Piotr Bazydlo (@chudyPB)

watchTowr

73 kredili kayıt · son 12 ayda 7 · 1 tanesi CISA KEV’de

Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.

Kredili kayıtlar

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
36İzleyin	CVE-2023-40062İstismar yok	Incomplete List of Disallowed Inputs Remote Code Execution Vulnerabilitysolarwinds · solarwinds platform · CWE-20 RCE	Yüksek8,8	—	%2,7	1 Kas 2023
36İzleyin	CVE-2023-33227İstismar yok	Directory Traversal Remote Code Execution Vulnerabilitysolarwinds · network configuration manager · CWE-22 RCE Yol geçişi	Yüksek8,8	—	%1,8	1 Kas 2023
36İzleyin	CVE-2023-33226İstismar yok	Directory Traversal Remote Code Execution Vulnerabilitysolarwinds · network configuration manager · CWE-22 RCE Yol geçişi	Yüksek8,8	—	%1,8	1 Kas 2023
36İzleyin	CVE-2023-35186İstismar yok	SolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution Vulnerabilitysolarwinds · access rights manager · CWE-502 RCE Deserializasyon	Yüksek8,8	—	%2,2	19 Eki 2023
39İzleyin	CVE-2023-35184İstismar yok	SolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution Vulnerabilitysolarwinds · access rights manager · CWE-502 pre-auth RCE Deserializasyon	Kritik9,8	—	%1,4	19 Eki 2023
31İzleyin	CVE-2023-35183İstismar yok	SolarWinds Access Rights Manager Incorrect Default Permissions Local Privilege Escalation Vulnerabilitysolarwinds · access rights manager · CWE-276 Yerel yetki yükseltme	Yüksek7,8	—	%0,2	19 Eki 2023
31İzleyin	CVE-2023-35181İstismar yok	SolarWinds Access Rights Manager Incorrect Default Permissions Local Privilege Escalation Vulnerabilitysolarwinds · access rights manager · CWE-276 Yerel yetki yükseltme	Yüksek7,8	—	%0,2	19 Eki 2023
43Planlayın	CVE-2023-35180İstismar yok	SolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution Vulnerabilitysolarwinds · access rights manager · CWE-502 RCE Deserializasyon	Yüksek8,8	—	%27,4	19 Eki 2023
30İzleyin	CVE-2023-23845İstismar yok	SolarWinds Platform Exposed Dangerous Method Vulnerabilitysolarwinds · orion platform · CWE-697 RCE	Yüksek7,2	—	%5,4	13 Eyl 2023
30İzleyin	CVE-2023-23840İstismar yok	SolarWinds Platform Exposed Dangerous Method Vulnerabilitysolarwinds · orion platform · CWE-697 RCE	Yüksek7,2	—	%5,4	13 Eyl 2023
29İzleyin	CVE-2023-23842İstismar yok	SolarWinds Network Configuration Manager Directory Traversal Vulnerabilitysolarwinds · network configuration monitor · CWE-22 RCE Yol geçişi	Yüksek7,2	—	%3,2	26 Tem 2023
29İzleyin	CVE-2023-33225İstismar yok	SolarWinds Platform Deserialization of Untrusted Data Vulnerabilitysolarwinds · solarwinds platform · CWE-697 RCE Deserializasyon	Yüksek7,2	—	%3,2	26 Tem 2023
