dkd kayıtları
dkd üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-862 Missing Authorization3
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')1
- CWE-770 Allocation of Resources Without Limits or Throttling1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
30İzleyin | CVE-2013-7400İstismar yok | The Direct Mail (direct_mail) extension before 3.1.2 for TYPO3 allows remote attackers to obtain sensitive information by leveraging impropedkd · direct mail · CWE-200 | Yüksek7,5 | — | %1,7 | 29 Ara 2017 |
24İzleyin | CVE-2020-12699İstismar yok | The direct_mail extension through 5.2.3 for TYPO3 has an Open Redirect via jumpUrl.dkd · direct mail · CWE-601 | Orta6,1 | — | %0,8 | 13 May 2020 |
21İzleyin | CVE-2020-12697İstismar yok | The direct_mail extension through 5.2.3 for TYPO3 allows Denial of Service via log entries.dkd · direct mail · CWE-770 | Orta5,3 | — | %1,3 | 13 May 2020 |
17İzleyin | CVE-2020-12698İstismar yok | The direct_mail extension through 5.2.3 for TYPO3 has Broken Access Control for newsletter subscriber tables.dkd · direct mail · CWE-862 | Orta4,3 | — | %0,8 | 13 May 2020 |
17İzleyin | CVE-2020-12700İstismar yok | The direct_mail extension through 5.2.3 for TYPO3 allows Information Disclosure via a newsletter subscriber data Special Query.dkd · direct mail · CWE-862 | Orta4,3 | — | %0,8 | 13 May 2020 |
17İzleyin | CVE-2019-16698İstismar yok | The direct_mail (aka Direct Mail) extension through 5.2.2 for TYPO3 has a missing access check in the backend module, allowing a user (with dkd · direct mail · CWE-862 | Orta4,3 | — | %0,7 | 16 Eki 2019 |
- CVE-2013-740030İzleyin
The Direct Mail (direct_mail) extension before 3.1.2 for TYPO3 allows remote attackers to obtain sensitive information by leveraging imprope
YüksekCVSS 7,5İstismar yokEPSS %2dkd · direct mail29 Ara 2017
- CVE-2020-1269924İzleyin
The direct_mail extension through 5.2.3 for TYPO3 has an Open Redirect via jumpUrl.
OrtaCVSS 6,1İstismar yokEPSS %1dkd · direct mail13 May 2020
- CVE-2020-1269721İzleyin
The direct_mail extension through 5.2.3 for TYPO3 allows Denial of Service via log entries.
OrtaCVSS 5,3İstismar yokEPSS %1dkd · direct mail13 May 2020
- CVE-2020-1269817İzleyin
The direct_mail extension through 5.2.3 for TYPO3 has Broken Access Control for newsletter subscriber tables.
OrtaCVSS 4,3İstismar yokEPSS %1dkd · direct mail13 May 2020
- CVE-2020-1270017İzleyin
The direct_mail extension through 5.2.3 for TYPO3 allows Information Disclosure via a newsletter subscriber data Special Query.
OrtaCVSS 4,3İstismar yokEPSS %1dkd · direct mail13 May 2020
- CVE-2019-1669817İzleyin
The direct_mail (aka Direct Mail) extension through 5.2.2 for TYPO3 has a missing access check in the backend module, allowing a user (with
OrtaCVSS 4,3İstismar yokEPSS %1dkd · direct mail16 Eki 2019