İçeriğe atla
Noroxi

gwos kayıtları

gwos üreticisine ait 15 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
1 · %6,7
Pre-auth RCE
1
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

    Çubuk: toplam · koyu kısım: CISA KEV.

    Tekrar eden sınıflar

    Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

    CWE

    Saldırı profili

    Tüm kayıtlar

    15 kayıt
    • CVE-2013-3502
      42Planlayın

      monarch_scan.cgi in the MONARCH component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to execute arbitrary comm

      OrtaCVSS 6,5SilahlaştırılmışEPSS %53

      gwos · groundwork monitor8 May 2013

    • CVE-2013-3499
      31İzleyin

      GroundWork Monitor Enterprise 6.7.0 performs authentication on the basis of the HTTP Referer header, which allows remote attackers to obtain

      YüksekCVSS 7,5İstismar yokEPSS %3

      gwos · groundwork monitor8 May 2013

    • CVE-2013-3506
      31İzleyin

      cgi-bin/performance/perfchart.cgi in the Performance component in GroundWork Monitor Enterprise 6.7.0 does not properly restrict XML content

      YüksekCVSS 7,5İstismar yokEPSS %2

      gwos · groundwork monitor8 May 2013

    • CVE-2013-3500
      31İzleyin

      The Foundation webapp admin interface in GroundWork Monitor Enterprise 6.7.0 uses the nagios account as the owner of writable files under /u

      YüksekCVSS 7,5İstismar yokEPSS %2

      gwos · groundwork monitor8 May 2013

    • CVE-2013-3508
      27İzleyin

      html/System-Files.php in the System File Overview feature in the NeDi component in GroundWork Monitor Enterprise 6.7.0 allows remote authent

      OrtaCVSS 6,5İstismar yokEPSS %1

      gwos · groundwork monitor8 May 2013

    • CVE-2013-3509
      27İzleyin

      html/System-NeDi.php in the NeDi component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to execute arbitrary com

      OrtaCVSS 6,5İstismar yokEPSS %1

      gwos · groundwork monitor8 May 2013

    • CVE-2013-3513
      27İzleyin

      Multiple cross-site request forgery (CSRF) vulnerabilities in the Noma component in GroundWork Monitor Enterprise 6.7.0 allow remote attacke

      OrtaCVSS 6,8İstismar yokEPSS %0

      gwos · groundwork monitor8 May 2013

    • CVE-2013-3512
      26İzleyin

      The Cacti component in GroundWork Monitor Enterprise 6.7.0 does not properly perform authorization checks, which allows remote authenticated

      OrtaCVSS 6,5İstismar yokEPSS %1

      gwos · groundwork monitor8 May 2013

    • CVE-2013-3510
      26İzleyin

      Multiple SQL injection vulnerabilities in GroundWork Monitor Enterprise 6.7.0 allow remote authenticated users to execute arbitrary SQL comm

      OrtaCVSS 6,5İstismar yokEPSS %1

      gwos · groundwork monitor8 May 2013

    • CVE-2013-3504
      23İzleyin

      Directory traversal vulnerability in monarch.cgi in the MONARCH component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated

      OrtaCVSS 5,5İstismar yokEPSS %1

      gwos · groundwork monitor8 May 2013

    • CVE-2013-3511
      23İzleyin

      Open redirect vulnerability in the NeDi component in GroundWork Monitor Enterprise 6.7.0 allows remote attackers to redirect users to arbitr

      OrtaCVSS 5,8İstismar yokEPSS %1

      gwos · groundwork monitor8 May 2013

    • CVE-2013-3501
      17İzleyin

      Multiple cross-site scripting (XSS) vulnerabilities in GroundWork Monitor Enterprise 6.7.0 allow remote attackers to inject arbitrary web sc

      OrtaCVSS 4,3İstismar yokEPSS %1

      gwos · groundwork monitor8 May 2013

    • CVE-2013-3505
      16İzleyin

      The Nagios-App component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to bypass intended access restrictions via

      OrtaCVSS 4,0İstismar yokEPSS %1

      gwos · groundwork monitor8 May 2013

    • CVE-2013-3507
      16İzleyin

      The NeDi component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to obtain sensitive information via a direct req

      OrtaCVSS 4,0İstismar yokEPSS %1

      gwos · groundwork monitor8 May 2013

    • CVE-2013-3503
      14İzleyin

      The Profile Importer feature in monarch.cgi in the MONARCH component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated user

      DüşükCVSS 3,5İstismar yokEPSS %1

      gwos · groundwork monitor8 May 2013