diaowen kayıtları
diaowen üreticisine ait 7 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 3
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Pre-auth RCE: saldırganın hesabı olmadan, ağ üzerinden kod çalıştırabildiği açıklar. Yayından KEV’e ortanca: sahada sömürülen kayıtların yayımlanmasıyla CISA listesine girmesi arasındaki tipik süre.
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-434 Unrestricted Upload of File with Dangerous Type2
- CWE-639 Authorization Bypass Through User-Controlled Key1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
7 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | EPSS · Yayın |
|---|---|---|---|---|
40Planlayın | CVE-2021-39383İstismar yok | DWSurvey v3.2.0 was discovered to contain a remote command execution (RCE) vulnerability via the component /sysuser/SysPropertyAction.java.diaowen · dwsurvey · CWE-94 | Kritik9,8 | %3,020 Mar 2022 |
39İzleyin | CVE-2023-40980İstismar yok | File Upload vulnerability in DWSurvey DWSurvey-OSS v.3.2.0 and before allows a remote attacker to execute arbitrary code via the saveimage mdiaowen · dwsurvey · CWE-434 | Kritik9,8 | %1,21 Eyl 2023 |
39İzleyin | CVE-2021-39384İstismar yok | DWSurvey v3.2.0 was discovered to contain an arbitrary file write vulnerability via the component /utils/ToHtmlServlet.java.diaowen · dwsurvey · CWE-434 | Kritik9,8 | %1,220 Mar 2022 |
30İzleyin | CVE-2025-63248İstismar yok | DWSurvey 6.14.0 is vulnerable to Incorrect Access Control.diaowen · dwsurvey · CWE-639 | Yüksek7,5 | %0,35 Kas 2025 |
24İzleyin | CVE-2019-15095İstismar yok | DWSurvey through 2019-07-22 has reflected XSS via the design/qu-multi-fillblank!answers.action surveyId parameter.diaowen · dwsurvey · CWE-79 | Orta6,1 | %0,815 Ağu 2019 |
24İzleyin | CVE-2019-14747İstismar yok | DWSurvey through 2019-07-22 has stored XSS via the design/my-survey-design!copySurvey.action surveyName parameter.diaowen · dwsurvey · CWE-79 | Orta6,1 | %0,77 Ağu 2019 |
24İzleyin | CVE-2020-20070İstismar yok | Cross Site Scripting vulnerability found in wkeyuan DWSurvey 1.0 allows a remote attacker to execute arbitrary code via thequltemld parametediaowen · dwsurvey · CWE-79 | Orta6,1 | %0,520 Haz 2023 |
- CVE-2021-3938340Planlayın
DWSurvey v3.2.0 was discovered to contain a remote command execution (RCE) vulnerability via the component /sysuser/SysPropertyAction.java.
KritikCVSS 9,8İstismar yokEPSS %3diaowen · dwsurvey20 Mar 2022
- CVE-2023-4098039İzleyin
File Upload vulnerability in DWSurvey DWSurvey-OSS v.3.2.0 and before allows a remote attacker to execute arbitrary code via the saveimage m
KritikCVSS 9,8İstismar yokEPSS %1diaowen · dwsurvey1 Eyl 2023
- CVE-2021-3938439İzleyin
DWSurvey v3.2.0 was discovered to contain an arbitrary file write vulnerability via the component /utils/ToHtmlServlet.java.
KritikCVSS 9,8İstismar yokEPSS %1diaowen · dwsurvey20 Mar 2022
- CVE-2025-6324830İzleyin
DWSurvey 6.14.0 is vulnerable to Incorrect Access Control.
YüksekCVSS 7,5İstismar yokEPSS %0diaowen · dwsurvey5 Kas 2025
- CVE-2019-1509524İzleyin
DWSurvey through 2019-07-22 has reflected XSS via the design/qu-multi-fillblank!answers.action surveyId parameter.
OrtaCVSS 6,1İstismar yokEPSS %0diaowen · dwsurvey15 Ağu 2019
- CVE-2019-1474724İzleyin
DWSurvey through 2019-07-22 has stored XSS via the design/my-survey-design!copySurvey.action surveyName parameter.
OrtaCVSS 6,1İstismar yokEPSS %0diaowen · dwsurvey7 Ağu 2019
- CVE-2020-2007024İzleyin
Cross Site Scripting vulnerability found in wkeyuan DWSurvey 1.0 allows a remote attacker to execute arbitrary code via thequltemld paramete
OrtaCVSS 6,1İstismar yokEPSS %0diaowen · dwsurvey20 Haz 2023