İçeriğe atla
Noroxi

cybelesoft kayıtları

cybelesoft üreticisine ait 13 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%7,7
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 20
  3. 21
  4. 22
  5. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

13 kayıt
  • CVE-2021-45092
    51Planlayın

    Thinfinity VirtualUI before 3.0 has functionality in /lab.html reachable by default that could allow IFRAME injection via the vpath paramete

    KritikCVSS 9,8Kavram kanıtıEPSS %41

    cybelesoft · thinfinity virtualui16 Ara 2021

  • CVE-2024-40404
    39İzleyin

    Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the API endpoint where Web Socke

    KritikCVSS 9,8İstismar yokEPSS %0

    cybelesoft · thinfinity workspace13 Kas 2024

  • CVE-2022-25227
    35İzleyin

    Thinfinity VNC v4.0.0.1 contains a Cross-Origin Resource Sharing (CORS) vulnerability which can allow an unprivileged remote attacker, if th

    YüksekCVSS 8,8İstismar yokEPSS %1

    cybelesoft · thinfinity vnc20 May 2022

  • CVE-2021-46354
    34İzleyin

    Thinfinity VirtualUI 2.1.28.0, 2.1.32.1 and 2.5.26.2, fixed in version 3.0 is affected by an information disclosure vulnerability in the par

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    cybelesoft · thinfinity virtualui9 Şub 2022

  • CVE-2024-40405
    32İzleyin

    Incorrect access control in Cybele Software Thinfinity Workspace before v7.0.3.109 allows attackers to gain access to a secondary broker via

    YüksekCVSS 8,1İstismar yokEPSS %0

    cybelesoft · thinfinity workspace13 Kas 2024

  • CVE-2015-1429
    31İzleyin

    Directory traversal vulnerability in Cybele Software Thinfinity Remote Desktop Workstation 3.0.0.3 32-bit and 64-bit allows remote attackers

    YüksekCVSS 7,5İstismar yokEPSS %2

    cybelesoft · thinfinity remote desktop workstation6 Eki 2017

  • CVE-2024-40407
    30İzleyin

    A full path disclosure in Cybele Software Thinfinity Workspace before v7.0.2.113 allows attackers to obtain the root path of the application

    YüksekCVSS 7,5İstismar yokEPSS %0

    cybelesoft · thinfinity workspace13 Kas 2024

  • CVE-2024-40408
    29İzleyin

    Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the Create Profile section.

    YüksekCVSS 7,3İstismar yokEPSS %0

    cybelesoft · thinfinity workspace13 Kas 2024

  • CVE-2021-44848
    28İzleyin

    In Cibele Thinfinity VirtualUI before 3.0, /changePassword returns different responses for invalid authentication requests depending on whet

    OrtaCVSS 5,3Kavram kanıtıEPSS %23

    cybelesoft · thinfinity virtualui12 Ara 2021

  • CVE-2019-16384
    26İzleyin

    Cybele Thinfinity VirtualUI 2.5.17.2 allows ../ path traversal that can be used for data exfiltration.

    OrtaCVSS 6,5İstismar yokEPSS %1

    cybelesoft · thinfinity virtualui4 Haz 2020

  • CVE-2019-16385
    24İzleyin

    Cybele Thinfinity VirtualUI 2.5.17.2 allows HTTP response splitting via the mimetype parameter within a PDF viewer request, as demonstrated

    OrtaCVSS 6,1İstismar yokEPSS %1

    cybelesoft · thinfinity virtualui4 Haz 2020

  • CVE-2021-44554
    21İzleyin

    Thinfinity VirtualUI before 3.0 allows a malicious actor to enumerate users registered in the OS (Windows) through the /changePassword URI.

    OrtaCVSS 5,3İstismar yokEPSS %1

    cybelesoft · thinfinity virtualui20 Ara 2021

  • CVE-2024-40410
    19İzleyin

    Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain a hardcoded cryptographic key used for encryption.

    OrtaCVSS 4,8İstismar yokEPSS %0

    cybelesoft · thinfinity workspace13 Kas 2024