Записи ascertia
8 опубликованных записей вендора ascertia.
Профиль для исследователя
- Попали в KEV
- 0 · 0 %
- С эксплойтом
- 0 · 0 %
- Pre-auth RCE
- 1
- С записью об исправлении
- 0 %
- Медиана: публикация → KEV
- Ни одна запись не попала в KEV
Повторяющиеся классы
- CWE-307 Improper Restriction of Excessive Authentication Attempts2
- CWE-770 Allocation of Resources Without Limits or Throttling2
- CWE-284 Improper Access Control1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')1
- CWE-799 Improper Control of Interaction Frequency1
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
8 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
39Наблюдать | CVE-2025-56218Proof of concept | An arbitrary file upload vulnerability in SigningHub v8.6.8 allows attackers to execute arbitrary code via uploading a crafted PDF file.ascertia · signinghub · CWE-434 | Критическая9,8 | — | 0,6 % | 17 окт. 2025 г. |
39Наблюдать | CVE-2025-56221Proof of concept | A lack of rate limiting in the login mechanism of SigningHub v8.6.8 allows attackers to bypass authentication via a brute force attack.ascertia · signinghub · CWE-307 | Критическая9,8 | — | 0,5 % | 17 окт. 2025 г. |
39Наблюдать | CVE-2025-54321Proof of concept | In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an email bombing vulnerabiascertia · signinghub · CWE-799 | Критическая9,8 | — | 0,5 % | 18 нояб. 2025 г. |
32Наблюдать | CVE-2025-56224Proof of concept | A lack of rate limiting in the One-Time Password (OTP) verification endpoint of SigningHub v8.6.8 allows attackers to bypass verification viascertia · signinghub · CWE-307 | Высокая8,1 | — | 0,3 % | 20 окт. 2025 г. |
30Наблюдать | CVE-2025-56223Proof of concept | A lack of rate limiting in the component /Home/UploadStreamDocument of SigningHub v8.6.8 allows attackers to cause a Denial of Service (DoS)ascertia · signinghub · CWE-770 | Высокая7,5 | — | 0,4 % | 20 окт. 2025 г. |
28Наблюдать | CVE-2025-56219Proof of concept | Incorrect access control in SigningHub v8.6.8 allows attackers to arbitrarily add user accounts without any rate limiting.ascertia · signinghub · CWE-284 | Высокая7,1 | — | 0,3 % | 20 окт. 2025 г. |
24Наблюдать | CVE-2025-61166Эксплойта нет | An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a malicious site via a crafted URL.ascertia · signinghub · CWE-601 | Средняя6,1 | — | 0,1 % | 6 апр. 2026 г. |
17Наблюдать | CVE-2025-54320Proof of concept | In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the invite user function, leading to an email bombing vulnerabilitascertia · signinghub · CWE-770 | Средняя4,3 | — | 0,3 % | 18 нояб. 2025 г. |
- CVE-2025-5621839Наблюдать
An arbitrary file upload vulnerability in SigningHub v8.6.8 allows attackers to execute arbitrary code via uploading a crafted PDF file.
КритическаяCVSS 9,8Proof of conceptEPSS 0 %ascertia · signinghub17 окт. 2025 г.
- CVE-2025-5622139Наблюдать
A lack of rate limiting in the login mechanism of SigningHub v8.6.8 allows attackers to bypass authentication via a brute force attack.
КритическаяCVSS 9,8Proof of conceptEPSS 0 %ascertia · signinghub17 окт. 2025 г.
- CVE-2025-5432139Наблюдать
In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an email bombing vulnerabi
КритическаяCVSS 9,8Proof of conceptEPSS 0 %ascertia · signinghub18 нояб. 2025 г.
- CVE-2025-5622432Наблюдать
A lack of rate limiting in the One-Time Password (OTP) verification endpoint of SigningHub v8.6.8 allows attackers to bypass verification vi
ВысокаяCVSS 8,1Proof of conceptEPSS 0 %ascertia · signinghub20 окт. 2025 г.
- CVE-2025-5622330Наблюдать
A lack of rate limiting in the component /Home/UploadStreamDocument of SigningHub v8.6.8 allows attackers to cause a Denial of Service (DoS)
ВысокаяCVSS 7,5Proof of conceptEPSS 0 %ascertia · signinghub20 окт. 2025 г.
- CVE-2025-5621928Наблюдать
Incorrect access control in SigningHub v8.6.8 allows attackers to arbitrarily add user accounts without any rate limiting.
ВысокаяCVSS 7,1Proof of conceptEPSS 0 %ascertia · signinghub20 окт. 2025 г.
- CVE-2025-6116624Наблюдать
An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a malicious site via a crafted URL.
СредняяCVSS 6,1Эксплойта нетEPSS 0 %ascertia · signinghub6 апр. 2026 г.
- CVE-2025-5432017Наблюдать
In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the invite user function, leading to an email bombing vulnerabilit
СредняяCVSS 4,3Proof of conceptEPSS 0 %ascertia · signinghub18 нояб. 2025 г.