İçeriğe atla
Noroxi

Lansweeper kayıtları

lansweeper üreticisine ait 18 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
3
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 22

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Bug bounty kapsamı

Ürünün üreticisi herkese açık bir programda görünüyor. Eşleşme ad üzerinden yapıldı; kapsam metnini programda doğrulayın.

Tüm kayıtlar

18 kayıt
  • CVE-2022-22149
    57Planlayın

    A SQL injection vulnerability exists in the HelpdeskEmailActions.aspx functionality of Lansweeper lansweeper 9.1.20.2.

    YüksekCVSS 8,8İstismar yokEPSS %73

    lansweeper · lansweeper14 Nis 2022

  • CVE-2022-21234
    57Planlayın

    An SQL injection vulnerability exists in the EchoAssets.aspx functionality of Lansweeper lansweeper 9.1.20.2.

    YüksekCVSS 8,8İstismar yokEPSS %73

    lansweeper · lansweeper14 Nis 2022

  • CVE-2022-21210
    56Planlayın

    An SQL injection vulnerability exists in the AssetActions.aspx functionality of Lansweeper lansweeper 9.1.20.2.

    YüksekCVSS 8,8İstismar yokEPSS %71

    lansweeper · lansweeper14 Nis 2022

  • CVE-2022-29517
    52Planlayın

    A directory traversal vulnerability exists in the HelpdeskActions.aspx edittemplate functionality of Lansweeper lansweeper 10.1.1.0.

    YüksekCVSS 8,8İstismar yokEPSS %58

    lansweeper · lansweeper15 Ara 2022

  • CVE-2020-14011
    48Planlayın

    Lansweeper 6.0.x through 7.2.x has a default installation in which the admin password is configured for the admin account, unless "Built-in

    KritikCVSS 9,8Kavram kanıtıEPSS %29

    lansweeper · lansweeper15 Haz 2020

  • CVE-2022-21145
    42Planlayın

    A stored cross-site scripting vulnerability exists in the WebUserActions.aspx functionality of Lansweeper lansweeper 9.1.20.2.

    OrtaCVSS 4,8İstismar yokEPSS %78

    lansweeper · lansweeper14 Nis 2022

  • CVE-2017-13706
    40Planlayın

    XML external entity (XXE) vulnerability in the import package functionality of the deployment module in Lansweeper before 6.0.100.67 allows

    KritikCVSS 9,9İstismar yokEPSS %2

    lansweeper · lansweeper10 Eki 2017

  • CVE-2015-9264
    40Planlayın

    Lansweeper 4.x through 6.x before 6.0.0.48 allows attackers to execute arbitrary code on the administrator's workstation via a crafted Windo

    KritikCVSS 9,8İstismar yokEPSS %2

    lansweeper · lansweeper27 Ağu 2018

  • CVE-2019-13462
    39İzleyin

    Lansweeper before 7.1.117.4 allows unauthenticated SQL injection.

    KritikCVSS 9,1Kavram kanıtıEPSS %11

    lansweeper · lansweeper12 Ağu 2019

  • CVE-2022-27498
    38İzleyin

    A directory traversal vulnerability exists in the TicketTemplateActions.aspx GetTemplateAttachment functionality of Lansweeper lansweeper 10

    OrtaCVSS 6,5İstismar yokEPSS %38

    lansweeper · lansweeper15 Ara 2022

  • CVE-2022-32573
    36İzleyin

    A directory traversal vulnerability exists in the AssetActions.aspx addDoc functionality of Lansweeper lansweeper 10.1.1.0.

    YüksekCVSS 8,8İstismar yokEPSS %4

    lansweeper · lansweeper15 Ara 2022

  • CVE-2020-13658
    32İzleyin

    In Lansweeper 8.0.130.17, the web console is vulnerable to a CSRF attack that would allow a low-level Lansweeper user to elevate their privi

    YüksekCVSS 8,0İstismar yokEPSS %0

    lansweeper · lansweeper30 Eyl 2020

  • CVE-2022-29511
    27İzleyin

    A directory traversal vulnerability exists in the KnowledgebasePageActions.aspx ImportArticles functionality of Lansweeper lansweeper 10.1.1

    OrtaCVSS 6,5İstismar yokEPSS %2

    lansweeper · lansweeper15 Ara 2022

  • CVE-2017-16841
    24İzleyin

    LanSweeper 6.0.100.75 has XSS via the description parameter to /Calendar/CalendarActions.aspx.

    OrtaCVSS 6,1Kavram kanıtıEPSS %1

    lansweeper · lansweeper15 Kas 2017

  • CVE-2022-32763
    24İzleyin

    A cross-site scripting (xss) sanitization vulnerability bypass exists in the SanitizeHtml functionality of Lansweeper lansweeper 10.1.1.0.

    OrtaCVSS 6,1İstismar yokEPSS %1

    lansweeper · lansweeper15 Ara 2022

  • CVE-2017-9292
    24İzleyin

    Lansweeper before 6.0.0.65 has XSS in an image retrieval URI, aka Bug 542782.

    OrtaCVSS 6,1İstismar yokEPSS %1

    lansweeper · lansweeper29 May 2017

  • CVE-2019-18955
    24İzleyin

    The web console in Lansweeper 7.2.105.2 has XSS via the URL path.

    OrtaCVSS 6,1İstismar yokEPSS %1

    lansweeper · lansweeper19 Ara 2019

  • CVE-2022-28703
    21İzleyin

    A stored cross-site scripting vulnerability exists in the HdConfigActions.aspx altertextlanguages functionality of Lansweeper lansweeper 10.

    OrtaCVSS 5,4İstismar yokEPSS %1

    lansweeper · lansweeper15 Ara 2022