Skip to content
Noroxi

sawmill records

9 published records for vendor sawmill.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

9 records
  • CVE-2017-5496
    41Plan

    Sawmill Enterprise 8.7.9 allows remote attackers to gain login access by leveraging knowledge of a password hash.

    CriticalCVSS 9.8Proof of conceptEPSS 6%

    sawmill · sawmillMar 15, 2017

  • CVE-2000-0589
    31Monitor

    SawMill 5.0.21 uses weak encryption to store passwords, which allows attackers to easily decrypt the password and modify the SawMill configu

    HighCVSS 7.5Proof of conceptEPSS 4%

    sawmill · sawmillJun 26, 2000

  • CVE-2005-1900
    31Monitor

    Sawmill before 7.1.6 allows remote attackers to bypass authentication and (1) gain administrative privileges or (2) add a license.

    HighCVSS 7.5No exploitEPSS 2%

    sawmill · sawmillJun 9, 2005

  • CVE-2013-4947
    30Monitor

    Unspecified vulnerability in the update and build database page in Sawmill before 8.6.3 allows remote attackers to have unknown impact and a

    HighCVSS 7.5No exploitEPSS 2%

    sawmill · sawmillJul 29, 2013

  • CVE-2000-0588
    22Monitor

    SawMill 5.0.21 CGI program allows remote attackers to read the first line of arbitrary files by listing the file in the rfcf parameter, whos

    MediumCVSS 5.0Proof of conceptEPSS 7%

    sawmill · sawmillJun 26, 2000

  • CVE-2002-0265
    18Monitor

    Sawmill for Solaris 6.2.14 and earlier creates the AdminPassword file with world-writable permissions, which allows local users to gain priv

    MediumCVSS 4.6Proof of conceptEPSS 1%

    sawmill · sawmillMay 29, 2002

  • CVE-2005-2950
    17Monitor

    Cross-site scripting (XSS) vulnerability in Sawmill 7.0.0 through 7.1.13 allows remote attackers to inject arbitrary web script or HTML via

    MediumCVSS 4.3No exploitEPSS 1%

    sawmill · sawmillSep 16, 2005

  • CVE-2005-1901
    17Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in Sawmill before 7.1.6 allow remote attackers to inject arbitrary web script or HTML vi

    MediumCVSS 4.3No exploitEPSS 1%

    sawmill · sawmillJun 9, 2005

  • CVE-2010-1079
    17Monitor

    Cross-site scripting (XSS) vulnerability in Sawmill before 7.2.18 allows remote attackers to inject arbitrary web script or HTML via unspeci

    MediumCVSS 4.3No exploitEPSS 1%

    sawmill · sawmillMar 23, 2010