korn19 kayıtları
korn19 üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-264 Permissions, Privileges, and Access Controls1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
27İzleyin | CVE-2009-4173Kavram kanıtı | Cross-site request forgery (CSRF) vulnerability in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allows remote attackers to hijack thecutephp · cutenews · CWE-352 | Orta6,8 | — | %1,0 | 2 Ara 2009 |
26İzleyin | CVE-2009-4113İstismar yok | Static code injection vulnerability in the Categories module in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allows remote authenticacutephp · cutenews · CWE-94 | Orta6,5 | — | %1,2 | 30 Kas 2009 |
24İzleyin | CVE-2009-4174Kavram kanıtı | The editnews module in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b, when magic_quotes_gpc is disabled, allows remote authenticated ucutephp · cutenews · CWE-264 | Orta6,0 | — | %1,6 | 2 Ara 2009 |
21İzleyin | CVE-2009-4175Kavram kanıtı | CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allows remote attackers to obtain sensitive information via an invalid date value in thecutephp · cutenews · CWE-200 | Orta5,0 | — | %2,7 | 2 Ara 2009 |
18İzleyin | CVE-2009-4250Kavram kanıtı | Multiple cross-site scripting (XSS) vulnerabilities in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allow remote attackers to inject cutephp · cutenews · CWE-79 | Orta4,3 | — | %1,9 | 9 Ara 2009 |
10İzleyin | CVE-2009-4172Kavram kanıtı | Cross-site scripting (XSS) vulnerability in index.php in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews 8 and 8b, when magic_quotes_gpc is disablcutephp · cutenews · CWE-79 | Düşük2,6 | — | %1,5 | 2 Ara 2009 |
- CVE-2009-417327İzleyin
Cross-site request forgery (CSRF) vulnerability in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allows remote attackers to hijack the
OrtaCVSS 6,8Kavram kanıtıEPSS %1cutephp · cutenews2 Ara 2009
- CVE-2009-411326İzleyin
Static code injection vulnerability in the Categories module in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allows remote authentica
OrtaCVSS 6,5İstismar yokEPSS %1cutephp · cutenews30 Kas 2009
- CVE-2009-417424İzleyin
The editnews module in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b, when magic_quotes_gpc is disabled, allows remote authenticated u
OrtaCVSS 6,0Kavram kanıtıEPSS %1cutephp · cutenews2 Ara 2009
- CVE-2009-417521İzleyin
CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allows remote attackers to obtain sensitive information via an invalid date value in the
OrtaCVSS 5,0Kavram kanıtıEPSS %2cutephp · cutenews2 Ara 2009
- CVE-2009-425018İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allow remote attackers to inject
OrtaCVSS 4,3Kavram kanıtıEPSS %1cutephp · cutenews9 Ara 2009
- CVE-2009-417210İzleyin
Cross-site scripting (XSS) vulnerability in index.php in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews 8 and 8b, when magic_quotes_gpc is disabl
DüşükCVSS 2,6Kavram kanıtıEPSS %1cutephp · cutenews2 Ara 2009