İçeriğe atla
Noroxi

Barracuda kayıtları

barracuda üreticisine ait 18 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
1 · %5,6
Silahlaştırılmış
2 · %11,1
Pre-auth RCE
6
Düzeltme kaydı olan
%11,1
Yayından KEV’e ortanca
2 gün

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 23
  7. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

18 kayıt
  • CVE-2023-2868
    95Hemen

    Remote Code injection in Barracuda Email Security Gateway

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %88

    barracuda · email security gateway 300 firmware24 May 2023

  • CVE-2023-7102
    52Planlayın

    Remote Code Execution (RCE) Vulnerability

    KritikCVSS 9,8SilahlaştırılmışEPSS %45

    barracuda · email security gateway 300 firmware24 Ara 2023

  • CVE-2025-34392
    47Planlayın

    Barracuda RMM < 2025.1.1 Service Center Absolute Path Traversal RCE

    KritikCVSS 10,0İstismar yokEPSS %25

    barracuda · rmm10 Ara 2025

  • CVE-2014-2595
    44Planlayın

    Barracuda Web Application Firewall (WAF) 7.8.1.013 allows remote attackers to bypass authentication by leveraging a permanent authentication

    KritikCVSS 9,8Kavram kanıtıEPSS %17

    barracuda · web application firewall11 Şub 2020

  • CVE-2014-8428
    40Planlayın

    Privilege escalation vulnerability in Barracuda Load Balancer 5.0.0.015 via the use of an improperly protected SSH key.

    KritikCVSS 9,8İstismar yokEPSS %2

    barracuda · load balancer28 Ağu 2017

  • CVE-2014-8426
    40Planlayın

    Hard coded weak credentials in Barracuda Load Balancer 5.0.0.015.

    KritikCVSS 9,8İstismar yokEPSS %2

    barracuda · load balancer28 Ağu 2017

  • CVE-2025-34393
    40Planlayın

    Barracuda RMM < 2025.1.1 Service Center Insecure Reflection RCE

    KritikCVSS 10,0İstismar yokEPSS %1

    barracuda · rmm10 Ara 2025

  • CVE-2025-34394
    40Planlayın

    Barracuda RMM < 2025.1.1 Service Center .NET Remoting Deserialization RCE

    KritikCVSS 10,0İstismar yokEPSS %1

    barracuda · rmm10 Ara 2025

  • CVE-2017-6320
    38İzleyin

    A remote command injection vulnerability exists in the Barracuda Load Balancer product line (confirmed on v5.4.0.004 (2015-11-26) and v6.0.1

    YüksekCVSS 8,8Kavram kanıtıEPSS %11

    barracuda · load balancer adc18 Tem 2017

  • CVE-2025-34395
    34İzleyin

    Barracuda RMM < 2025.1.1 Service Center .NET Remoting Path Traversal RCE

    YüksekCVSS 8,7İstismar yokEPSS %1

    barracuda · rmm10 Ara 2025

  • CVE-2019-6724
    31İzleyin

    The barracudavpn component of the Barracuda VPN Client prior to version 5.0.2.7 for Linux, macOS, and OpenBSD runs as a privileged process a

    YüksekCVSS 7,8İstismar yokEPSS %1

    barracuda · vpn client21 Mar 2019

  • CVE-2021-42711
    31İzleyin

    Barracuda Network Access Client before 5.2.2 creates a Temporary File in a Directory with Insecure Permissions.

    YüksekCVSS 7,8İstismar yokEPSS %0

    barracuda · network access client1 Ara 2021

  • CVE-2023-26213
    30İzleyin

    On Barracuda CloudGen WAN Private Edge Gateway devices before 8 webui-sdwan-1089-8.3.1-174141891, an OS command injection vulnerability exis

    YüksekCVSS 7,2İstismar yokEPSS %8

    barracuda · t100b firmware3 Mar 2023

  • CVE-2019-5648
    26İzleyin

    LDAP Credential Exposure in Barracuda Load Balancer ADC

    OrtaCVSS 6,5İstismar yokEPSS %1

    barracuda · load balancer adc firmware12 Mar 2020

  • CVE-2018-20369
    24İzleyin

    Barracuda Message Archiver 2018 has XSS in the error_msg exception-handling value for the ldap_user parameter to the cgi-mod/ldap_load_entry

    OrtaCVSS 6,1İstismar yokEPSS %1

    barracuda · message archiver22 Ara 2018

  • CVE-2025-8319
    24İzleyin

    the BMA login interface allows arbitrary JavaScript or HTML to be written straight into the page’s Document Object Model via the error= URL

    OrtaCVSS 6,1İstismar yokEPSS %0

    barracuda · message archiver firmware29 Tem 2025

  • CVE-2015-0962
    17İzleyin

    Barracuda Web Filter 7.x and 8.x before 8.1.0.005, when SSL Inspection is enabled, uses the same root Certification Authority certificate ac

    OrtaCVSS 4,3İstismar yokEPSS %1

    barracuda · web filter25 May 2015

  • CVE-2015-0961
    17İzleyin

    Barracuda Web Filter before 8.1.0.005, when SSL Inspection is enabled, does not verify X.509 certificates from upstream SSL servers, which a

    OrtaCVSS 4,3İstismar yokEPSS %1

    barracuda · web filter25 May 2015