AUVESY kayıtları
auvesy üreticisine ait 17 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-400 Uncontrolled Resource Consumption2
- CWE-123 Write-what-where Condition1
- CWE-125 Out-of-bounds Read1
- CWE-15 External Control of System or Configuration Setting1
- CWE-20 Improper Input Validation1
- CWE-284 Improper Access Control1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
17 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2021-38457İstismar yok | The server permits communication without any authentication procedure, allowing the attacker to initiate a session with the server without pauvesy · versiondog · CWE-284 | Kritik9,8 | — | %1,3 | 22 Eki 2021 |
39İzleyin | CVE-2021-38449İstismar yok | Some API functions permit by-design writing or copying data into a given buffer.auvesy · versiondog · CWE-123 | Kritik9,8 | — | %1,2 | 22 Eki 2021 |
39İzleyin | CVE-2021-38477İstismar yok | There are multiple API function codes that permit reading and writing data to or from files and directories, which could lead to the manipulauvesy · versiondog · CWE-73 | Kritik9,8 | — | %1,1 | 22 Eki 2021 |
39İzleyin | CVE-2021-38459İstismar yok | The data of a network capture of the initial handshake phase can be used to authenticate at a SYSDBA level.auvesy · versiondog · CWE-294 | Kritik9,8 | — | %1,0 | 22 Eki 2021 |
39İzleyin | CVE-2021-38481İstismar yok | The scheduler service running on a specific TCP port enables the user to start and stop jobs.auvesy · versiondog · CWE-89 | Kritik9,8 | — | %1,0 | 22 Eki 2021 |
36İzleyin | CVE-2021-38471İstismar yok | There are multiple API function codes that permit data writing to any file, which may allow an attacker to modify existing files or create nauvesy · versiondog · CWE-434 | Kritik9,1 | — | %1,1 | 22 Eki 2021 |
36İzleyin | CVE-2021-38453İstismar yok | Some API functions allow interaction with the registry, which includes reading values as well as data modification.auvesy · versiondog · CWE-15 | Kritik9,1 | — | %1,0 | 22 Eki 2021 |
35İzleyin | CVE-2021-38473İstismar yok | The affected product’s code base doesn’t properly control arguments for specific functions, which could lead to a stack overflow.auvesy · versiondog · CWE-119 | Yüksek8,8 | — | %0,9 | 22 Eki 2021 |
35İzleyin | CVE-2021-38475İstismar yok | The database connection to the server is performed by calling a specific API, which could allow an unprivileged user to gain SYSDBA permissiauvesy · versiondog · CWE-732 | Yüksek8,8 | — | %0,9 | 22 Eki 2021 |
32İzleyin | CVE-2021-38463İstismar yok | The affected product does not properly control the allocation of resources.auvesy · versiondog · CWE-400 | Yüksek8,1 | — | %0,7 | 22 Eki 2021 |
32İzleyin | CVE-2021-38467İstismar yok | A specific function code receives a raw pointer supplied by the user and deallocates this pointer.auvesy · versiondog · CWE-416 | Yüksek8,1 | — | %0,7 | 22 Eki 2021 |
32İzleyin | CVE-2021-38461İstismar yok | The affected product uses a hard-coded blowfish key for encryption/decryption processes.auvesy · versiondog · CWE-321 | Yüksek8,2 | — | %0,5 | 22 Eki 2021 |
30İzleyin | CVE-2021-38479İstismar yok | Many API function codes receive raw pointers remotely from the user and trust these pointers as valid in-bound memory regions.auvesy · versiondog · CWE-787 | Yüksek7,5 | — | %0,9 | 22 Eki 2021 |
28İzleyin | CVE-2021-38469İstismar yok | Many of the services used by the affected product do not specify full paths for the DLLs they are loading.auvesy · versiondog · CWE-427 | Yüksek7,1 | — | %0,6 | 22 Eki 2021 |
26İzleyin | CVE-2021-38465İstismar yok | The webinstaller is a Golang web server executable that enables the generation of an Auvesy image agent.auvesy · versiondog · CWE-400 | Orta6,5 | — | %0,8 | 22 Eki 2021 |
26İzleyin | CVE-2021-38455İstismar yok | The affected product’s OS Service does not verify any given parameter.auvesy · versiondog · CWE-20 | Orta6,5 | — | %0,7 | 22 Eki 2021 |
22İzleyin | CVE-2021-38451İstismar yok | The affected product’s proprietary protocol CSC allows for calling numerous function codes.auvesy · versiondog · CWE-125 | Orta5,7 | — | %0,6 | 22 Eki 2021 |
- CVE-2021-3845739İzleyin
The server permits communication without any authentication procedure, allowing the attacker to initiate a session with the server without p
KritikCVSS 9,8İstismar yokEPSS %1auvesy · versiondog22 Eki 2021
- CVE-2021-3844939İzleyin
Some API functions permit by-design writing or copying data into a given buffer.
