Clavister kayıtları
clavister üreticisine ait 7 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %28,6
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-264 Permissions, Privileges, and Access Controls1
- CWE-310 Cryptographic Issues1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
7 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
41Planlayın | CVE-2007-3803İstismar yok | The SMTP ALG in Clavister CorePlus before 8.80.04, and 8.81.00, does not properly parse SMTP commands in certain circumstances, which allowsclavister · clavister coreplus | Kritik10,0 | — | %2,2 | 16 Tem 2007 |
31İzleyin | CVE-2005-3915İstismar yok | The Internet Key Exchange version 1 (IKEv1) implementation in Clavister Client Web allows remote attackers to cause a denial of service and clavister · clavister firewall | Yüksek7,5 | — | %2,7 | 30 Kas 2005 |
23İzleyin | CVE-2018-8753İstismar yok | The IKEv1 implementation in Clavister cOS Core before 11.00.11, 11.20.xx before 11.20.06, and 12.00.xx before 12.00.09 allows remote attackeclavister · cos core | Orta5,9 | — | %1,6 | 15 Ağu 2018 |
21İzleyin | CVE-2007-3804İstismar yok | The AntiVirus engine in the HTTP-ALG in Clavister CorePlus before 8.81.00 and 8.80.03 might allow remote attackers to bypass scanning via smclavister · clavister coreplus · CWE-264 | Orta5,0 | — | %1,9 | 16 Tem 2007 |
21İzleyin | CVE-2007-3805İstismar yok | The IKE implementation in Clavister CorePlus before 8.80.03, and 8.80.00, does not properly validate certificates during IKE negotiation, whclavister · clavister coreplus · CWE-310 | Orta5,4 | — | %0,8 | 16 Tem 2007 |
17İzleyin | CVE-2024-3142İstismar yok | Clavister E10/E80 Setting cross-site request forgeryclavister · e10 · CWE-352 | Orta4,3 | — | %0,2 | 1 Nis 2024 |
9İzleyin | CVE-2024-3141İstismar yok | Clavister E10/E80 Misc Settings Page MiscSettings cross site scriptingclavister · e10 · CWE-79 | Düşük2,4 | — | %0,4 | 1 Nis 2024 |
- CVE-2007-380341Planlayın
The SMTP ALG in Clavister CorePlus before 8.80.04, and 8.81.00, does not properly parse SMTP commands in certain circumstances, which allows
KritikCVSS 10,0İstismar yokEPSS %2clavister · clavister coreplus16 Tem 2007
- CVE-2005-391531İzleyin
The Internet Key Exchange version 1 (IKEv1) implementation in Clavister Client Web allows remote attackers to cause a denial of service and
YüksekCVSS 7,5İstismar yokEPSS %2clavister · clavister firewall30 Kas 2005
- CVE-2018-875323İzleyin
The IKEv1 implementation in Clavister cOS Core before 11.00.11, 11.20.xx before 11.20.06, and 12.00.xx before 12.00.09 allows remote attacke
OrtaCVSS 5,9İstismar yokEPSS %1clavister · cos core15 Ağu 2018
- CVE-2007-380421İzleyin
The AntiVirus engine in the HTTP-ALG in Clavister CorePlus before 8.81.00 and 8.80.03 might allow remote attackers to bypass scanning via sm
OrtaCVSS 5,0İstismar yokEPSS %1clavister · clavister coreplus16 Tem 2007
- CVE-2007-380521İzleyin
The IKE implementation in Clavister CorePlus before 8.80.03, and 8.80.00, does not properly validate certificates during IKE negotiation, wh
OrtaCVSS 5,4İstismar yokEPSS %0clavister · clavister coreplus16 Tem 2007
- CVE-2024-314217İzleyin
Clavister E10/E80 Setting cross-site request forgery
OrtaCVSS 4,3İstismar yokEPSS %0clavister · e101 Nis 2024
- CVE-2024-31419İzleyin
Clavister E10/E80 Misc Settings Page MiscSettings cross site scripting
DüşükCVSS 2,4İstismar yokEPSS %0clavister · e101 Nis 2024