İçeriğe atla
Noroxi

9001 kayıtları

9001 üreticisine ait 12 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
2
Düzeltme kaydı olan
%91,7
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Tüm kayıtlar

12 kayıt
  • CVE-2023-37474
    43Planlayın

    Path traversal in copyparty

    YüksekCVSS 7,5Kavram kanıtıEPSS %45

    9001 · copyparty14 Tem 2023

  • CVE-2023-41471
    31İzleyin

    Cross Site Scripting vulnerability in copyparty before 1.9.2 allows a local attacker to execute arbitrary code via a crafted payload to the

    YüksekCVSS 7,8İstismar yokEPSS %0

    9001 · copyparty29 Ağu 2025

  • CVE-2025-54796
    30İzleyin

    Copyparty is vulnerable to Regex Denial of Service (ReDoS) attacks through "Recent Uploads" page

    YüksekCVSS 7,5İstismar yokEPSS %0

    9001 · copyparty1 Ağu 2025

  • CVE-2023-38501
    27İzleyin

    copyparty vulnerable to reflected cross-site scripting via k304 parameter

    OrtaCVSS 6,1Kavram kanıtıEPSS %9

    9001 · copyparty25 Tem 2023

  • CVE-2025-54589
    25İzleyin

    copyparty Reflected XSS via Filter Parameter

    OrtaCVSS 6,1Kavram kanıtıEPSS %2

    9001 · copyparty31 Tem 2025

  • CVE-2025-27145
    24İzleyin

    copyparty renders unsanitized filenames as HTML when user uploads empty files

    OrtaCVSS 6,1İstismar yokEPSS %0

    9001 · copyparty24 Şub 2025

  • CVE-2025-54423
    24İzleyin

    copyparty has a DOM-Based XSS vulnerability when displaying multimedia metadata

    OrtaCVSS 6,1İstismar yokEPSS %0

    9001 · copyparty28 Tem 2025

  • CVE-2026-27948
    24İzleyin

    Copyparty vulnerable to eflected cross-site scripting via setck parameter

    OrtaCVSS 6,1İstismar yokEPSS %0

    9001 · copyparty25 Şub 2026

  • CVE-2025-58753
    21İzleyin

    copyparty: Sharing a single file does not fully restrict access to other files in source folder

    OrtaCVSS 5,3İstismar yokEPSS %0

    9001 · copyparty9 Eyl 2025

  • CVE-2026-30974
    21İzleyin

    Copyparty volflag `nohtml` did not block javascript in svg files

    OrtaCVSS 5,4İstismar yokEPSS %0

    9001 · copyparty10 Mar 2026

  • CVE-2026-32109
    17İzleyin

    Copyparty has unexpected JavaScript execution via crafted URL to folder with `.prologue.html`

    OrtaCVSS 4,4İstismar yokEPSS %0

    9001 · copyparty11 Mar 2026

  • Copyparty ftp/sftp: Sharing a single file did not fully restrict source-folder access

    DüşükCVSS 2,3İstismar yokEPSS %0

    9001 · copyparty11 Mar 2026