SaltOS records
7 published records for vendor saltos.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
7 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
44Plan | CVE-2018-18761Proof of concept | SaltOS 3.1 r8126 allows action=login&querystring=&user=[SQL] SQL Injection.saltos · saltos · CWE-89 | Critical9.8 | — | 16.4% | Nov 16, 2018 |
40Plan | CVE-2018-18763Proof of concept | SaltOS 3.1 r8126 allows action=ajax&query=numbers&page=usuarios&action2=[SQL] SQL Injection.saltos · saltos · CWE-89 | Critical9.8 | — | 3.2% | Nov 16, 2018 |
39Monitor | CVE-2024-5407No exploit | Code Injection vulnerability in RhinOS from SaltOSsaltos · rhinos · CWE-94 | Critical9.8 | — | 0.6% | May 27, 2024 |
28Monitor | CVE-2018-18762Proof of concept | SaltOS 3.1 r8126 contains a database download vulnerability.saltos · saltos · CWE-200 | Medium6.5 | — | 6.1% | Mar 21, 2019 |
27Monitor | CVE-2018-18760Proof of concept | RhinOS 3.0 build 1190 allows CSRF.saltos · rhinos · CWE-352 | Medium6.5 | — | 2.6% | Nov 16, 2018 |
24Monitor | CVE-2024-5408No exploit | Cross-site Scripting vulnerability in RhinOS from SaltOSsaltos · rhinos · CWE-79 | Medium6.1 | — | 0.3% | May 27, 2024 |
24Monitor | CVE-2024-5409No exploit | Cross-site Scripting vulnerability in RhinOS from SaltOSsaltos · rhinos · CWE-79 | Medium6.1 | — | 0.2% | May 27, 2024 |
- CVE-2018-1876144Plan
SaltOS 3.1 r8126 allows action=login&querystring=&user=[SQL] SQL Injection.
CriticalCVSS 9.8Proof of conceptEPSS 16%saltos · saltosNov 16, 2018
- CVE-2018-1876340Plan
SaltOS 3.1 r8126 allows action=ajax&query=numbers&page=usuarios&action2=[SQL] SQL Injection.
CriticalCVSS 9.8Proof of conceptEPSS 3%saltos · saltosNov 16, 2018
- CVE-2024-540739Monitor
Code Injection vulnerability in RhinOS from SaltOS
CriticalCVSS 9.8No exploitEPSS 0%saltos · rhinosMay 27, 2024
- CVE-2018-1876228Monitor
SaltOS 3.1 r8126 contains a database download vulnerability.
MediumCVSS 6.5Proof of conceptEPSS 6%saltos · saltosMar 21, 2019
- CVE-2018-1876027Monitor
RhinOS 3.0 build 1190 allows CSRF.
MediumCVSS 6.5Proof of conceptEPSS 2%saltos · rhinosNov 16, 2018
- CVE-2024-540824Monitor
Cross-site Scripting vulnerability in RhinOS from SaltOS
MediumCVSS 6.1No exploitEPSS 0%saltos · rhinosMay 27, 2024
- CVE-2024-540924Monitor
Cross-site Scripting vulnerability in RhinOS from SaltOS
MediumCVSS 6.1No exploitEPSS 0%saltos · rhinosMay 27, 2024