İçeriğe atla
Noroxi

firefly-iii kayıtları

firefly-iii üreticisine ait 26 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
0
Düzeltme kaydı olan
%73,1
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 19
  2. 21
  3. 23
  4. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

26 kayıt
  • CVE-2023-1788
    39İzleyin

    Insufficient Session Expiration in firefly-iii/firefly-iii

    KritikCVSS 9,8İstismar yokEPSS %0

    firefly-iii · firefly iii5 Nis 2023

  • CVE-2023-1789
    39İzleyin

    Improper Input Validation in firefly-iii/firefly-iii

    KritikCVSS 9,8İstismar yokEPSS %0

    firefly-iii · firefly iii31 Mar 2023

  • CVE-2021-3846
    35İzleyin

    Unrestricted Upload of File with Dangerous Type in firefly-iii/firefly-iii

    YüksekCVSS 8,8İstismar yokEPSS %0

    firefly-iii · firefly iii19 Eki 2021

  • CVE-2021-3901
    35İzleyin

    Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii

    YüksekCVSS 8,8İstismar yokEPSS %0

    firefly-iii · firefly iii27 Eki 2021

  • CVE-2021-3819
    35İzleyin

    Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii

    YüksekCVSS 8,8İstismar yokEPSS %0

    firefly-iii · firefly iii27 Eyl 2021

  • CVE-2021-3663
    30İzleyin

    Improper Restriction of Excessive Authentication Attempts in firefly-iii/firefly-iii

    YüksekCVSS 7,5İstismar yokEPSS %0

    firefly-iii · firefly iii25 Tem 2021

  • CVE-2023-0298
    26İzleyin

    Incorrect Authorization in firefly-iii/firefly-iii

    OrtaCVSS 6,5İstismar yokEPSS %0

    firefly-iii · firefly iii14 Oca 2023

  • CVE-2021-3900
    26İzleyin

    Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii

    OrtaCVSS 6,5İstismar yokEPSS %0

    firefly-iii · firefly iii27 Eki 2021

  • CVE-2021-3728
    26İzleyin

    Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii

    OrtaCVSS 6,5İstismar yokEPSS %0

    firefly-iii · firefly iii23 Ağu 2021

  • CVE-2021-3730
    26İzleyin

    Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii

    OrtaCVSS 6,5İstismar yokEPSS %0

    firefly-iii · firefly iii23 Ağu 2021

  • CVE-2019-14667
    24İzleyin

    Firefly III 4.7.17.4 is vulnerable to multiple stored XSS issues due to the lack of filtration of user-supplied data in the transaction desc

    OrtaCVSS 6,1İstismar yokEPSS %1

    firefly-iii · firefly iii5 Ağu 2019

  • CVE-2024-22075
    24İzleyin

    Firefly III (aka firefly-iii) before 6.1.1 allows webhooks HTML Injection.

    OrtaCVSS 6,1İstismar yokEPSS %0

    firefly-iii · firefly iii4 Oca 2024

  • CVE-2019-13645
    21İzleyin

    Firefly III before 4.7.17.3 is vulnerable to stored XSS due to lack of filtration of user-supplied data in image file names.

    OrtaCVSS 5,4İstismar yokEPSS %0

    firefly-iii · firefly iii17 Tem 2019

  • CVE-2019-13647
    21İzleyin

    Firefly III before 4.7.17.3 is vulnerable to stored XSS due to lack of filtration of user-supplied data in image file content.

    OrtaCVSS 5,4İstismar yokEPSS %0

    firefly-iii · firefly iii17 Tem 2019

  • CVE-2019-13646
    21İzleyin

    Firefly III before 4.7.17.3 is vulnerable to reflected XSS due to lack of filtration of user-supplied data in a search query.

    OrtaCVSS 5,4İstismar yokEPSS %0

    firefly-iii · firefly iii17 Tem 2019

  • CVE-2019-14670
    21İzleyin

    Firefly III 4.7.17.3 is vulnerable to stored XSS due to the lack of filtration of user-supplied data in the bill name field.

    OrtaCVSS 5,4İstismar yokEPSS %0

    firefly-iii · firefly iii5 Ağu 2019

  • CVE-2019-13644
    21İzleyin

    Firefly III before 4.7.17.1 is vulnerable to stored XSS due to lack of filtration of user-supplied data in a budget name.

    OrtaCVSS 5,4İstismar yokEPSS %0

    firefly-iii · firefly iii17 Tem 2019

  • CVE-2019-14669
    21İzleyin

    Firefly III 4.7.17.3 is vulnerable to stored XSS due to the lack of filtration of user-supplied data in the asset account name.

    OrtaCVSS 5,4İstismar yokEPSS %0

    firefly-iii · firefly iii5 Ağu 2019

  • CVE-2019-14668
    21İzleyin

    Firefly III 4.7.17.3 is vulnerable to stored XSS due to the lack of filtration of user-supplied data in the transaction description field.

    OrtaCVSS 5,4İstismar yokEPSS %0

    firefly-iii · firefly iii5 Ağu 2019

  • CVE-2019-14672
    21İzleyin

    Firefly III 4.7.17.5 is vulnerable to stored XSS due to the lack of filtration of user-supplied data in the liability name field.

    OrtaCVSS 5,4İstismar yokEPSS %0

    firefly-iii · firefly iii5 Ağu 2019

  • CVE-2021-3851
    21İzleyin

    Open Redirect in firefly-iii/firefly-iii

    OrtaCVSS 5,4İstismar yokEPSS %0

    firefly-iii · firefly iii19 Eki 2021

  • CVE-2021-3921
    17İzleyin

    Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii

    OrtaCVSS 4,3İstismar yokEPSS %0

    firefly-iii · firefly iii13 Kas 2021

  • CVE-2021-4005
    17İzleyin

    Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii

    OrtaCVSS 4,3İstismar yokEPSS %0

    firefly-iii · firefly iii4 Ara 2021

  • CVE-2021-4015
    17İzleyin

    Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii

    OrtaCVSS 4,3İstismar yokEPSS %0

    firefly-iii · firefly iii1 Ara 2021

  • CVE-2021-3729
    17İzleyin

    Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii

    OrtaCVSS 4,3İstismar yokEPSS %0

    firefly-iii · firefly iii23 Ağu 2021