Kioware kayıtları

kioware üreticisine ait 7 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 0
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

7 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
31İzleyin	CVE-2018-18435Kavram kanıtı	KioWare Server version 4.9.6 and older installs by default to "C:\kioware_com" with weak folder permissions granting any user full permissiokioware · kioware server · CWE-732 Yerel yetki yükseltme	Yüksek7,8	—	%1,3	21 Mar 2019
31İzleyin	CVE-2023-34642İstismar yok	KioWare for Windows through v8.33 was discovered to contain an incomplete blacklist filter for blocked dialog boxes on Windows 10.kioware · kioware · CWE-78 RCE Yerel yetki yükseltme Komut enjeksiyonu	Yüksek7,8	—	%0,3	19 Haz 2023
31İzleyin	CVE-2024-3459İstismar yok	KioWare for Windows (versions all through 8.34) allows to escape the environment by downloading PDF files, which then by default are opened kioware · kioware · CWE-424 Yerel yetki yükseltme	Yüksek7,8	—	%0,2	14 May 2024
31İzleyin	CVE-2023-34641İstismar yok	KioWare for Windows through v8.33 was discovered to contain an incomplete blacklist filter for blocked dialog boxes on Windows 10.kioware · kioware Yerel yetki yükseltme	Yüksek7,8	—	%0,2	19 Haz 2023
28İzleyin	CVE-2024-3460İstismar yok	In KioWare for Windows (versions all through 8.34) it is possible to exit this software and use other already opened applications utilizing kioware · kioware · CWE-424	Yüksek7,0	—	%0,2	14 May 2024
22İzleyin	CVE-2024-3461İstismar yok	KioWare for Windows (versions all through 8.35) allows to brute force the PIN number, which protects the application from being closed, as tkioware · kioware · CWE-307	Orta5,5	—	%0,2	14 May 2024
21İzleyin	CVE-2022-44875Kavram kanıtı	KioWare through 8.33 on Windows sets KioScriptingUrlACL.AclActions.AllowHigh for the about:blank origin, which allows attackers to obtain SYkioware · kioware · CWE-79 XSS	Orta5,4	—	%0,5	6 Mar 2023

CVE-2018-18435
31İzleyin
KioWare Server version 4.9.6 and older installs by default to "C:\kioware_com" with weak folder permissions granting any user full permissio
YüksekCVSS 7,8Kavram kanıtıEPSS %1
- Yerel yetki yükseltme
kioware · kioware server21 Mar 2019
CVE-2023-34642
31İzleyin
KioWare for Windows through v8.33 was discovered to contain an incomplete blacklist filter for blocked dialog boxes on Windows 10.
YüksekCVSS 7,8İstismar yokEPSS %0
kioware · kioware19 Haz 2023
CVE-2024-3459
31İzleyin
KioWare for Windows (versions all through 8.34) allows to escape the environment by downloading PDF files, which then by default are opened
YüksekCVSS 7,8İstismar yokEPSS %0
- Yerel yetki yükseltme
kioware · kioware14 May 2024
CVE-2023-34641
31İzleyin
KioWare for Windows through v8.33 was discovered to contain an incomplete blacklist filter for blocked dialog boxes on Windows 10.
YüksekCVSS 7,8İstismar yokEPSS %0
- Yerel yetki yükseltme
kioware · kioware19 Haz 2023
CVE-2024-3460
28İzleyin
In KioWare for Windows (versions all through 8.34) it is possible to exit this software and use other already opened applications utilizing
YüksekCVSS 7,0İstismar yokEPSS %0
kioware · kioware14 May 2024
CVE-2024-3461
22İzleyin
KioWare for Windows (versions all through 8.35) allows to brute force the PIN number, which protects the application from being closed, as t
OrtaCVSS 5,5İstismar yokEPSS %0
kioware · kioware14 May 2024
CVE-2022-44875
21İzleyin
KioWare through 8.33 on Windows sets KioScriptingUrlACL.AclActions.AllowHigh for the about:blank origin, which allows attackers to obtain SY
OrtaCVSS 5,4Kavram kanıtıEPSS %0
- XSS
kioware · kioware6 Mar 2023