Skip to content
Noroxi

positive software records

12 published records for vendor positive software.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    12 records
    • CVE-2007-2633
      41Plan

      Directory traversal vulnerability in H-Sphere SiteStudio 1.6 allows remote attackers to read, or include and execute, arbitrary local files

      CriticalCVSS 10.0No exploitEPSS 2%

      positive software · sitestudioMay 13, 2007

    • CVE-2008-1049
      40Plan

      Unspecified vulnerability in Parallels SiteStudio before 1.7.2, and 1.8.x before 1.8b, as used in Parallels H-Sphere 3.0 before Patch 9 and

      CriticalCVSS 10.0No exploitEPSS 1%

      positive software · h-sphereFeb 27, 2008

    • CVE-2003-1247
      33Monitor

      Multiple buffer overflows in H-Sphere WebShell 2.3 allow remote attackers to execute arbitrary code via (1) a long URL content type in CGI::

      HighCVSS 7.5Proof of conceptEPSS 9%

      positive software · h-sphereDec 31, 2003

    • CVE-2005-4261
      32Monitor

      Unspecified vulnerability in Positive Software Corporation CP+ (cpplus) before 2.5.5 allows attackers to have unknown impact and attack vect

      HighCVSS 7.8No exploitEPSS 1%

      positive software · cp\+Dec 15, 2005

    • CVE-2003-1248
      31Monitor

      H-Sphere WebShell 2.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) mode and (2) zipfile paramet

      HighCVSS 7.5No exploitEPSS 2%

      positive software · h-sphereDec 31, 2003

    • CVE-2005-1605
      27Monitor

      Cross-site scripting (XSS) vulnerability in the guestbook for SiteStudio 1.6 allows remote attackers to inject arbitrary web script or HTML

      MediumCVSS 6.8No exploitEPSS 1%

      positive software · sitestudioMay 16, 2005

    • CVE-2008-4448
      27Monitor

      Cross-site request forgery (CSRF) vulnerability in actions.php in Positive Software H-Sphere WebShell 4.3.10 allows remote attackers to perf

      MediumCVSS 6.8No exploitEPSS 0%

      positive software · h-sphereOct 6, 2008

    • CVE-2006-6382
      27Monitor

      The control panel for Positive Software H-Sphere before 2.5.0 RC3 creates log files in a user's directory with insecure permissions, which a

      MediumCVSS 6.8No exploitEPSS 0%

      positive software · h-sphereDec 7, 2006

    • CVE-2005-1606
      18Monitor

      H-Sphere Winbox 2.4.2 and 2.4.3 RC1 stores sensitive information such as username and password in plaintext in world-readable log files, whi

      MediumCVSS 4.6Proof of conceptEPSS 0%

      positive software · h-sphere winboxMay 16, 2005

    • CVE-2008-4447
      17Monitor

      Cross-site scripting (XSS) vulnerability in actions.php in Positive Software H-Sphere WebShell 4.3.10 allows remote attackers to inject arbi

      MediumCVSS 4.3Proof of conceptEPSS 1%

      positive software · h-sphereOct 6, 2008

    • CVE-2006-0193
      17Monitor

      Cross-site scripting (XSS) vulnerability in the Hosting Control Panel (psoft.hsphere.CP) in Positive Software H-Sphere 2.4.3 Patch 8 and ear

      MediumCVSS 4.3No exploitEPSS 1%

      positive software · h-sphereJan 13, 2006

    • CVE-2006-3278
      10Monitor

      Cross-site scripting (XSS) vulnerability in H-Sphere 2.5.1 Beta 1 and earlier allows remote attackers to inject arbitrary web script or HTML

      LowCVSS 2.6No exploitEPSS 1%

      positive software · h-sphereJun 28, 2006