Bowo kayıtları
bowo üreticisine ait 14 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %42,9
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-862 Missing Authorization7
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-73 External Control of File Name or Path1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
14 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2024-35669İstismar yok | WordPress Debug Log Manager plugin <= 2.3.1 - Broken Access Control vulnerabilitybowo · debug log manager · CWE-862 | Yüksek8,8 | — | %0,4 | 9 Haz 2024 |
30İzleyin | CVE-2023-6383İstismar yok | Debug Log Manager < 2.3.0 - Sensitive Logs Exposurebowo · debug log manager · CWE-862 | Yüksek7,5 | — | %0,6 | 8 Oca 2024 |
30İzleyin | CVE-2023-6136İstismar yok | WordPress Debug Log Manager Plugin <= 2.3.0 is vulnerable to Sensitive Data Exposurebowo · debug log manager · CWE-200 | Yüksek7,5 | — | %0,6 | 30 Kas 2023 |
24İzleyin | CVE-2024-12299İstismar yok | System Dashboard <= 2.8.17 - Reflected Cross-Site Scripting via Filename Parameterbowo · system dashboard · CWE-79 | Orta6,1 | — | %0,4 | 30 Oca 2025 |
24İzleyin | CVE-2024-11107İstismar yok | System Dashboard < 2.8.15 - Unauthenticated Stored XSSbowo · system dashboard · CWE-79 | Orta6,1 | — | %0,3 | 10 Ara 2024 |
21İzleyin | CVE-2023-7246Kavram kanıtı | System Dashboard < 2.8.10 - XSS via Header Injectionbowo · system dashboard · CWE-79 | Orta5,4 | — | %0,8 | 20 Mar 2024 |
20İzleyin | CVE-2024-10708Kavram kanıtı | System Dashboard < 2.8.15 - Admin+ Path Traversalbowo · system dashboard · CWE-22 | Orta4,9 | — | %2,1 | 10 Ara 2024 |
19İzleyin | CVE-2023-5816İstismar yok | Code Explorer <= 1.4.5 - Authenticated (Admin+) External File Readingbowo · code explorer · CWE-73 | Orta4,9 | — | %0,5 | 29 Eki 2024 |
17İzleyin | CVE-2023-5713İstismar yok | System Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_option_value)bowo · system dashboard · CWE-862 | Orta4,3 | — | %0,5 | 6 Ara 2023 |
17İzleyin | CVE-2023-5710İstismar yok | System Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_constants)bowo · system dashboard · CWE-862 | Orta4,3 | — | %0,5 | 6 Ara 2023 |
17İzleyin | CVE-2023-5711İstismar yok | System Dashboard <= 2.8.8 - Missing Authorization to Information Disclosure (sd_php_info)bowo · system dashboard · CWE-862 | Orta4,3 | — | %0,4 | 6 Ara 2023 |
17İzleyin | CVE-2023-5714İstismar yok | System Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_db_specs)bowo · system dashboard · CWE-862 | Orta4,3 | — | %0,4 | 6 Ara 2023 |
17İzleyin | CVE-2023-5712İstismar yok | System Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_global_value)bowo · system dashboard · CWE-862 | Orta4,3 | — | %0,4 | 6 Ara 2023 |
17İzleyin | CVE-2023-5772İstismar yok | Debug Log Manager <= 2.2.0 - Cross-Site Request Forgerybowo · debug log manager · CWE-352 | Orta4,3 | — | %0,3 | 30 Kas 2023 |
- CVE-2024-3566935İzleyin
WordPress Debug Log Manager plugin <= 2.3.1 - Broken Access Control vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0bowo · debug log manager9 Haz 2024
- CVE-2023-638330İzleyin
Debug Log Manager < 2.3.0 - Sensitive Logs Exposure
YüksekCVSS 7,5İstismar yokEPSS %1bowo · debug log manager8 Oca 2024
- CVE-2023-613630İzleyin
WordPress Debug Log Manager Plugin <= 2.3.0 is vulnerable to Sensitive Data Exposure
YüksekCVSS 7,5İstismar yokEPSS %1bowo · debug log manager30 Kas 2023
- CVE-2024-1229924İzleyin
System Dashboard <= 2.8.17 - Reflected Cross-Site Scripting via Filename Parameter
OrtaCVSS 6,1İstismar yokEPSS %0bowo · system dashboard30 Oca 2025
- CVE-2024-1110724İzleyin
System Dashboard < 2.8.15 - Unauthenticated Stored XSS
OrtaCVSS 6,1İstismar yokEPSS %0bowo · system dashboard10 Ara 2024
- CVE-2023-724621İzleyin
System Dashboard < 2.8.10 - XSS via Header Injection
OrtaCVSS 5,4Kavram kanıtıEPSS %1bowo · system dashboard20 Mar 2024
- CVE-2024-1070820İzleyin
System Dashboard < 2.8.15 - Admin+ Path Traversal
OrtaCVSS 4,9Kavram kanıtıEPSS %2bowo · system dashboard10 Ara 2024
- CVE-2023-581619İzleyin
Code Explorer <= 1.4.5 - Authenticated (Admin+) External File Reading
OrtaCVSS 4,9İstismar yokEPSS %1bowo · code explorer29 Eki 2024
- CVE-2023-571317İzleyin
System Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_option_value)
OrtaCVSS 4,3İstismar yokEPSS %0bowo · system dashboard6 Ara 2023
- CVE-2023-571017İzleyin
System Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_constants)
OrtaCVSS 4,3İstismar yokEPSS %0bowo · system dashboard6 Ara 2023
- CVE-2023-571117İzleyin
System Dashboard <= 2.8.8 - Missing Authorization to Information Disclosure (sd_php_info)
OrtaCVSS 4,3İstismar yokEPSS %0bowo · system dashboard6 Ara 2023
- CVE-2023-571417İzleyin
System Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_db_specs)
OrtaCVSS 4,3İstismar yokEPSS %0bowo · system dashboard6 Ara 2023
- CVE-2023-571217İzleyin
System Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_global_value)
OrtaCVSS 4,3İstismar yokEPSS %0bowo · system dashboard6 Ara 2023
- CVE-2023-577217İzleyin
Debug Log Manager <= 2.2.0 - Cross-Site Request Forgery
OrtaCVSS 4,3İstismar yokEPSS %0bowo · debug log manager30 Kas 2023