Skip to content
Noroxi

starfish records

6 published records for vendor starfish.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 21
  2. 22
  3. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

6 records
  • CVE-2001-1005
    30Monitor

    Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA uses weak encryption to store the user password in a registry key, which allows a

    HighCVSS 7.5No exploitEPSS 0%

    starfish · truesync desktopAug 31, 2001

  • CVE-2021-24753
    28Monitor

    Rich Reviews by Starfish < 1.9.6 - Admin+ SQL Injection

    HighCVSS 7.2No exploitEPSS 1%

    starfish · rich reviewDec 27, 2021

  • CVE-2019-25216
    24Monitor

    Rich Reviews <= 1.7.4 - Stored Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 0%

    starfish · rich reviewOct 16, 2024

  • CVE-2001-1006
    20Monitor

    Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA does not encrypt sensitive files and relies solely on its password feature to res

    MediumCVSS 5.0No exploitEPSS 1%

    starfish · truesync desktopAug 31, 2001

  • CVE-2001-1007
    20Monitor

    Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA uses a small keyspace for device keys and does not impose a delay when an incorre

    MediumCVSS 5.0No exploitEPSS 1%

    starfish · truesync desktopAug 31, 2001

  • CVE-2021-36861
    17Monitor

    WordPress Rich Reviews by Starfish plugin <= 1.9.14 - Cross-Site Request Forgery (CSRF) vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    starfish · rich reviewAug 5, 2022