shopbeat records
6 published records for vendor shopbeat.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-264 Permissions, Privileges, and Access Controls1
- CWE-288 Authentication Bypass Using an Alternate Path or Channel1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-548 Exposure of Information Through Directory Listing1
- CWE-639 Authorization Bypass Through User-Controlled Key1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
6 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2022-36246No exploit | Shop Beat Services Vulnerable To Insecure Permissionsshopbeat · shop beat media player · CWE-264 | Critical9.8 | — | 0.6% | May 30, 2023 |
36Monitor | CVE-2022-36247No exploit | Shop Beat Services Vulnerable To IDORshopbeat · shop beat media player · CWE-639 | Critical9.1 | — | 0.5% | May 30, 2023 |
35Monitor | CVE-2022-36250No exploit | Cross Site Request Forgery on Shop Beat Servicesshopbeat · shop beat media player · CWE-352 | High8.8 | — | 0.2% | May 30, 2023 |
21Monitor | CVE-2022-36243No exploit | Directory Traversal on Shop Beat Servicesshopbeat · shop beat media player · CWE-548 | Medium5.3 | — | 0.7% | May 30, 2023 |
21Monitor | CVE-2022-36249No exploit | Shop Beat Services Vulnerable To Bypass 2FA via APIsshopbeat · shop beat media player · CWE-288 | Medium5.4 | — | 0.3% | May 30, 2023 |
21Monitor | CVE-2022-36244No exploit | Multiple Stored Cross-Site Scripting Vulnerabilities on Shop Beat Servicesshopbeat · shop beat media player · CWE-79 | Medium5.4 | — | 0.3% | May 30, 2023 |
- CVE-2022-3624639Monitor
Shop Beat Services Vulnerable To Insecure Permissions
CriticalCVSS 9.8No exploitEPSS 0%shopbeat · shop beat media playerMay 30, 2023
- CVE-2022-3624736Monitor
Shop Beat Services Vulnerable To IDOR
CriticalCVSS 9.1No exploitEPSS 0%shopbeat · shop beat media playerMay 30, 2023
- CVE-2022-3625035Monitor
Cross Site Request Forgery on Shop Beat Services
HighCVSS 8.8No exploitEPSS 0%shopbeat · shop beat media playerMay 30, 2023
- CVE-2022-3624321Monitor
Directory Traversal on Shop Beat Services
MediumCVSS 5.3No exploitEPSS 0%shopbeat · shop beat media playerMay 30, 2023
- CVE-2022-3624921Monitor
Shop Beat Services Vulnerable To Bypass 2FA via APIs
MediumCVSS 5.4No exploitEPSS 0%shopbeat · shop beat media playerMay 30, 2023
- CVE-2022-3624421Monitor
Multiple Stored Cross-Site Scripting Vulnerabilities on Shop Beat Services
MediumCVSS 5.4No exploitEPSS 0%shopbeat · shop beat media playerMay 30, 2023