archerydms kayıtları
archerydms üreticisine ait 15 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')14
- CWE-798 Use of Hard-coded Credentials1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
15 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2022-38541İstismar yok | Archery v1.8.3 to v1.8.5 was discovered to contain multiple SQL injection vulnerabilities via the start_time and stop_time parameters in thearcherydms · archery · CWE-89 | Kritik9,8 | — | %1,2 | 13 Eyl 2022 |
39İzleyin | CVE-2022-38539İstismar yok | Archery v1.7.5 to v1.8.5 was discovered to contain a SQL injection vulnerability via the where parameter at /archive/apply.archerydms · archery · CWE-89 | Kritik9,8 | — | %1,1 | 13 Eyl 2022 |
39İzleyin | CVE-2022-38542İstismar yok | Archery v1.4.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the ThreadIDs parameter in the kill_session interface.archerydms · archery · CWE-89 | Kritik9,8 | — | %1,1 | 13 Eyl 2022 |
39İzleyin | CVE-2022-38538İstismar yok | Archery v1.7.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the checksum parameter in the report module.archerydms · archery · CWE-89 | Kritik9,8 | — | %1,1 | 13 Eyl 2022 |
39İzleyin | CVE-2022-38540İstismar yok | Archery v1.4.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the ThreadIDs parameter in the create_kill_session intearcherydms · archery · CWE-89 | Kritik9,8 | — | %1,1 | 13 Eyl 2022 |
39İzleyin | CVE-2022-38537İstismar yok | Archery v1.4.5 to v1.8.5 was discovered to contain multiple SQL injection vulnerabilities via the start_file, end_file, start_time, and stoparcherydms · archery · CWE-89 | Kritik9,8 | — | %1,1 | 13 Eyl 2022 |
30İzleyin | CVE-2023-48053İstismar yok | Archery v1.10.0 uses a non-random or static IV for Cipher Block Chaining (CBC) mode in AES encryption.archerydms · archery · CWE-798 | Yüksek7,5 | — | %0,3 | 16 Kas 2023 |
26İzleyin | CVE-2023-30605İstismar yok | Multiple SQL injections in sql/instance.py param_edit method in Archery - GHSL-2022-104archerydms · archery · CWE-89 | Orta6,5 | — | %0,8 | 18 Nis 2023 |
26İzleyin | CVE-2023-30557İstismar yok | SQL injection in data_dictionary.py table_info method in Archery - GHSL-2022-106archerydms · archery · CWE-89 | Orta6,5 | — | %0,8 | 18 Nis 2023 |
26İzleyin | CVE-2023-30555İstismar yok | SQL injection in sql_optimize.py explain method in Archery - GHSL-2022-108archerydms · archery · CWE-89 | Orta6,5 | — | %0,8 | 18 Nis 2023 |
26İzleyin | CVE-2023-30556İstismar yok | SQL injection in sql_optimize.py optimize_sqltuningadvisor method in Archery - GHSL-2022-107archerydms · archery · CWE-89 | Orta6,5 | — | %0,8 | 18 Nis 2023 |
26İzleyin | CVE-2023-30558İstismar yok | Multiple SQL injections in sql/data_dictionary.py table_list method in Archery - GHSL-2022-105archerydms · archery · CWE-89 | Orta6,5 | — | %0,8 | 18 Nis 2023 |
26İzleyin | CVE-2023-30553İstismar yok | Multiple SQL injections in sql_api/api_workflow.py endpoint in Archery - GHSL-2022-102archerydms · archery · CWE-89 | Orta6,5 | — | %0,8 | 18 Nis 2023 |
26İzleyin | CVE-2023-30552İstismar yok | SQL injection in sql/instance.py endpoint in Archery - GHSL-2022-101archerydms · archery · CWE-89 | Orta6,5 | — | %0,8 | 18 Nis 2023 |
26İzleyin | CVE-2023-30554İstismar yok | SQL injection in sql_api/api_workflow.py endpoint in Archery - GHSL-2022-103archerydms · archery · CWE-89 | Orta6,5 | — | %0,8 | 18 Nis 2023 |
- CVE-2022-3854139İzleyin
Archery v1.8.3 to v1.8.5 was discovered to contain multiple SQL injection vulnerabilities via the start_time and stop_time parameters in the
KritikCVSS 9,8İstismar yokEPSS %1archerydms · archery13 Eyl 2022
- CVE-2022-3853939İzleyin
Archery v1.7.5 to v1.8.5 was discovered to contain a SQL injection vulnerability via the where parameter at /archive/apply.
KritikCVSS 9,8İstismar yokEPSS %1archerydms · archery13 Eyl 2022
- CVE-2022-3854239İzleyin
Archery v1.4.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the ThreadIDs parameter in the kill_session interface.
KritikCVSS 9,8İstismar yokEPSS %1archerydms · archery13 Eyl 2022
- CVE-2022-3853839İzleyin
Archery v1.7.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the checksum parameter in the report module.
KritikCVSS 9,8İstismar yokEPSS %1archerydms · archery13 Eyl 2022
- CVE-2022-3854039İzleyin
Archery v1.4.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the ThreadIDs parameter in the create_kill_session inte
KritikCVSS 9,8İstismar yokEPSS %1archerydms · archery13 Eyl 2022
- CVE-2022-3853739İzleyin
Archery v1.4.5 to v1.8.5 was discovered to contain multiple SQL injection vulnerabilities via the start_file, end_file, start_time, and stop
KritikCVSS 9,8İstismar yokEPSS %1archerydms · archery13 Eyl 2022
- CVE-2023-4805330İzleyin
Archery v1.10.0 uses a non-random or static IV for Cipher Block Chaining (CBC) mode in AES encryption.
YüksekCVSS 7,5İstismar yokEPSS %0archerydms · archery16 Kas 2023
- CVE-2023-3060526İzleyin
Multiple SQL injections in sql/instance.py param_edit method in Archery - GHSL-2022-104
OrtaCVSS 6,5İstismar yokEPSS %0archerydms · archery18 Nis 2023
- CVE-2023-3055726İzleyin
SQL injection in data_dictionary.py table_info method in Archery - GHSL-2022-106
OrtaCVSS 6,5İstismar yokEPSS %0archerydms · archery18 Nis 2023
- CVE-2023-3055526İzleyin
SQL injection in sql_optimize.py explain method in Archery - GHSL-2022-108
OrtaCVSS 6,5İstismar yokEPSS %0archerydms · archery18 Nis 2023
- CVE-2023-3055626İzleyin
SQL injection in sql_optimize.py optimize_sqltuningadvisor method in Archery - GHSL-2022-107
OrtaCVSS 6,5İstismar yokEPSS %0archerydms · archery18 Nis 2023
- CVE-2023-3055826İzleyin
Multiple SQL injections in sql/data_dictionary.py table_list method in Archery - GHSL-2022-105
OrtaCVSS 6,5İstismar yokEPSS %0archerydms · archery18 Nis 2023
- CVE-2023-3055326İzleyin
Multiple SQL injections in sql_api/api_workflow.py endpoint in Archery - GHSL-2022-102
OrtaCVSS 6,5İstismar yokEPSS %0archerydms · archery18 Nis 2023
- CVE-2023-3055226İzleyin
SQL injection in sql/instance.py endpoint in Archery - GHSL-2022-101
OrtaCVSS 6,5İstismar yokEPSS %0archerydms · archery18 Nis 2023
- CVE-2023-3055426İzleyin
SQL injection in sql_api/api_workflow.py endpoint in Archery - GHSL-2022-103
OrtaCVSS 6,5İstismar yokEPSS %0archerydms · archery18 Nis 2023