clickstudios kayıtları

clickstudios üreticisine ait 14 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 0
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

14 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
35İzleyin	CVE-2024-54124İstismar yok	In Click Studios Passwordstate before build 9920, there is a potential permission escalation on the edit folder screen.CWE-863 Erişim denetimi (IDOR)	Yüksek8,8	—	%0,4	29 Kas 2024
31İzleyin	CVE-2020-26061Kavram kanıtı	ClickStudios Passwordstate Password Reset Portal prior to build 8501 is affected by an authentication bypass vulnerability.clickstudios · passwordstate · CWE-306 Kimlik doğrulamasız Kimlik doğrulama atlatma	Yüksek7,5	—	%4,5	5 Eki 2020
30İzleyin	CVE-2022-3875İstismar yok	Click Studios Passwordstate API authentication bypass by assumed-immutable dataclickstudios · passwordstate · CWE-302 Kimlik doğrulamasız Kimlik doğrulama atlatma	Yüksek7,5	—	%1,0	19 Ara 2022
27İzleyin	CVE-2020-27747Kavram kanıtı	An issue was discovered in Click Studios Passwordstate 8.9 (Build 8973).If the user of the system has assigned himself a PIN code for entericlickstudios · passwordstate · CWE-307	Orta6,8	—	%1,1	29 Eki 2020
26İzleyin	CVE-2022-4612İstismar yok	Click Studios Passwordstate insufficiently protected credentialsclickstudios · passwordstate · CWE-522 Bilgi sızıntısı	Orta6,5	—	%0,9	19 Ara 2022
26İzleyin	CVE-2022-3876İstismar yok	Click Studios Passwordstate API authorizationclickstudios · passwordstate · CWE-266	Orta6,5	—	%0,9	19 Ara 2022
26İzleyin	CVE-2022-25570İstismar yok	In Click Studios (SA) Pty Ltd Passwordstate 9435, users with access to a passwordlist can gain access to additional password lists without pclickstudios · passwordstate · CWE-276	Orta6,5	—	%0,8	21 Mar 2022
26İzleyin	CVE-2022-4613İstismar yok	Click Studios Passwordstate Browser Extension Provisioning improper authorizationclickstudios · passwordstate · CWE-266 Kimlik doğrulamasız	Orta6,5	—	%0,7	19 Ara 2022
22İzleyin	CVE-2022-4610İstismar yok	Click Studios Passwordstate risky encryptionclickstudios · passwordstate · CWE-310	Orta5,5	—	%0,2	19 Ara 2022
21İzleyin	CVE-2022-4611Kavram kanıtı	Click Studios Passwordstate hard-coded credentialsclickstudios · passwordstate · CWE-798 Kimlik doğrulamasız Gömülü kimlik bilgisi	Orta5,3	—	%1,3	19 Ara 2022
21İzleyin	CVE-2022-3877İstismar yok	Click Studios Passwordstate URL Field cross site scriptingclickstudios · passwordstate · CWE-707	Orta5,4	—	%0,7	19 Ara 2022
21İzleyin	CVE-2018-14776İstismar yok	Click Studios Passwordstate before 8.3 Build 8397 allows XSS by authenticated users via an uploaded HTML document.clickstudios · passwordstate · CWE-79 XSS	Orta5,4	—	%0,5	1 Ağu 2018
18İzleyin	CVE-2023-47801İstismar yok	An issue was discovered in Click Studios Passwordstate before 9811.clickstudios · passwordstate · CWE-732	Orta4,7	—	%0,4	13 Kas 2023
14İzleyin	CVE-2023-43295İstismar yok	Cross Site Request Forgery vulnerability in Click Studios (SA) Pty Ltd Passwordstate v.Build 9785 and before allows a local attacker to execclickstudios · passwordstate · CWE-352 RCE CSRF	Düşük3,5	—	%0,2	31 Eki 2023

CVE-2024-54124
35İzleyin
In Click Studios Passwordstate before build 9920, there is a potential permission escalation on the edit folder screen.
YüksekCVSS 8,8İstismar yokEPSS %0
- Erişim denetimi (IDOR)
29 Kas 2024
CVE-2020-26061
31İzleyin
ClickStudios Passwordstate Password Reset Portal prior to build 8501 is affected by an authentication bypass vulnerability.
YüksekCVSS 7,5Kavram kanıtıEPSS %4
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
clickstudios · passwordstate5 Eki 2020
CVE-2022-3875
30İzleyin
Click Studios Passwordstate API authentication bypass by assumed-immutable data
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
clickstudios · passwordstate19 Ara 2022
CVE-2020-27747
27İzleyin
An issue was discovered in Click Studios Passwordstate 8.9 (Build 8973).If the user of the system has assigned himself a PIN code for enteri
OrtaCVSS 6,8Kavram kanıtıEPSS %1
clickstudios · passwordstate29 Eki 2020
CVE-2022-4612
26İzleyin
Click Studios Passwordstate insufficiently protected credentials
OrtaCVSS 6,5İstismar yokEPSS %1
- Bilgi sızıntısı
clickstudios · passwordstate19 Ara 2022
CVE-2022-3876
26İzleyin
Click Studios Passwordstate API authorization
OrtaCVSS 6,5İstismar yokEPSS %1
clickstudios · passwordstate19 Ara 2022
CVE-2022-25570
26İzleyin
In Click Studios (SA) Pty Ltd Passwordstate 9435, users with access to a passwordlist can gain access to additional password lists without p
OrtaCVSS 6,5İstismar yokEPSS %1
clickstudios · passwordstate21 Mar 2022
CVE-2022-4613
26İzleyin
Click Studios Passwordstate Browser Extension Provisioning improper authorization
OrtaCVSS 6,5İstismar yokEPSS %1
- Kimlik doğrulamasız
clickstudios · passwordstate19 Ara 2022
CVE-2022-4610
22İzleyin
Click Studios Passwordstate risky encryption
OrtaCVSS 5,5İstismar yokEPSS %0
clickstudios · passwordstate19 Ara 2022
CVE-2022-4611
21İzleyin
Click Studios Passwordstate hard-coded credentials
OrtaCVSS 5,3Kavram kanıtıEPSS %1
- Kimlik doğrulamasız
- Gömülü kimlik bilgisi
clickstudios · passwordstate19 Ara 2022
CVE-2022-3877
21İzleyin
Click Studios Passwordstate URL Field cross site scripting
OrtaCVSS 5,4İstismar yokEPSS %1
clickstudios · passwordstate19 Ara 2022
CVE-2018-14776
21İzleyin
Click Studios Passwordstate before 8.3 Build 8397 allows XSS by authenticated users via an uploaded HTML document.
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
clickstudios · passwordstate1 Ağu 2018
CVE-2023-47801
18İzleyin
An issue was discovered in Click Studios Passwordstate before 9811.
OrtaCVSS 4,7İstismar yokEPSS %0
clickstudios · passwordstate13 Kas 2023
CVE-2023-43295
14İzleyin
Cross Site Request Forgery vulnerability in Click Studios (SA) Pty Ltd Passwordstate v.Build 9785 and before allows a local attacker to exec
DüşükCVSS 3,5İstismar yokEPSS %0
- RCE
- CSRF
clickstudios · passwordstate31 Eki 2023