eventum project kayıtları
eventum project üreticisine ait 12 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %8,3
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')6
- CWE-275 Permission Issues2
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')2
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-502 Deserialization of Untrusted Data1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
12 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2018-11569İstismar yok | Controller/ListController.php in Eventum 3.5.0 is vulnerable to Deserialization of Untrusted Data.eventum project · eventum · CWE-502 | Kritik9,8 | — | %1,7 | 5 Eyl 2019 |
35İzleyin | CVE-2014-1632Kavram kanıtı | htdocs/setup/index.php in Eventum before 2.3.5 allows remote attackers to inject and execute arbitrary PHP code via the hostname parameter.eventum project · eventum · CWE-275 | Yüksek8,1 | — | %10,4 | 31 Oca 2018 |
35İzleyin | CVE-2018-12628İstismar yok | An issue was discovered in Eventum 3.5.0.eventum project · eventum · CWE-352 | Yüksek8,8 | — | %0,6 | 10 Tem 2019 |
33İzleyin | CVE-2014-1631Kavram kanıtı | Eventum before 2.3.5 allows remote attackers to reinstall the application via direct request to /setup/index.php.eventum project · eventum · CWE-275 | Yüksek7,5 | — | %9,2 | 31 Oca 2018 |
25İzleyin | CVE-2018-16761Kavram kanıtı | Eventum before 3.4.0 has an open redirect vulnerability.eventum project · eventum · CWE-601 | Orta6,1 | — | %2,2 | 9 Eyl 2018 |
24İzleyin | CVE-2018-12621İstismar yok | An issue was discovered in Eventum 3.5.0.eventum project · eventum · CWE-601 | Orta6,1 | — | %0,9 | 5 Tem 2019 |
24İzleyin | CVE-2018-12624İstismar yok | An issue was discovered in Eventum 3.5.0.eventum project · eventum · CWE-79 | Orta6,1 | — | %0,9 | 24 May 2019 |
24İzleyin | CVE-2018-12625İstismar yok | An issue was discovered in Eventum 3.5.0.eventum project · eventum · CWE-79 | Orta6,1 | — | %0,9 | 10 Tem 2019 |
24İzleyin | CVE-2018-12623İstismar yok | An issue was discovered in Eventum 3.5.0.eventum project · eventum · CWE-79 | Orta6,1 | — | %0,9 | 10 Tem 2019 |
24İzleyin | CVE-2018-12627İstismar yok | An issue was discovered in Eventum 3.5.0.eventum project · eventum · CWE-79 | Orta6,1 | — | %0,9 | 10 Tem 2019 |
24İzleyin | CVE-2018-12622İstismar yok | An issue was discovered in Eventum 3.5.0.eventum project · eventum · CWE-79 | Orta6,1 | — | %0,9 | 10 Tem 2019 |
24İzleyin | CVE-2018-12626İstismar yok | An issue was discovered in Eventum 3.5.0.eventum project · eventum · CWE-79 | Orta6,1 | — | %0,9 | 10 Tem 2019 |
- CVE-2018-1156940Planlayın
Controller/ListController.php in Eventum 3.5.0 is vulnerable to Deserialization of Untrusted Data.
KritikCVSS 9,8İstismar yokEPSS %1eventum project · eventum5 Eyl 2019
- CVE-2014-163235İzleyin
htdocs/setup/index.php in Eventum before 2.3.5 allows remote attackers to inject and execute arbitrary PHP code via the hostname parameter.
YüksekCVSS 8,1Kavram kanıtıEPSS %10eventum project · eventum31 Oca 2018
- CVE-2018-1262835İzleyin
An issue was discovered in Eventum 3.5.0.
YüksekCVSS 8,8İstismar yokEPSS %0eventum project · eventum10 Tem 2019
- CVE-2014-163133İzleyin
Eventum before 2.3.5 allows remote attackers to reinstall the application via direct request to /setup/index.php.
YüksekCVSS 7,5Kavram kanıtıEPSS %9eventum project · eventum31 Oca 2018
- CVE-2018-1676125İzleyin
Eventum before 3.4.0 has an open redirect vulnerability.
OrtaCVSS 6,1Kavram kanıtıEPSS %2eventum project · eventum9 Eyl 2018
- CVE-2018-1262124İzleyin
An issue was discovered in Eventum 3.5.0.
OrtaCVSS 6,1İstismar yokEPSS %0eventum project · eventum5 Tem 2019
- CVE-2018-1262424İzleyin
An issue was discovered in Eventum 3.5.0.
OrtaCVSS 6,1İstismar yokEPSS %0eventum project · eventum24 May 2019
- CVE-2018-1262524İzleyin
An issue was discovered in Eventum 3.5.0.
OrtaCVSS 6,1İstismar yokEPSS %0eventum project · eventum10 Tem 2019
- CVE-2018-1262324İzleyin
An issue was discovered in Eventum 3.5.0.
OrtaCVSS 6,1İstismar yokEPSS %0eventum project · eventum10 Tem 2019
- CVE-2018-1262724İzleyin
An issue was discovered in Eventum 3.5.0.
OrtaCVSS 6,1İstismar yokEPSS %0eventum project · eventum10 Tem 2019
- CVE-2018-1262224İzleyin
An issue was discovered in Eventum 3.5.0.
OrtaCVSS 6,1İstismar yokEPSS %0eventum project · eventum10 Tem 2019
- CVE-2018-1262624İzleyin
An issue was discovered in Eventum 3.5.0.
OrtaCVSS 6,1İstismar yokEPSS %0eventum project · eventum10 Tem 2019