İçeriğe atla
Noroxi

hestiacp kayıtları

hestiacp üreticisine ait 19 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%10,5
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 20
  2. 21
  3. 22
  4. 23
  5. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

19 kayıt
  • CVE-2022-2550
    50Planlayın

    OS Command Injection in hestiacp/hestiacp

    YüksekCVSS 8,8İstismar yokEPSS %49

    hestiacp · control panel27 Tem 2022

  • CVE-2021-3797
    39İzleyin

    Use of Wrong Operator in String Comparison in hestiacp/hestiacp

    KritikCVSS 9,8İstismar yokEPSS %1

    hestiacp · control panel15 Eyl 2021

  • CVE-2022-1509
    36İzleyin

    Command Injection Vulnerability in hestiacp/hestiacp

    YüksekCVSS 8,8İstismar yokEPSS %4

    hestiacp · control panel28 Nis 2022

  • CVE-2025-30007
    35İzleyin

    HestiaCP < 1.9.5 Authenticated OS Command Injection via DNS Record Management

    YüksekCVSS 8,7İstismar yokEPSS %3

    hestiacp · control panel10 Tem 2026

  • CVE-2022-2636
    35İzleyin

    Code Injection in hestiacp/hestiacp

    YüksekCVSS 8,8İstismar yokEPSS %1

    hestiacp · control panel5 Ağu 2022

  • CVE-2023-5839
    31İzleyin

    Privilege Chaining in hestiacp/hestiacp

    YüksekCVSS 7,8İstismar yokEPSS %0

    hestiacp · control panel28 Eki 2023

  • CVE-2021-30070
    30İzleyin

    An issue was discovered in HestiaCP before v1.3.5.

    YüksekCVSS 7,5İstismar yokEPSS %0

    hestiacp · hestiacp18 Ağu 2022

  • CVE-2022-2626
    28İzleyin

    Incorrect Privilege Assignment in hestiacp/hestiacp

    YüksekCVSS 7,2İstismar yokEPSS %1

    hestiacp · control panel5 Ağu 2022

  • CVE-2020-10966
    27İzleyin

    In the Password Reset Module in VESTA Control Panel through 0.9.8-25 and Hestia Control Panel before 1.1.1, Host header manipulation leads t

    OrtaCVSS 6,5İstismar yokEPSS %1

    hestiacp · control panel25 Mar 2020

  • CVE-2023-3479
    24İzleyin

    Cross-site Scripting (XSS) - Reflected in hestiacp/hestiacp

    OrtaCVSS 6,1Kavram kanıtıEPSS %1

    hestiacp · control panel30 Haz 2023

  • CVE-2022-0838
    24İzleyin

    Cross-site Scripting (XSS) - Reflected in hestiacp/hestiacp

    OrtaCVSS 6,1İstismar yokEPSS %1

    hestiacp · control panel4 Mar 2022

  • CVE-2022-0752
    24İzleyin

    Cross-site Scripting (XSS) - Generic in hestiacp/hestiacp

    OrtaCVSS 6,1İstismar yokEPSS %0

    hestiacp · control panel4 Mar 2022

  • CVE-2022-0986
    24İzleyin

    Reflected Cross-site Scripting (XSS) Vulnerability in hestiacp/hestiacp

    OrtaCVSS 6,1İstismar yokEPSS %0

    hestiacp · control panel16 Mar 2022

  • CVE-2022-0753
    24İzleyin

    Cross-site Scripting (XSS) - Reflected in hestiacp/hestiacp

    OrtaCVSS 6,1İstismar yokEPSS %0

    hestiacp · control panel3 Mar 2022

  • CVE-2021-30071
    24İzleyin

    A cross-site scripting (XSS) vulnerability in /admin/list_key.html of HestiaCP before v1.3.5 allows attackers to execute arbitrary web scrip

    OrtaCVSS 6,1İstismar yokEPSS %0

    hestiacp · control panel18 Ağu 2022

  • CVE-2023-5084
    24İzleyin

    Cross-site Scripting (XSS) - Reflected in hestiacp/hestiacp

    OrtaCVSS 6,1İstismar yokEPSS %0

    hestiacp · hestiacp20 Eyl 2023

  • CVE-2021-27231
    21İzleyin

    Hestia Control Panel 1.3.5 and below, in a shared-hosting environment, sometimes allows remote authenticated users to create a subdomain for

    OrtaCVSS 5,4İstismar yokEPSS %1

    hestiacp · control panel16 Şub 2021

  • CVE-2023-4517
    21İzleyin

    Cross-site Scripting (XSS) - Stored in hestiacp/hestiacp

    OrtaCVSS 5,4İstismar yokEPSS %0

    hestiacp · hestiacp13 Eki 2023

  • CVE-2025-30008
    20İzleyin

    HestiaCP < 1.9.5 Stored XSS via DNS Record Management Interface

    OrtaCVSS 5,1İstismar yokEPSS %0

    hestiacp · control panel10 Tem 2026