alldata kayıtları
alldata üreticisine ait 7 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-284 Improper Access Control2
- CWE-502 Deserialization of Untrusted Data2
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
7 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2024-27604İstismar yok | Alldata V0.4.6 is vulnerable to Command execution vulnerability.alldata · alldata · CWE-502 | Kritik9,8 | — | %1,0 | 2 Nis 2024 |
39İzleyin | CVE-2024-29433İstismar yok | A deserialization vulnerability in the FASTJSON component of Alldata v0.4.6 allows attackers to execute arbitrary commands via supplying craalldata · alldata · CWE-502 | Kritik9,8 | — | %0,8 | 1 Nis 2024 |
39İzleyin | CVE-2024-29432İstismar yok | Alldata v0.4.6 was discovered to contain a SQL injection vulnerability via the tablename parameter at /data/masterdata/datas.alldata · alldata · CWE-89 | Kritik9,8 | — | %0,5 | 2 Nis 2024 |
36İzleyin | CVE-2024-27602İstismar yok | Alldata V0.4.6 is vulnerable to Incorrect Access Control.alldata · alldata · CWE-284 | Kritik9,1 | — | %0,4 | 2 Nis 2024 |
33İzleyin | CVE-2024-29434İstismar yok | An issue in the system image upload interface of Alldata v0.4.6 allows attackers to execute a directory traversal when uploading a file.alldata · alldata · CWE-22 | Yüksek8,3 | — | %0,7 | 2 Nis 2024 |
30İzleyin | CVE-2024-27605İstismar yok | Alldata V0.4.6 is vulnerable to Insecure Permissions.alldata · alldata · CWE-284 | Yüksek7,5 | — | %0,4 | 2 Nis 2024 |
16İzleyin | CVE-2024-29435İstismar yok | An issue discovered in Alldata v0.4.6 allows attacker to run arbitrary commands via the processId parameter.alldata · alldata · CWE-77 | Orta4,1 | — | %0,3 | 1 Nis 2024 |
- CVE-2024-2760439İzleyin
Alldata V0.4.6 is vulnerable to Command execution vulnerability.
KritikCVSS 9,8İstismar yokEPSS %1alldata · alldata2 Nis 2024
- CVE-2024-2943339İzleyin
A deserialization vulnerability in the FASTJSON component of Alldata v0.4.6 allows attackers to execute arbitrary commands via supplying cra
KritikCVSS 9,8İstismar yokEPSS %1alldata · alldata1 Nis 2024
- CVE-2024-2943239İzleyin
Alldata v0.4.6 was discovered to contain a SQL injection vulnerability via the tablename parameter at /data/masterdata/datas.
KritikCVSS 9,8İstismar yokEPSS %1alldata · alldata2 Nis 2024
- CVE-2024-2760236İzleyin
Alldata V0.4.6 is vulnerable to Incorrect Access Control.
KritikCVSS 9,1İstismar yokEPSS %0alldata · alldata2 Nis 2024
- CVE-2024-2943433İzleyin
An issue in the system image upload interface of Alldata v0.4.6 allows attackers to execute a directory traversal when uploading a file.
YüksekCVSS 8,3İstismar yokEPSS %1alldata · alldata2 Nis 2024
- CVE-2024-2760530İzleyin
Alldata V0.4.6 is vulnerable to Insecure Permissions.
YüksekCVSS 7,5İstismar yokEPSS %0alldata · alldata2 Nis 2024
- CVE-2024-2943516İzleyin
An issue discovered in Alldata v0.4.6 allows attacker to run arbitrary commands via the processId parameter.
OrtaCVSS 4,1İstismar yokEPSS %0alldata · alldata1 Nis 2024