Записи ozeki
12 опубликованных записей вендора ozeki.
Профиль для исследователя
- Попали в KEV
- 0 · 0 %
- С эксплойтом
- 0 · 0 %
- Pre-auth RCE
- 0
- С записью об исправлении
- 0 %
- Медиана: публикация → KEV
- Ни одна запись не попала в KEV
Повторяющиеся классы
- CWE-1236 Improper Neutralization of Formula Elements in a CSV File1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-310 Cryptographic Issues1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-502 Deserialization of Untrusted Data1
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
12 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
36Наблюдать | CVE-2020-14022Эксплойта нет | Ozeki NG SMS Gateway 4.17.1 through 4.17.6 does not check the file type when bulk importing new contacts ("Import Contacts" functionality) fozeki · ozeki ng sms gateway · CWE-434 | Высокая8,8 | — | 1,8 % | 22 сент. 2020 г. |
36Наблюдать | CVE-2020-14026Эксплойта нет | CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the Export Of Contacts feature in Ozeki NG SMS Gateway through 4.17ozeki · ozeki ng sms gateway · CWE-1236 | Высокая8,8 | — | 1,7 % | 22 сент. 2020 г. |
35Наблюдать | CVE-2020-14025Эксплойта нет | Ozeki NG SMS Gateway through 4.17.6 has multiple CSRF vulnerabilities.ozeki · ozeki ng sms gateway · CWE-352 | Высокая8,8 | — | 0,5 % | 22 сент. 2020 г. |
30Наблюдать | CVE-2020-14029Эксплойта нет | An issue was discovered in Ozeki NG SMS Gateway through 4.17.6.ozeki · ozeki ng sms gateway · CWE-611 | Высокая7,5 | — | 1,4 % | 18 сент. 2020 г. |
29Наблюдать | CVE-2020-14028Эксплойта нет | An issue was discovered in Ozeki NG SMS Gateway through 4.17.6.ozeki · ozeki ng sms gateway · CWE-22 | Высокая7,2 | — | 1,9 % | 22 сент. 2020 г. |
29Наблюдать | CVE-2020-14030Эксплойта нет | An issue was discovered in Ozeki NG SMS Gateway through 4.17.6.ozeki · ozeki ng sms gateway · CWE-502 | Высокая7,2 | — | 1,8 % | 30 сент. 2020 г. |
28Наблюдать | CVE-2020-14031Эксплойта нет | An issue was discovered in Ozeki NG SMS Gateway through 4.17.6.ozeki · ozeki ng sms gateway | Высокая7,2 | — | 1,6 % | 22 сент. 2020 г. |
24Наблюдать | CVE-2020-14024Эксплойта нет | Ozeki NG SMS Gateway through 4.17.6 has multiple authenticated stored and/or reflected XSS vulnerabilities via the (1) Receiver or Recipientozeki · ozeki ng sms gateway · CWE-79 | Средняя6,1 | — | 0,7 % | 22 сент. 2020 г. |
21Наблюдать | CVE-2020-14027Эксплойта нет | An issue was discovered in Ozeki NG SMS Gateway through 4.17.6.ozeki · ozeki ng sms gateway · CWE-88 | Средняя5,3 | — | 0,8 % | 22 сент. 2020 г. |
19Наблюдать | CVE-2020-14021Эксплойта нет | An issue was discovered in Ozeki NG SMS Gateway through 4.17.6.ozeki · ozeki ng sms gateway | Средняя4,9 | — | 1,1 % | 18 сент. 2020 г. |
19Наблюдать | CVE-2020-14023Эксплойта нет | Ozeki NG SMS Gateway through 4.17.6 allows SSRF via SMS WCF or RSS To SMS.ozeki · ozeki ng sms gateway · CWE-918 | Средняя4,9 | — | 1,0 % | 22 сент. 2020 г. |
8Наблюдать | CVE-2006-6674Эксплойта нет | Ozeki HTTP-SMS Gateway 1.0, and possibly earlier, stores usernames and passwords in plaintext in the HKLM\Software\Ozeki\SMSServer\CurrentVeozeki · http-sms gateway · CWE-310 | Низкая2,1 | — | 0,3 % | 20 дек. 2006 г. |
- CVE-2020-1402236Наблюдать
Ozeki NG SMS Gateway 4.17.1 through 4.17.6 does not check the file type when bulk importing new contacts ("Import Contacts" functionality) f
ВысокаяCVSS 8,8Эксплойта нетEPSS 2 %ozeki · ozeki ng sms gateway22 сент. 2020 г.
- CVE-2020-1402636Наблюдать
CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the Export Of Contacts feature in Ozeki NG SMS Gateway through 4.17
ВысокаяCVSS 8,8Эксплойта нетEPSS 2 %ozeki · ozeki ng sms gateway22 сент. 2020 г.
- CVE-2020-1402535Наблюдать
Ozeki NG SMS Gateway through 4.17.6 has multiple CSRF vulnerabilities.
ВысокаяCVSS 8,8Эксплойта нетEPSS 1 %ozeki · ozeki ng sms gateway22 сент. 2020 г.
- CVE-2020-1402930Наблюдать
An issue was discovered in Ozeki NG SMS Gateway through 4.17.6.
ВысокаяCVSS 7,5Эксплойта нетEPSS 1 %ozeki · ozeki ng sms gateway18 сент. 2020 г.
- CVE-2020-1402829Наблюдать
An issue was discovered in Ozeki NG SMS Gateway through 4.17.6.
ВысокаяCVSS 7,2Эксплойта нетEPSS 2 %ozeki · ozeki ng sms gateway22 сент. 2020 г.
- CVE-2020-1403029Наблюдать
An issue was discovered in Ozeki NG SMS Gateway through 4.17.6.
ВысокаяCVSS 7,2Эксплойта нетEPSS 2 %ozeki · ozeki ng sms gateway30 сент. 2020 г.
- CVE-2020-1403128Наблюдать
An issue was discovered in Ozeki NG SMS Gateway through 4.17.6.
ВысокаяCVSS 7,2Эксплойта нетEPSS 2 %ozeki · ozeki ng sms gateway22 сент. 2020 г.
- CVE-2020-1402424Наблюдать
Ozeki NG SMS Gateway through 4.17.6 has multiple authenticated stored and/or reflected XSS vulnerabilities via the (1) Receiver or Recipient
СредняяCVSS 6,1Эксплойта нетEPSS 1 %ozeki · ozeki ng sms gateway22 сент. 2020 г.
- CVE-2020-1402721Наблюдать
An issue was discovered in Ozeki NG SMS Gateway through 4.17.6.
СредняяCVSS 5,3Эксплойта нетEPSS 1 %ozeki · ozeki ng sms gateway22 сент. 2020 г.
- CVE-2020-1402119Наблюдать
An issue was discovered in Ozeki NG SMS Gateway through 4.17.6.
СредняяCVSS 4,9Эксплойта нетEPSS 1 %ozeki · ozeki ng sms gateway18 сент. 2020 г.
- CVE-2020-1402319Наблюдать
Ozeki NG SMS Gateway through 4.17.6 allows SSRF via SMS WCF or RSS To SMS.
СредняяCVSS 4,9Эксплойта нетEPSS 1 %ozeki · ozeki ng sms gateway22 сент. 2020 г.
- CVE-2006-66748Наблюдать
Ozeki HTTP-SMS Gateway 1.0, and possibly earlier, stores usernames and passwords in plaintext in the HKLM\Software\Ozeki\SMSServer\CurrentVe
НизкаяCVSS 2,1Эксплойта нетEPSS 0 %ozeki · http-sms gateway20 дек. 2006 г.