lyris kayıtları
lyris üreticisine ait 8 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-264 Permissions, Privileges, and Access Controls1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
8 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
41Planlayın | CVE-2007-6319İstismar yok | Multiple unspecified vulnerabilities in Lyris ListManager 8.x before 8.95d, 9.2 before 9.2c, and 9.3 before 9.3b allow remote attackers to (lyris · list manager · CWE-264 | Kritik10,0 | — | %2,6 | 19 Şub 2008 |
31İzleyin | CVE-2005-4144İstismar yok | Lyris ListManager 5.0 through 8.9a allows remote attackers to add "ORDER BY" columns to SQL queries via unusual whitespace characters in thelyris · list manager | Yüksek7,5 | — | %1,8 | 10 Ara 2005 |
30İzleyin | CVE-2005-4143Kavram kanıtı | SQL injection vulnerability in Lyris ListManager 5.0 through 8.9a allows remote attackers to execute arbitrary SQL commands via SQL code aftlyris · list manager | Yüksek7,5 | — | %1,4 | 10 Ara 2005 |
26İzleyin | CVE-2006-4546İstismar yok | Lyris ListManager 8.95 allows remote authenticated users, who have administrative privileges for at least one list on the server, to add newlyris · list manager | Orta6,5 | — | %1,4 | 5 Eyl 2006 |
26İzleyin | CVE-2006-4547İstismar yok | Lyris ListManager 8.95 allows remote authenticated users to obtain sensitive information by attempting to add a user with a ' (single quote)lyris · list manager | Orta6,5 | — | %1,0 | 5 Eyl 2006 |
18İzleyin | CVE-2014-5188İstismar yok | Cross-site scripting (XSS) vulnerability in doemailpassword.tml in Lyris ListManager (LM) 8.95a allows remote attackers to inject arbitrary lyris · list manager · CWE-79 | Orta4,3 | — | %1,9 | 7 Ağu 2014 |
18İzleyin | CVE-2000-0758İstismar yok | The web interface for Lyris List Manager 3 and 4 allows list subscribers to obtain administrative access by modifying the value of the list_lyris · list manager | Orta4,6 | — | %0,4 | 20 Eki 2000 |
17İzleyin | CVE-2008-2923İstismar yok | Cross-site scripting (XSS) vulnerability in read/search/results in Lyris ListManager 8.8, 8.95, and 9.3d allows remote attackers to inject alyris · list manager · CWE-79 | Orta4,3 | — | %1,3 | 30 Haz 2008 |
- CVE-2007-631941Planlayın
Multiple unspecified vulnerabilities in Lyris ListManager 8.x before 8.95d, 9.2 before 9.2c, and 9.3 before 9.3b allow remote attackers to (
KritikCVSS 10,0İstismar yokEPSS %3lyris · list manager19 Şub 2008
- CVE-2005-414431İzleyin
Lyris ListManager 5.0 through 8.9a allows remote attackers to add "ORDER BY" columns to SQL queries via unusual whitespace characters in the
YüksekCVSS 7,5İstismar yokEPSS %2lyris · list manager10 Ara 2005
- CVE-2005-414330İzleyin
SQL injection vulnerability in Lyris ListManager 5.0 through 8.9a allows remote attackers to execute arbitrary SQL commands via SQL code aft
YüksekCVSS 7,5Kavram kanıtıEPSS %1lyris · list manager10 Ara 2005
- CVE-2006-454626İzleyin
Lyris ListManager 8.95 allows remote authenticated users, who have administrative privileges for at least one list on the server, to add new
OrtaCVSS 6,5İstismar yokEPSS %1lyris · list manager5 Eyl 2006
- CVE-2006-454726İzleyin
Lyris ListManager 8.95 allows remote authenticated users to obtain sensitive information by attempting to add a user with a ' (single quote)
OrtaCVSS 6,5İstismar yokEPSS %1lyris · list manager5 Eyl 2006
- CVE-2014-518818İzleyin
Cross-site scripting (XSS) vulnerability in doemailpassword.tml in Lyris ListManager (LM) 8.95a allows remote attackers to inject arbitrary
OrtaCVSS 4,3İstismar yokEPSS %2lyris · list manager7 Ağu 2014
- CVE-2000-075818İzleyin
The web interface for Lyris List Manager 3 and 4 allows list subscribers to obtain administrative access by modifying the value of the list_
OrtaCVSS 4,6İstismar yokEPSS %0lyris · list manager20 Eki 2000
- CVE-2008-292317İzleyin
Cross-site scripting (XSS) vulnerability in read/search/results in Lyris ListManager 8.8, 8.95, and 9.3d allows remote attackers to inject a
OrtaCVSS 4,3İstismar yokEPSS %1lyris · list manager30 Haz 2008