashcode) before R_2_5_0_
MediumCVSS 4.3No exploitEPSS 1%open source development network · slashcodeDec 31, 2004
- CVE-2002-029210Monitor
Cross-site scripting vulnerability in Slash before 2.2.5, as used in Slashcode and elsewhere, allows remote attackers to steal cookies and a
LowCVSS 2.6No exploitEPSS 1%open source development network · slashcodeMay 31, 2002