İçeriğe atla
Noroxi

MITRE kayıtları

mitre üreticisine ait 15 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%6,7
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 20
  2. 21
  3. 22
  4. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

15 kayıt
  • CVE-2021-42561
    41Planlayın

    An issue was discovered in CALDERA 2.8.1.

    YüksekCVSS 8,8Kavram kanıtıEPSS %20

    mitre · caldera12 Oca 2022

  • CVE-2008-4704
    41Planlayın

    PHP remote file inclusion vulnerability in SezHooTabsAndActions.php in SezHoo 0.1 allows remote attackers to execute arbitrary PHP code via

    KritikCVSS 10,0Kavram kanıtıEPSS %4

    mitre · sezhoo23 Eki 2008

  • CVE-2020-19907
    36İzleyin

    A command injection vulnerability in the sandcat plugin of Caldera 2.3.1 and earlier allows authenticated attackers to execute any command o

    YüksekCVSS 8,8İstismar yokEPSS %3

    mitre · caldera12 Tem 2021

  • CVE-2021-42560
    36İzleyin

    An issue was discovered in CALDERA 2.9.0.

    YüksekCVSS 8,8Kavram kanıtıEPSS %2

    mitre · caldera12 Oca 2022

  • CVE-2021-42559
    36İzleyin

    An issue was discovered in CALDERA 2.8.1.

    YüksekCVSS 8,8Kavram kanıtıEPSS %2

    mitre · caldera12 Oca 2022

  • CVE-2021-42562
    32İzleyin

    An issue was discovered in CALDERA 2.8.1.

    YüksekCVSS 8,1Kavram kanıtıEPSS %1

    mitre · caldera12 Oca 2022

  • CVE-2022-31004
    30İzleyin

    Potential secrets being logged to disk in CVE Services

    YüksekCVSS 7,5İstismar yokEPSS %1

    mitre · cve-services2 Haz 2022

  • CVE-2021-46561
    28İzleyin

    controller/org.controller/org.controller.js in the CVE Services API 1.1.1 before 5c50baf3bda28133a3bc90b854765a64fb538304 allows an organiza

    YüksekCVSS 7,2İstismar yokEPSS %1

    mitre · cve services26 Oca 2022

  • CVE-2021-42558
    24İzleyin

    An issue was discovered in CALDERA 2.8.1.

    OrtaCVSS 6,1Kavram kanıtıEPSS %1

    mitre · caldera12 Oca 2022

  • CVE-2022-40606
    24İzleyin

    MITRE CALDERA before 4.1.0 allows XSS in the Operations tab and/or Debrief plugin via a crafted operation name, a different vulnerability th

    OrtaCVSS 6,1İstismar yokEPSS %0

    mitre · caldera17 Eki 2022

  • CVE-2022-40605
    24İzleyin

    MITRE CALDERA before 4.1.0 allows XSS in the Operations tab and/or Debrief plugin via a crafted operation name, a different vulnerability th

    OrtaCVSS 6,1İstismar yokEPSS %0

    mitre · caldera17 Eki 2022

  • CVE-2020-10807
    21İzleyin

    auth_svc in Caldera before 2.6.5 allows authentication bypass (for REST API requests) via a forged "localhost" string in the HTTP Host heade

    OrtaCVSS 5,3İstismar yokEPSS %1

    mitre · caldera22 Mar 2020

  • CVE-2020-14462
    21İzleyin

    CALDERA 2.7.0 allows XSS via the Operation Name box.

    OrtaCVSS 5,4İstismar yokEPSS %1

    mitre · caldera19 Haz 2020

  • CVE-2022-41139
    21İzleyin

    MITRE CALDERA 4.1.0 allows stored XSS via app.contact.gist (aka the gist contact configuration field), leading to execution of arbitrary com

    OrtaCVSS 5,4İstismar yokEPSS %1

    mitre · caldera17 Eki 2022

  • CVE-2023-51792
    13İzleyin

    Buffer Overflow vulnerability in libde265 v1.0.12 allows a local attacker to cause a denial of service via the allocation size exceeding the

    DüşükCVSS 3,3İstismar yokEPSS %0

    19 Nis 2024