KritikCVSS 9,8İstismar yokEPSS %1auvesy · versiondog22 Eki 2021
- CVE-2021-3847739İzleyin
There are multiple API function codes that permit reading and writing data to or from files and directories, which could lead to the manipul
KritikCVSS 9,8İstismar yokEPSS %1auvesy · versiondog22 Eki 2021
- CVE-2021-3845939İzleyin
The data of a network capture of the initial handshake phase can be used to authenticate at a SYSDBA level.
KritikCVSS 9,8İstismar yokEPSS %1auvesy · versiondog22 Eki 2021
- CVE-2021-3848139İzleyin
The scheduler service running on a specific TCP port enables the user to start and stop jobs.
KritikCVSS 9,8İstismar yokEPSS %1auvesy · versiondog22 Eki 2021
- CVE-2021-3847136İzleyin
There are multiple API function codes that permit data writing to any file, which may allow an attacker to modify existing files or create n
KritikCVSS 9,1İstismar yokEPSS %1auvesy · versiondog22 Eki 2021
- CVE-2021-3845336İzleyin
Some API functions allow interaction with the registry, which includes reading values as well as data modification.
KritikCVSS 9,1İstismar yokEPSS %1auvesy · versiondog22 Eki 2021
- CVE-2021-3847335İzleyin
The affected product’s code base doesn’t properly control arguments for specific functions, which could lead to a stack overflow.
YüksekCVSS 8,8İstismar yokEPSS %0auvesy · versiondog22 Eki 2021
- CVE-2021-3847535İzleyin
The database connection to the server is performed by calling a specific API, which could allow an unprivileged user to gain SYSDBA permissi
YüksekCVSS 8,8İstismar yokEPSS %0auvesy · versiondog22 Eki 2021
- CVE-2021-3846332İzleyin
The affected product does not properly control the allocation of resources.
YüksekCVSS 8,1İstismar yokEPSS %0auvesy · versiondog22 Eki 2021
- CVE-2021-3846732İzleyin
A specific function code receives a raw pointer supplied by the user and deallocates this pointer.
YüksekCVSS 8,1İstismar yokEPSS %0auvesy · versiondog22 Eki 2021
- CVE-2021-3846132İzleyin
The affected product uses a hard-coded blowfish key for encryption/decryption processes.
YüksekCVSS 8,2İstismar yokEPSS %0auvesy · versiondog22 Eki 2021
- CVE-2021-3847930İzleyin
Many API function codes receive raw pointers remotely from the user and trust these pointers as valid in-bound memory regions.
YüksekCVSS 7,5İstismar yokEPSS %0auvesy · versiondog22 Eki 2021
- CVE-2021-3846928İzleyin
Many of the services used by the affected product do not specify full paths for the DLLs they are loading.
YüksekCVSS 7,1İstismar yokEPSS %0auvesy · versiondog22 Eki 2021
- CVE-2021-3846526İzleyin
The webinstaller is a Golang web server executable that enables the generation of an Auvesy image agent.
OrtaCVSS 6,5İstismar yokEPSS %0auvesy · versiondog22 Eki 2021
- CVE-2021-3845526İzleyin
The affected product’s OS Service does not verify any given parameter.
OrtaCVSS 6,5İstismar yokEPSS %0auvesy · versiondog22 Eki 2021
- CVE-2021-3845122İzleyin
The affected product’s proprietary protocol CSC allows for calling numerous function codes.
OrtaCVSS 5,7İstismar yokEPSS %0auvesy · versiondog22 Eki 2021