Записи sawmill
9 опубликованных записей вендора sawmill.
Профиль для исследователя
- Попали в KEV
- 0 · 0 %
- С эксплойтом
- 0 · 0 %
- Pre-auth RCE
- 0
- С записью об исправлении
- 0 %
- Медиана: публикация → KEV
- Ни одна запись не попала в KEV
Повторяющиеся классы
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor2
- CWE-310 Cryptographic Issues1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
9 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
41В плане | CVE-2017-5496Proof of concept | Sawmill Enterprise 8.7.9 allows remote attackers to gain login access by leveraging knowledge of a password hash.sawmill · sawmill · CWE-200 | Критическая9,8 | — | 5,7 % | 15 мар. 2017 г. |
31Наблюдать | CVE-2000-0589Proof of concept | SawMill 5.0.21 uses weak encryption to store passwords, which allows attackers to easily decrypt the password and modify the SawMill configusawmill · sawmill · CWE-310 | Высокая7,5 | — | 3,6 % | 26 июн. 2000 г. |
31Наблюдать | CVE-2005-1900Эксплойта нет | Sawmill before 7.1.6 allows remote attackers to bypass authentication and (1) gain administrative privileges or (2) add a license.sawmill · sawmill | Высокая7,5 | — | 2,0 % | 9 июн. 2005 г. |
30Наблюдать | CVE-2013-4947Эксплойта нет | Unspecified vulnerability in the update and build database page in Sawmill before 8.6.3 allows remote attackers to have unknown impact and asawmill · sawmill | Высокая7,5 | — | 1,5 % | 29 июл. 2013 г. |
22Наблюдать | CVE-2000-0588Proof of concept | SawMill 5.0.21 CGI program allows remote attackers to read the first line of arbitrary files by listing the file in the rfcf parameter, whossawmill · sawmill · CWE-200 | Средняя5,0 | — | 7,4 % | 26 июн. 2000 г. |
18Наблюдать | CVE-2002-0265Proof of concept | Sawmill for Solaris 6.2.14 and earlier creates the AdminPassword file with world-writable permissions, which allows local users to gain privsawmill · sawmill | Средняя4,6 | — | 0,7 % | 29 мая 2002 г. |
17Наблюдать | CVE-2005-2950Эксплойта нет | Cross-site scripting (XSS) vulnerability in Sawmill 7.0.0 through 7.1.13 allows remote attackers to inject arbitrary web script or HTML via sawmill · sawmill | Средняя4,3 | — | 1,3 % | 16 сент. 2005 г. |
17Наблюдать | CVE-2005-1901Эксплойта нет | Multiple cross-site scripting (XSS) vulnerabilities in Sawmill before 7.1.6 allow remote attackers to inject arbitrary web script or HTML visawmill · sawmill | Средняя4,3 | — | 1,3 % | 9 июн. 2005 г. |
17Наблюдать | CVE-2010-1079Эксплойта нет | Cross-site scripting (XSS) vulnerability in Sawmill before 7.2.18 allows remote attackers to inject arbitrary web script or HTML via unspecisawmill · sawmill · CWE-79 | Средняя4,3 | — | 1,0 % | 23 мар. 2010 г. |
- CVE-2017-549641В плане
Sawmill Enterprise 8.7.9 allows remote attackers to gain login access by leveraging knowledge of a password hash.
КритическаяCVSS 9,8Proof of conceptEPSS 5 %sawmill · sawmill15 мар. 2017 г.
- CVE-2000-058931Наблюдать
SawMill 5.0.21 uses weak encryption to store passwords, which allows attackers to easily decrypt the password and modify the SawMill configu
ВысокаяCVSS 7,5Proof of conceptEPSS 3 %sawmill · sawmill26 июн. 2000 г.
- CVE-2005-190031Наблюдать
Sawmill before 7.1.6 allows remote attackers to bypass authentication and (1) gain administrative privileges or (2) add a license.
ВысокаяCVSS 7,5Эксплойта нетEPSS 2 %sawmill · sawmill9 июн. 2005 г.
- CVE-2013-494730Наблюдать
Unspecified vulnerability in the update and build database page in Sawmill before 8.6.3 allows remote attackers to have unknown impact and a
ВысокаяCVSS 7,5Эксплойта нетEPSS 1 %sawmill · sawmill29 июл. 2013 г.
- CVE-2000-058822Наблюдать
SawMill 5.0.21 CGI program allows remote attackers to read the first line of arbitrary files by listing the file in the rfcf parameter, whos
СредняяCVSS 5,0Proof of conceptEPSS 7 %sawmill · sawmill26 июн. 2000 г.
- CVE-2002-026518Наблюдать
Sawmill for Solaris 6.2.14 and earlier creates the AdminPassword file with world-writable permissions, which allows local users to gain priv
СредняяCVSS 4,6Proof of conceptEPSS 0 %sawmill · sawmill29 мая 2002 г.
- CVE-2005-295017Наблюдать
Cross-site scripting (XSS) vulnerability in Sawmill 7.0.0 through 7.1.13 allows remote attackers to inject arbitrary web script or HTML via
СредняяCVSS 4,3Эксплойта нетEPSS 1 %sawmill · sawmill16 сент. 2005 г.
- CVE-2005-190117Наблюдать
Multiple cross-site scripting (XSS) vulnerabilities in Sawmill before 7.1.6 allow remote attackers to inject arbitrary web script or HTML vi
СредняяCVSS 4,3Эксплойта нетEPSS 1 %sawmill · sawmill9 июн. 2005 г.
- CVE-2010-107917Наблюдать
Cross-site scripting (XSS) vulnerability in Sawmill before 7.2.18 allows remote attackers to inject arbitrary web script or HTML via unspeci
СредняяCVSS 4,3Эксплойта нетEPSS 1 %sawmill · sawmill23 мар. 2010 г.