Skip to content
Noroxi

secureideas records

13 published records for vendor secureideas.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
6
With a fix record
7.7%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    13 records
    • CVE-2012-1198
      32Monitor

      base_ag_main.php in Basic Analysis and Security Engine (BASE) 1.4.5 allows remote attackers to execute arbitrary code by uploading contents

      HighCVSS 7.5Proof of conceptEPSS 5%

      secureideas · basic analysis and security engineFeb 17, 2012

    • CVE-2012-1199
      31Monitor

      Multiple PHP remote file inclusion vulnerabilities in Basic Analysis and Security Engine (BASE) 1.4.5 allow remote attackers to execute arbi

      HighCVSS 7.5Proof of conceptEPSS 3%

      secureideas · basic analysis and security engineFeb 17, 2012

    • CVE-2005-3325
      31Monitor

      Multiple SQL injection vulnerabilities in (1) acid_qry_main.php in Analysis Console for Intrusion Databases (ACID) 0.9.6b20 and (2) base_qry

      HighCVSS 7.5Proof of conceptEPSS 3%

      acid · analysis console for intrusion databasesOct 27, 2005

    • CVE-2007-5578
      31Monitor

      Basic Analysis and Security Engine (BASE) before 1.3.8 sends a redirect to the web browser but does not exit, which allows remote attackers

      HighCVSS 7.5No exploitEPSS 2%

      secureideas · basic analysis and security engineOct 18, 2007

    • CVE-2009-4592
      30Monitor

      Unspecified vulnerability in base_local_rules.php in Basic Analysis and Security Engine (BASE) before 1.4.4 allows remote attackers to inclu

      HighCVSS 7.5No exploitEPSS 1%

      secureideas · baseJan 7, 2010

    • CVE-2012-1017
      30Monitor

      Multiple SQL injection vulnerabilities in base_qry_main.php in Basic Analysis and Security Engine (BASE) 1.4.5 allow remote attackers to exe

      HighCVSS 7.5Proof of conceptEPSS 1%

      secureideas · baseFeb 7, 2012

    • CVE-2009-4591
      30Monitor

      SQL injection vulnerability in Basic Analysis and Security Engine (BASE) before 1.4.4 allows remote attackers to execute arbitrary SQL comma

      HighCVSS 7.5No exploitEPSS 1%

      secureideas · baseJan 7, 2010

    • CVE-2009-4838
      30Monitor

      SQL injection vulnerability in base_ag_common.php in Basic Analysis and Security Engine (BASE) before 1.4.3.1 allows remote attackers to exe

      HighCVSS 7.5No exploitEPSS 1%

      secureideas · basic analysis and security engineMay 6, 2010

    • CVE-2007-6156
      17Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in base_qry_main.php in Base Analysis and Security Engine (BASE) before 1.3.9 allow remo

      MediumCVSS 4.3No exploitEPSS 1%

      secureideas · basic analysis and security engineNov 28, 2007

    • CVE-2009-4837
      17Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in Basic Analysis and Security Engine (BASE) before 1.4.3.1 allow remote attackers to in

      MediumCVSS 4.3No exploitEPSS 1%

      secureideas · basic analysis and security engineMay 6, 2010

    • CVE-2009-4590
      17Monitor

      Cross-site scripting (XSS) vulnerability in base_local_rules.php in Basic Analysis and Security Engine (BASE) before 1.4.4 allows remote att

      MediumCVSS 4.3No exploitEPSS 1%

      secureideas · baseJan 7, 2010

    • CVE-2005-4878
      17Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in (1) acid_qry_main.php in Analysis Console for Intrusion Databases (ACID) 0.9.6b20 and

      MediumCVSS 4.3No exploitEPSS 1%

      acid · analysis console for intrusion databasesFeb 18, 2009

    • CVE-2009-4839
      17Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in Basic Analysis and Security Engine (BASE), possibly 1.4.4 and earlier, allow remote a

      MediumCVSS 4.3No exploitEPSS 1%

      secureideas · basic analysis and security engineMay 6, 2010