29İzleyin	CVE-2023-33224İstismar yok	SolarWinds Platform Incorrect Behavior Order Vulnerabilitysolarwinds · solarwinds platform · CWE-696 RCE	Yüksek7,2	—	%2,8	26 Tem 2023
29İzleyin	CVE-2023-23844İstismar yok	SolarWinds Platform Incomplete List of Disallowed Inputs Vulnerabilitysolarwinds · solarwinds platform · CWE-184 RCE	Yüksek7,2	—	%3,0	26 Tem 2023
29İzleyin	CVE-2023-23843İstismar yok	SolarWinds Platform Incorrect Comparison Vulnerabilitysolarwinds · solarwinds platform · CWE-697 RCE	Yüksek7,2	—	%2,6	26 Tem 2023
39İzleyin	CVE-2023-34347İstismar yok	Delta Electronics InfraSuite Device Master Deserialization of Untrusted Datadeltaww · infrasuite device master · CWE-502 pre-auth RCE Deserializasyon	Kritik9,8	—	%1,0	10 Tem 2023
31İzleyin	CVE-2022-47505İstismar yok	SolarWinds Platform Local Privilege Escalation Vulnerabilitysolarwinds · orion platform · CWE-269 Yerel yetki yükseltme	Yüksek7,8	—	%0,2	21 Nis 2023
30İzleyin	CVE-2022-36963İstismar yok	SolarWinds Platform Deserialization of Untrusted Data Vulnerabilitysolarwinds · orion platform · CWE-94 RCE Deserializasyon Komut enjeksiyonu	Yüksek7,2	—	%8,2	21 Nis 2023
83Hemen	CVE-2023-27351Silahlaştırılmış	This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914).papercut · papercut mf · CWE-287 Kimlik doğrulamasız Kimlik doğrulama atlatma	Yüksek7,5	KEV	%78,1	20 Nis 2023
40Planlayın	CVE-2022-36983İstismar yok	This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche.ivanti · avalanche · CWE-306 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik9,8	—	%4,7	29 Mar 2023
52Planlayın	CVE-2022-36982İstismar yok	This vulnerability allows remote attackers to read arbitrary files on affected installations of Ivanti Avalanche 6.3.3.101.ivanti · avalanche · CWE-22 Kimlik doğrulamasız Yol geçişi	Yüksek7,5	—	%73,8	29 Mar 2023
64Bu hafta	CVE-2022-36981İstismar yok	This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche 6.3.3.101.ivanti · avalanche · CWE-22 pre-auth RCE Yol geçişi	Kritik9,8	—	%83,4	29 Mar 2023
57Planlayın	CVE-2022-36980İstismar yok	This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2.3490.ivanti · avalanche · CWE-367 Kimlik doğrulamasız Kimlik doğrulama atlatma Yarış durumu	Yüksek8,1	—	%83,1	29 Mar 2023
41Planlayın	CVE-2022-36979İstismar yok	This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2.3490.ivanti · avalanche · CWE-89 Kimlik doğrulamasız Kimlik doğrulama atlatma SQL enjeksiyonu	Kritik9,8	—	%6,5	29 Mar 2023
41Planlayın	CVE-2022-36978İstismar yok	This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche 6.3.2.3490.ivanti · avalanche · CWE-502 pre-auth RCE Deserializasyon	Kritik9,8	—	%7,3	29 Mar 2023

