ascertia kayıtları
ascertia üreticisine ait 8 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-307 Improper Restriction of Excessive Authentication Attempts2
- CWE-770 Allocation of Resources Without Limits or Throttling2
- CWE-284 Improper Access Control1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')1
- CWE-799 Improper Control of Interaction Frequency1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
8 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2025-56218Kavram kanıtı | An arbitrary file upload vulnerability in SigningHub v8.6.8 allows attackers to execute arbitrary code via uploading a crafted PDF file.ascertia · signinghub · CWE-434 | Kritik9,8 | — | %0,6 | 17 Eki 2025 |
39İzleyin | CVE-2025-56221Kavram kanıtı | A lack of rate limiting in the login mechanism of SigningHub v8.6.8 allows attackers to bypass authentication via a brute force attack.ascertia · signinghub · CWE-307 | Kritik9,8 | — | %0,5 | 17 Eki 2025 |
39İzleyin | CVE-2025-54321Kavram kanıtı | In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an email bombing vulnerabiascertia · signinghub · CWE-799 | Kritik9,8 | — | %0,5 | 18 Kas 2025 |
32İzleyin | CVE-2025-56224Kavram kanıtı | A lack of rate limiting in the One-Time Password (OTP) verification endpoint of SigningHub v8.6.8 allows attackers to bypass verification viascertia · signinghub · CWE-307 | Yüksek8,1 | — | %0,3 | 20 Eki 2025 |
30İzleyin | CVE-2025-56223Kavram kanıtı | A lack of rate limiting in the component /Home/UploadStreamDocument of SigningHub v8.6.8 allows attackers to cause a Denial of Service (DoS)ascertia · signinghub · CWE-770 | Yüksek7,5 | — | %0,4 | 20 Eki 2025 |
28İzleyin | CVE-2025-56219Kavram kanıtı | Incorrect access control in SigningHub v8.6.8 allows attackers to arbitrarily add user accounts without any rate limiting.ascertia · signinghub · CWE-284 | Yüksek7,1 | — | %0,3 | 20 Eki 2025 |
24İzleyin | CVE-2025-61166İstismar yok | An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a malicious site via a crafted URL.ascertia · signinghub · CWE-601 | Orta6,1 | — | %0,1 | 6 Nis 2026 |
17İzleyin | CVE-2025-54320Kavram kanıtı | In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the invite user function, leading to an email bombing vulnerabilitascertia · signinghub · CWE-770 | Orta4,3 | — | %0,3 | 18 Kas 2025 |
- CVE-2025-5621839İzleyin
An arbitrary file upload vulnerability in SigningHub v8.6.8 allows attackers to execute arbitrary code via uploading a crafted PDF file.
KritikCVSS 9,8Kavram kanıtıEPSS %0ascertia · signinghub17 Eki 2025
- CVE-2025-5622139İzleyin
A lack of rate limiting in the login mechanism of SigningHub v8.6.8 allows attackers to bypass authentication via a brute force attack.
KritikCVSS 9,8Kavram kanıtıEPSS %0ascertia · signinghub17 Eki 2025
- CVE-2025-5432139İzleyin
In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an email bombing vulnerabi
KritikCVSS 9,8Kavram kanıtıEPSS %0ascertia · signinghub18 Kas 2025
- CVE-2025-5622432İzleyin
A lack of rate limiting in the One-Time Password (OTP) verification endpoint of SigningHub v8.6.8 allows attackers to bypass verification vi
YüksekCVSS 8,1Kavram kanıtıEPSS %0ascertia · signinghub20 Eki 2025
- CVE-2025-5622330İzleyin
A lack of rate limiting in the component /Home/UploadStreamDocument of SigningHub v8.6.8 allows attackers to cause a Denial of Service (DoS)
YüksekCVSS 7,5Kavram kanıtıEPSS %0ascertia · signinghub20 Eki 2025
- CVE-2025-5621928İzleyin
Incorrect access control in SigningHub v8.6.8 allows attackers to arbitrarily add user accounts without any rate limiting.
YüksekCVSS 7,1Kavram kanıtıEPSS %0ascertia · signinghub20 Eki 2025
- CVE-2025-6116624İzleyin
An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a malicious site via a crafted URL.
OrtaCVSS 6,1İstismar yokEPSS %0ascertia · signinghub6 Nis 2026
- CVE-2025-5432017İzleyin
In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the invite user function, leading to an email bombing vulnerabilit
OrtaCVSS 4,3Kavram kanıtıEPSS %0ascertia · signinghub18 Kas 2025