shilpisoft records
7 published records for vendor shilpisoft.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-266 Incorrect Privilege Assignment1
- CWE-307 Improper Restriction of Excessive Authentication Attempts1
- CWE-308 Use of Single-factor Authentication1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-639 Authorization Bypass Through User-Controlled Key1
- CWE-799 Improper Control of Interaction Frequency1
The weakness classes this vendor ships most often: where to look.
CWEAll records
7 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
37Monitor | CVE-2024-47656No exploit | User Enumeration vulnerabilityshilpisoft · client dashboard · CWE-307 | Critical9.3 | — | 0.5% | Oct 4, 2024 |
34Monitor | CVE-2024-47655No exploit | Unrestricted File Upload Vulnerabilityshilpisoft · client dashboard · CWE-434 | High8.6 | — | 0.7% | Oct 4, 2024 |
30Monitor | CVE-2011-5031Proof of concept | Multiple SQL injection vulnerabilities in servlet/capexweb.parentvalidatepassword in cApexWEB 1.1 allow remote attackers to execute arbitrarshilpisoft · capexweb · CWE-89 | High7.5 | — | 1.1% | Dec 29, 2011 |
30Monitor | CVE-2024-47652No exploit | Insecure Authentication Vulnerabilityshilpisoft · client dashboard · CWE-308 | High7.6 | — | 0.4% | Oct 4, 2024 |
28Monitor | CVE-2024-47654No exploit | No Rate Limiting vulnerabilityshilpisoft · client dashboard · CWE-799 | High7.1 | — | 0.5% | Oct 4, 2024 |
28Monitor | CVE-2024-47657No exploit | Improper Access Control Vulnerabilityshilpisoft · net back office · CWE-639 | High7.1 | — | 0.4% | Oct 4, 2024 |
28Monitor | CVE-2024-47653No exploit | Missing Authorization Vulnerabilityshilpisoft · client dashboard · CWE-266 | High7.1 | — | 0.3% | Oct 4, 2024 |
- CVE-2024-4765637Monitor
User Enumeration vulnerability
CriticalCVSS 9.3No exploitEPSS 1%shilpisoft · client dashboardOct 4, 2024
- CVE-2024-4765534Monitor
Unrestricted File Upload Vulnerability
HighCVSS 8.6No exploitEPSS 1%shilpisoft · client dashboardOct 4, 2024
- CVE-2011-503130Monitor
Multiple SQL injection vulnerabilities in servlet/capexweb.parentvalidatepassword in cApexWEB 1.1 allow remote attackers to execute arbitrar
HighCVSS 7.5Proof of conceptEPSS 1%shilpisoft · capexwebDec 29, 2011
- CVE-2024-4765230Monitor
Insecure Authentication Vulnerability
HighCVSS 7.6No exploitEPSS 0%shilpisoft · client dashboardOct 4, 2024
- CVE-2024-4765428Monitor
No Rate Limiting vulnerability
HighCVSS 7.1No exploitEPSS 0%shilpisoft · client dashboardOct 4, 2024
- CVE-2024-4765728Monitor
Improper Access Control Vulnerability
HighCVSS 7.1No exploitEPSS 0%shilpisoft · net back officeOct 4, 2024
- CVE-2024-4765328Monitor
Missing Authorization Vulnerability
HighCVSS 7.1No exploitEPSS 0%shilpisoft · client dashboardOct 4, 2024