CVE-2023-40062
36İzleyin
Incomplete List of Disallowed Inputs Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %3
- RCE
solarwinds · solarwinds platform1 Kas 2023
CVE-2023-33227
36İzleyin
Directory Traversal Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %2
- RCE
- Yol geçişi
solarwinds · network configuration manager1 Kas 2023
CVE-2023-33226
36İzleyin
Directory Traversal Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %2
- RCE
- Yol geçişi
solarwinds · network configuration manager1 Kas 2023
CVE-2023-35186
36İzleyin
SolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %2
- RCE
- Deserializasyon
solarwinds · access rights manager19 Eki 2023
CVE-2023-35184
39İzleyin
SolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability
KritikCVSS 9,8İstismar yokEPSS %1
- pre-auth RCE
- Deserializasyon
solarwinds · access rights manager19 Eki 2023
CVE-2023-35183
31İzleyin
SolarWinds Access Rights Manager Incorrect Default Permissions Local Privilege Escalation Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0
- Yerel yetki yükseltme
solarwinds · access rights manager19 Eki 2023
CVE-2023-35181
31İzleyin
SolarWinds Access Rights Manager Incorrect Default Permissions Local Privilege Escalation Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0
- Yerel yetki yükseltme
solarwinds · access rights manager19 Eki 2023
CVE-2023-35180
43Planlayın
SolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %27
- RCE
- Deserializasyon
solarwinds · access rights manager19 Eki 2023
CVE-2023-23845
30İzleyin
SolarWinds Platform Exposed Dangerous Method Vulnerability
YüksekCVSS 7,2İstismar yokEPSS %5
- RCE
solarwinds · orion platform13 Eyl 2023
CVE-2023-23840
30İzleyin
SolarWinds Platform Exposed Dangerous Method Vulnerability
YüksekCVSS 7,2İstismar yokEPSS %5
- RCE
solarwinds · orion platform13 Eyl 2023
CVE-2023-23842
29İzleyin
SolarWinds Network Configuration Manager Directory Traversal Vulnerability
YüksekCVSS 7,2İstismar yokEPSS %3
- RCE
- Yol geçişi
solarwinds · network configuration monitor26 Tem 2023
CVE-2023-33225
29İzleyin
SolarWinds Platform Deserialization of Untrusted Data Vulnerability
YüksekCVSS 7,2İstismar yokEPSS %3
- RCE
- Deserializasyon
solarwinds · solarwinds platform26 Tem 2023
CVE-2023-33224
29İzleyin
SolarWinds Platform Incorrect Behavior Order Vulnerability
YüksekCVSS 7,2İstismar yokEPSS %3
- RCE
solarwinds · solarwinds platform26 Tem 2023
CVE-2023-23844
29İzleyin
SolarWinds Platform Incomplete List of Disallowed Inputs Vulnerability
YüksekCVSS 7,2İstismar yokEPSS %3
- RCE
solarwinds · solarwinds platform26 Tem 2023
CVE-2023-23843
29İzleyin
SolarWinds Platform Incorrect Comparison Vulnerability
YüksekCVSS 7,2İstismar yokEPSS %3
- RCE
solarwinds · solarwinds platform26 Tem 2023
CVE-2023-34347
39İzleyin
Delta Electronics InfraSuite Device Master Deserialization of Untrusted Data
KritikCVSS 9,8İstismar yokEPSS %1
- pre-auth RCE
- Deserializasyon
deltaww · infrasuite device master10 Tem 2023
CVE-2022-47505
31İzleyin
SolarWinds Platform Local Privilege Escalation Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0
- Yerel yetki yükseltme
solarwinds · orion platform21 Nis 2023
CVE-2022-36963
30İzleyin
SolarWinds Platform Deserialization of Untrusted Data Vulnerability
YüksekCVSS 7,2İstismar yokEPSS %8
- RCE
- Deserializasyon
- Komut enjeksiyonu
solarwinds · orion platform21 Nis 2023
CVE-2023-27351
83Hemen
This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914).
YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %78
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
papercut · papercut mf20 Nis 2023
CVE-2022-36983
40Planlayın
This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche.
KritikCVSS 9,8İstismar yokEPSS %5
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
ivanti · avalanche29 Mar 2023
CVE-2022-36982
52Planlayın
This vulnerability allows remote attackers to read arbitrary files on affected installations of Ivanti Avalanche 6.3.3.101.
YüksekCVSS 7,5İstismar yokEPSS %74
- Kimlik doğrulamasız
- Yol geçişi
ivanti · avalanche29 Mar 2023
CVE-2022-36981
64Bu hafta
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche 6.3.3.101.
KritikCVSS 9,8İstismar yokEPSS %83
- pre-auth RCE
- Yol geçişi
ivanti · avalanche29 Mar 2023
CVE-2022-36980
57Planlayın
This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2.3490.
YüksekCVSS 8,1İstismar yokEPSS %83
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
- Yarış durumu
ivanti · avalanche29 Mar 2023
CVE-2022-36979
41Planlayın
This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2.3490.
KritikCVSS 9,8İstismar yokEPSS %7
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
- SQL enjeksiyonu
ivanti · avalanche29 Mar 2023
CVE-2022-36978
41Planlayın
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche 6.3.2.3490.
KritikCVSS 9,8İstismar yokEPSS %7
- pre-auth RCE
- Deserializasyon
ivanti · avalanche29 Mar 2023