ClipSoft kayıtları
clipsoft üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-264 Permissions, Privileges, and Access Controls2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-91 XML Injection (aka Blind XPath Injection)1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2019-17323İstismar yok | ClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation and execution via report print function of rexpert viewer withclipsoft · rexpert · CWE-91 | Yüksek8,8 | — | %1,6 | 30 Eki 2019 |
26İzleyin | CVE-2019-17326İstismar yok | ClipSoft REXPERT 1.0.0.527 and earlier version allows remote attacker to arbitrary file deletion by issuing a HTTP GET request with a speciaclipsoft · rexpert · CWE-264 | Orta6,5 | — | %1,3 | 30 Eki 2019 |
26İzleyin | CVE-2019-17325İstismar yok | ClipSoft REXPERT 1.0.0.527 and earlier version allows remote attacker to upload arbitrary local file via the ActiveX method in RexViewerCtrlclipsoft · rexpert · CWE-434 | Orta6,5 | — | %1,2 | 30 Eki 2019 |
26İzleyin | CVE-2019-17322İstismar yok | ClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation via a POST request with the parameter set to the file path to clipsoft · rexpert · CWE-264 | Orta6,5 | — | %1,2 | 30 Eki 2019 |
26İzleyin | CVE-2019-17324İstismar yok | ClipSoft REXPERT 1.0.0.527 and earlier version allows directory traversal by issuing a special HTTP POST request with ../ characters.clipsoft · rexpert · CWE-22 | Orta6,5 | — | %1,2 | 30 Eki 2019 |
21İzleyin | CVE-2019-17321İstismar yok | ClipSoft REXPERT 1.0.0.527 and earlier version have an information disclosure issue.clipsoft · rexpert · CWE-200 | Orta5,3 | — | %0,9 | 30 Eki 2019 |
- CVE-2019-1732335İzleyin
ClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation and execution via report print function of rexpert viewer with
YüksekCVSS 8,8İstismar yokEPSS %2clipsoft · rexpert30 Eki 2019
- CVE-2019-1732626İzleyin
ClipSoft REXPERT 1.0.0.527 and earlier version allows remote attacker to arbitrary file deletion by issuing a HTTP GET request with a specia
OrtaCVSS 6,5İstismar yokEPSS %1clipsoft · rexpert30 Eki 2019
- CVE-2019-1732526İzleyin
ClipSoft REXPERT 1.0.0.527 and earlier version allows remote attacker to upload arbitrary local file via the ActiveX method in RexViewerCtrl
OrtaCVSS 6,5İstismar yokEPSS %1clipsoft · rexpert30 Eki 2019
- CVE-2019-1732226İzleyin
ClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation via a POST request with the parameter set to the file path to
OrtaCVSS 6,5İstismar yokEPSS %1clipsoft · rexpert30 Eki 2019
- CVE-2019-1732426İzleyin
ClipSoft REXPERT 1.0.0.527 and earlier version allows directory traversal by issuing a special HTTP POST request with ../ characters.
OrtaCVSS 6,5İstismar yokEPSS %1clipsoft · rexpert30 Eki 2019
- CVE-2019-1732121İzleyin
ClipSoft REXPERT 1.0.0.527 and earlier version have an information disclosure issue.
OrtaCVSS 5,3İstismar yokEPSS %1clipsoft · rexpert30 Eki 2019