MGT-COMMERCE kayıtları
mgt-commerce üreticisine ait 7 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %14,3
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-321 Use of Hard-coded Cryptographic Key1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-565 Reliance on Cookies without Validation and Integrity Checking1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
- CWE-863 Incorrect Authorization1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
7 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
61Bu hafta | CVE-2023-35885Kavram kanıtı | CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication.mgt-commerce · cloudpanel · CWE-565 | Kritik9,8 | — | %74,8 | 20 Haz 2023 |
36İzleyin | CVE-2024-24320İstismar yok | Directory Traversal vulnerability in Mgt-commerce CloudPanel v.2.0.0 thru v.2.4.0 allows a remote attacker to obtain sensitive information amgt-commerce · cloudpanel · CWE-22 | Yüksek8,8 | — | %4,0 | 14 Haz 2024 |
36İzleyin | CVE-2023-46157İstismar yok | File-Manager in MGT CloudPanel 2.0.0 through 2.3.2 allows the lowest privilege user to achieve OS command injection by changing file ownershmgt-commerce · cloudpanel · CWE-78 | Yüksek8,8 | — | %2,3 | 8 Ara 2023 |
35İzleyin | CVE-2023-36630İstismar yok | In CloudPanel before 2.3.1, insecure file upload leads to privilege escalation and authentication bypass.mgt-commerce · cloudpanel · CWE-434 | Yüksek8,8 | — | %0,8 | 25 Haz 2023 |
32İzleyin | CVE-2023-0391İstismar yok | MGT-COMMERCE CloudPanel Shared Certificatemgt-commerce · cloudpanel · CWE-321 | Yüksek8,1 | — | %0,5 | 21 Mar 2023 |
31İzleyin | CVE-2023-33747Kavram kanıtı | CloudPanel v2.2.2 allows attackers to execute a path traversal.mgt-commerce · cloudpanel · CWE-22 | Yüksek7,8 | — | %0,4 | 6 Haz 2023 |
26İzleyin | CVE-2024-44765Kavram kanıtı | An Improper Authorization (Access Control Misconfiguration) vulnerability in MGT-COMMERCE GmbH CloudPanel v2.0.0 to v2.4.2 allows low-privilCWE-863 | Orta6,5 | — | %0,6 | 8 Kas 2024 |
- CVE-2023-3588561Bu hafta
CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication.
KritikCVSS 9,8Kavram kanıtıEPSS %74mgt-commerce · cloudpanel20 Haz 2023
- CVE-2024-2432036İzleyin
Directory Traversal vulnerability in Mgt-commerce CloudPanel v.2.0.0 thru v.2.4.0 allows a remote attacker to obtain sensitive information a
YüksekCVSS 8,8İstismar yokEPSS %4mgt-commerce · cloudpanel14 Haz 2024
- CVE-2023-4615736İzleyin
File-Manager in MGT CloudPanel 2.0.0 through 2.3.2 allows the lowest privilege user to achieve OS command injection by changing file ownersh
YüksekCVSS 8,8İstismar yokEPSS %2mgt-commerce · cloudpanel8 Ara 2023
- CVE-2023-3663035İzleyin
In CloudPanel before 2.3.1, insecure file upload leads to privilege escalation and authentication bypass.
YüksekCVSS 8,8İstismar yokEPSS %0mgt-commerce · cloudpanel25 Haz 2023
- CVE-2023-039132İzleyin
MGT-COMMERCE CloudPanel Shared Certificate
YüksekCVSS 8,1İstismar yokEPSS %0mgt-commerce · cloudpanel21 Mar 2023
- CVE-2023-3374731İzleyin
CloudPanel v2.2.2 allows attackers to execute a path traversal.
YüksekCVSS 7,8Kavram kanıtıEPSS %0mgt-commerce · cloudpanel6 Haz 2023
- CVE-2024-4476526İzleyin
An Improper Authorization (Access Control Misconfiguration) vulnerability in MGT-COMMERCE GmbH CloudPanel v2.0.0 to v2.4.2 allows low-privil
OrtaCVSS 6,5Kavram kanıtıEPSS %08 Kas 2024