İçeriğe atla
Noroxi

evershop kayıtları

evershop üreticisine ait 15 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%60
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 23
  2. 24
  3. 25
  4. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

15 kayıt
  • CVE-2023-46498
    39İzleyin

    An issue in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensitive information and execute arbitrary code vi

    KritikCVSS 9,8İstismar yokEPSS %1

    evershop · evershop8 Ara 2023

  • CVE-2026-28213
    39İzleyin

    EverShop Vulnerable to Arbitrary Customer Account Takeover via Exposure of Password Reset Token in API Response

    KritikCVSS 9,8İstismar yokEPSS %0

    evershop · evershop26 Şub 2026

  • CVE-2026-25993
    37İzleyin

    EverShop has a Second-Order SQL Injection in URL Rewrite Processing Derived from Category URL Keys

    KritikCVSS 9,3Kavram kanıtıEPSS %0

    evershop · evershop10 Şub 2026

  • CVE-2023-46943
    36İzleyin

    An issue was discovered in NPM's package @evershop/evershop before version 1.0.0-rc.8.

    KritikCVSS 9,1İstismar yokEPSS %0

    evershop · evershop12 Oca 2024

  • CVE-2023-46496
    33İzleyin

    Directory Traversal vulnerability in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensitive information via

    YüksekCVSS 8,3İstismar yokEPSS %1

    evershop · evershop8 Ara 2023

  • CVE-2023-46942
    30İzleyin

    Lack of authentication in NPM's package @evershop/evershop before version 1.0.0-rc.8, allows remote attackers to obtain sensitive informatio

    YüksekCVSS 7,5İstismar yokEPSS %0

    evershop · evershop12 Oca 2024

  • CVE-2025-65844
    30İzleyin

    EverShop 2.0.1 allows a remote unauthenticated attacker to upload arbitrary files and create directories via the /api/images endpoint.

    YüksekCVSS 7,5İstismar yokEPSS %0

    evershop · evershop2 Ara 2025

  • CVE-2025-67419
    30İzleyin

    A Denial of Service (DoS) vulnerability in evershop 2.1.0 and prior allows unauthenticated attackers to exhaust the application server's res

    YüksekCVSS 7,5İstismar yokEPSS %0

    evershop · evershop5 Oca 2026

  • CVE-2025-67427
    26İzleyin

    A Blind Server-Side Request Forgery (SSRF) vulnerability in evershop 2.1.0 and prior allows unauthenticated attackers to force the server to

    OrtaCVSS 6,5İstismar yokEPSS %0

    evershop · evershop5 Oca 2026

  • CVE-2023-46494
    24İzleyin

    Cross Site Scripting vulnerability in EverShop NPM versions before v.1.0.0-rc.5 allows a remote attacker to obtain sensitive information via

    OrtaCVSS 6,1İstismar yokEPSS %0

    evershop · evershop8 Ara 2023

  • CVE-2023-46495
    24İzleyin

    Cross Site Scripting vulnerability in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensitive information via

    OrtaCVSS 6,1İstismar yokEPSS %0

    evershop · evershop8 Ara 2023

  • CVE-2023-46499
    24İzleyin

    Cross Site Scripting vulnerability in EverShop NPM versions before v.1.0.0-rc.5 allows a remote attacker to obtain sensitive information via

    OrtaCVSS 6,1İstismar yokEPSS %0

    evershop · evershop8 Ara 2023

  • CVE-2023-46493
    21İzleyin

    Directory Traversal vulnerability in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensitive information via

    OrtaCVSS 5,3İstismar yokEPSS %1

    evershop · evershop8 Ara 2023

  • CVE-2023-46497
    21İzleyin

    Directory Traversal vulnerability in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensitive information via

    OrtaCVSS 5,4İstismar yokEPSS %0

    evershop · evershop8 Ara 2023

  • CVE-2025-12919
    11İzleyin

    EverShop Order Order.resolvers.js resource injection

    DüşükCVSS 2,9İstismar yokEPSS %0

    evershop · evershop9 Kas 2025