İçeriğe atla
Noroxi

btcpayserver kayıtları

btcpayserver üreticisine ait 17 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
0
Düzeltme kaydı olan
%5,9
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 21
  2. 23

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

17 kayıt
  • CVE-2023-0493
    37İzleyin

    Improper Neutralization of Equivalent Special Elements in btcpayserver/btcpayserver

    YüksekCVSS 8,8Kavram kanıtıEPSS %8

    btcpayserver · btcpay server26 Oca 2023

  • CVE-2021-29249
    30İzleyin

    BTCPay Server before 1.0.6.0, when the payment button is used, has a privacy vulnerability.

    YüksekCVSS 7,5İstismar yokEPSS %1

    btcpayserver · btcpay server26 Mar 2021

  • CVE-2022-32984
    30İzleyin

    BTCPay Server 1.3.0 through 1.5.3 allows a remote attacker to obtain sensitive information when a public Point of Sale app is exposed.

    YüksekCVSS 7,5İstismar yokEPSS %1

    btcpayserver · btcpay server31 Oca 2023

  • CVE-2021-29246
    26İzleyin

    BTCPay Server through 1.0.7.0 suffers from directory traversal, which allows an attacker with admin privileges to achieve code execution.

    OrtaCVSS 6,7İstismar yokEPSS %2

    btcpayserver · btcpay server5 May 2021

  • CVE-2021-29251
    26İzleyin

    BTCPay Server before 1.0.7.1 mishandles the policy setting in which users can register (in Server Settings > Policies).

    OrtaCVSS 6,5İstismar yokEPSS %1

    btcpayserver · btcpay server1 Nis 2021

  • CVE-2021-3646
    24İzleyin

    Cross-site Scripting (XSS) - Reflected in btcpayserver/btcpayserver

    OrtaCVSS 6,1İstismar yokEPSS %1

    btcpayserver · btcpay server10 Eyl 2021

  • CVE-2023-0748
    24İzleyin

    Open Redirect in btcpayserver/btcpayserver

    OrtaCVSS 6,1Kavram kanıtıEPSS %1

    btcpayserver · btcpayserver8 Şub 2023

  • CVE-2021-29247
    21İzleyin

    BTCPay Server through 1.0.7.0 could allow a remote attacker to obtain sensitive information, caused by failure to set the HTTPOnly flag for

    OrtaCVSS 5,3İstismar yokEPSS %1

    btcpayserver · btcpay server5 May 2021

  • CVE-2021-29245
    21İzleyin

    BTCPay Server through 1.0.7.0 uses a weak method Next to produce pseudo-random values to generate a legacy API key.

    OrtaCVSS 5,3İstismar yokEPSS %1

    btcpayserver · btcpay server5 May 2021

  • CVE-2021-29248
    21İzleyin

    BTCPay Server through 1.0.7.0 could allow a remote attacker to obtain sensitive information, caused by failure to set the Secure flag for a

    OrtaCVSS 5,3İstismar yokEPSS %1

    btcpayserver · btcpay server5 May 2021

  • CVE-2021-3830
    21İzleyin

    Cross-site Scripting (XSS) - Stored in btcpayserver/btcpayserver

    OrtaCVSS 5,4İstismar yokEPSS %1

    btcpayserver · btcpay server26 Eyl 2021

  • CVE-2023-0810
    21İzleyin

    Cross-site Scripting (XSS) - Stored in btcpayserver/btcpayserver

    OrtaCVSS 5,4İstismar yokEPSS %1

    btcpayserver · btcpayserver13 Şub 2023

  • CVE-2023-1149
    21İzleyin

    Improper Neutralization of Equivalent Special Elements in btcpayserver/btcpayserver

    OrtaCVSS 5,4İstismar yokEPSS %1

    btcpayserver · btcpay server2 Mar 2023

  • CVE-2021-29250
    21İzleyin

    BTCPay Server through 1.0.7.0 suffers from a Stored Cross Site Scripting (XSS) vulnerability within the POS Add Products functionality.

    OrtaCVSS 5,4İstismar yokEPSS %1

    btcpayserver · btcpay server5 May 2021

  • CVE-2023-0747
    21İzleyin

    Cross-site Scripting (XSS) - Stored in btcpayserver/btcpayserver

    OrtaCVSS 5,4İstismar yokEPSS %0

    btcpayserver · btcpayserver8 Şub 2023

  • CVE-2023-0879
    21İzleyin

    Cross-site Scripting (XSS) - Stored in btcpayserver/btcpayserver

    OrtaCVSS 5,4İstismar yokEPSS %0

    btcpayserver · btcpay server16 Şub 2023

  • CVE-2023-1270
    21İzleyin

    Cross-site Scripting in btcpayserver/btcpayserver

    OrtaCVSS 5,4İstismar yokEPSS %0

    btcpayserver · btcpayserver8 Mar 2023