ajenti kayıtları
ajenti üreticisine ait 13 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 1 · %7,7
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %53,8
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-287 Improper Authentication2
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-269 Improper Privilege Management1
- CWE-284 Improper Access Control1
- CWE-352 Cross-Site Request Forgery (CSRF)1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
13 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2019-25066Silahlaştırılmış | ajenti API privileges managementajenti · ajenti · CWE-269 | Yüksek8,8 | — | %5,4 | 9 Haz 2022 |
37İzleyin | CVE-2026-40177İstismar yok | Password bypass when 2FA is activatedajenti · ajenti plugin core · CWE-287 | Kritik9,3 | — | %0,3 | 10 Nis 2026 |
35İzleyin | CVE-2018-1000082İstismar yok | Ajenti version version 2 contains a Cross ite Request Forgery (CSRF) vulnerability in the command execution panel of the tool used to manageajenti · ajenti · CWE-352 | Yüksek8,8 | — | %1,2 | 13 Mar 2018 |
32İzleyin | CVE-2026-27975İstismar yok | Ajenti has a potential Remote Code Executionajenti · ajenti · CWE-284 | Yüksek8,1 | — | %0,5 | 25 Şub 2026 |
30İzleyin | CVE-2018-1000126İstismar yok | Ajenti version 2 contains an Information Disclosure vulnerability in Line 176 of the code source that can result in user and system enumeratajenti · ajenti · CWE-200 | Yüksek7,5 | — | %1,5 | 13 Mar 2018 |
30İzleyin | CVE-2018-1000081İstismar yok | Ajenti version version 2 contains a Input Validation vulnerability in ID string on Get-values POST request that can result in Server Crashinajenti · ajenti · CWE-20 | Yüksek7,5 | — | %1,1 | 13 Mar 2018 |
28İzleyin | CVE-2026-35175İstismar yok | Ajenti has an authorization bypass during custom package installationajenti · ajenti · CWE-862 | Yüksek7,2 | — | %0,2 | 6 Nis 2026 |
27İzleyin | CVE-2026-40178İstismar yok | ajenti.plugin.core has a race conditions in 2FAajenti · ajenti plugin core · CWE-287 | Orta6,9 | — | %0,2 | 10 Nis 2026 |
26İzleyin | CVE-2018-1000080İstismar yok | Ajenti version version 2 contains a Insecure Permissions vulnerability in Plugins download that can result in The download of any plugins asajenti · ajenti · CWE-732 | Orta6,5 | — | %0,8 | 13 Mar 2018 |
25İzleyin | CVE-2018-18548Kavram kanıtı | ajenticp (aka Ajenti Docker control panel) for Ajenti through v1.2.23.13 has XSS via a filename that is mishandled in File Manager.ajenti · ajenticp · CWE-79 | Orta6,1 | — | %3,5 | 24 Eki 2018 |
21İzleyin | CVE-2018-1000083İstismar yok | Ajenti version version 2 contains a Improper Error Handling vulnerability in Login JSON request that can result in The requisition leaks a pajenti · ajenti · CWE-22 | Orta5,3 | — | %1,5 | 13 Mar 2018 |
18İzleyin | CVE-2014-4301İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in the respond_error function in routing.py in Eugene Pankov Ajenti before 1.2.21.7 alloajenti · ajenti · CWE-79 | Orta4,3 | — | %2,3 | 18 Haz 2014 |
14İzleyin | CVE-2014-2260İstismar yok | Cross-site scripting (XSS) vulnerability in plugins/main/content/js/ajenti.coffee in Eugene Pankov Ajenti 1.2.13 allows remote authenticatedajenti · ajenti · CWE-79 | Düşük3,5 | — | %1,4 | 30 Nis 2014 |
- CVE-2019-2506640Planlayın
ajenti API privileges management
YüksekCVSS 8,8SilahlaştırılmışEPSS %5ajenti · ajenti9 Haz 2022
- CVE-2026-4017737İzleyin
Password bypass when 2FA is activated
KritikCVSS 9,3İstismar yokEPSS %0ajenti · ajenti plugin core10 Nis 2026
- CVE-2018-100008235İzleyin
Ajenti version version 2 contains a Cross ite Request Forgery (CSRF) vulnerability in the command execution panel of the tool used to manage
YüksekCVSS 8,8İstismar yokEPSS %1ajenti · ajenti13 Mar 2018
- CVE-2026-2797532İzleyin
Ajenti has a potential Remote Code Execution
YüksekCVSS 8,1İstismar yokEPSS %0ajenti · ajenti25 Şub 2026
- CVE-2018-100012630İzleyin
Ajenti version 2 contains an Information Disclosure vulnerability in Line 176 of the code source that can result in user and system enumerat
YüksekCVSS 7,5İstismar yokEPSS %1ajenti · ajenti13 Mar 2018
- CVE-2018-100008130İzleyin
Ajenti version version 2 contains a Input Validation vulnerability in ID string on Get-values POST request that can result in Server Crashin
YüksekCVSS 7,5İstismar yokEPSS %1ajenti · ajenti13 Mar 2018
- CVE-2026-3517528İzleyin
Ajenti has an authorization bypass during custom package installation
YüksekCVSS 7,2İstismar yokEPSS %0ajenti · ajenti6 Nis 2026
- CVE-2026-4017827İzleyin
ajenti.plugin.core has a race conditions in 2FA
OrtaCVSS 6,9İstismar yokEPSS %0ajenti · ajenti plugin core10 Nis 2026
- CVE-2018-100008026İzleyin
Ajenti version version 2 contains a Insecure Permissions vulnerability in Plugins download that can result in The download of any plugins as
OrtaCVSS 6,5İstismar yokEPSS %0ajenti · ajenti13 Mar 2018
- CVE-2018-1854825İzleyin
ajenticp (aka Ajenti Docker control panel) for Ajenti through v1.2.23.13 has XSS via a filename that is mishandled in File Manager.
OrtaCVSS 6,1Kavram kanıtıEPSS %3ajenti · ajenticp24 Eki 2018
- CVE-2018-100008321İzleyin
Ajenti version version 2 contains a Improper Error Handling vulnerability in Login JSON request that can result in The requisition leaks a p
OrtaCVSS 5,3İstismar yokEPSS %1ajenti · ajenti13 Mar 2018
- CVE-2014-430118İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in the respond_error function in routing.py in Eugene Pankov Ajenti before 1.2.21.7 allo
OrtaCVSS 4,3İstismar yokEPSS %2ajenti · ajenti18 Haz 2014
- CVE-2014-226014İzleyin
Cross-site scripting (XSS) vulnerability in plugins/main/content/js/ajenti.coffee in Eugene Pankov Ajenti 1.2.13 allows remote authenticated
DüşükCVSS 3,5İstismar yokEPSS %1ajenti · ajenti30 Nis 2014