İçeriğe atla
Noroxi

netsweeper kayıtları

netsweeper üreticisine ait 19 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
1 · %5,3
Pre-auth RCE
3
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 20

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

19 kayıt
  • CVE-2020-13167
    67Bu hafta

    Netsweeper through 6.4.3 allows unauthenticated remote code execution because webadmin/tools/unixlogin.php (with certain Referer headers) la

    KritikCVSS 9,8SilahlaştırılmışEPSS %95

    netsweeper · netsweeper19 May 2020

  • CVE-2014-9618
    61Bu hafta

    The Client Filter Admin portal in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass aut

    KritikCVSS 9,8Kavram kanıtıEPSS %73

    netsweeper · netsweeper19 Eyl 2017

  • CVE-2014-9614
    60Bu hafta

    The Web Panel in Netsweeper before 4.0.5 has a default password of branding for the branding account, which makes it easier for remote attac

    KritikCVSS 9,8Kavram kanıtıEPSS %69

    netsweeper · netsweeper19 Şub 2020

  • CVE-2014-9611
    43Planlayın

    Netsweeper before 4.0.5 allows remote attackers to bypass authentication and create arbitrary accounts and policies via a request to webadmi

    KritikCVSS 9,8Kavram kanıtıEPSS %13

    netsweeper · netsweeper19 Eyl 2017

  • CVE-2012-3859
    41Planlayın

    Unspecified vulnerability in the WebAdmin Portal in Netsweeper has unknown impact and attack vectors, a different vulnerability than CVE-201

    KritikCVSS 10,0Kavram kanıtıEPSS %3

    netsweeper · netsweeper9 Tem 2012

  • CVE-2014-9612
    40Planlayın

    SQL injection vulnerability in remotereporter/load_logfiles.php in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allo

    KritikCVSS 9,8Kavram kanıtıEPSS %5

    netsweeper · netsweeper19 Şub 2020

  • CVE-2014-9613
    40Planlayın

    Multiple SQL injection vulnerabilities in Netsweeper before 2.6.29.10 allow remote attackers to execute arbitrary SQL commands via the (1) l

    KritikCVSS 9,8Kavram kanıtıEPSS %4

    netsweeper · netsweeper19 Şub 2020

  • CVE-2014-9605
    38İzleyin

    WebUpgrade in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass authentication and crea

    KritikCVSS 9,4Kavram kanıtıEPSS %4

    netsweeper · netsweeper4 Eyl 2015

  • CVE-2014-9616
    31İzleyin

    Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to obtain sensitive information by making a req

    YüksekCVSS 7,5İstismar yokEPSS %2

    netsweeper · netsweeper19 Eyl 2017

  • CVE-2014-9619
    30İzleyin

    Unrestricted file upload vulnerability in webadmin/ajaxfilemanager/ajaxfilemanager.php in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and

    YüksekCVSS 7,2Kavram kanıtıEPSS %7

    netsweeper · netsweeper19 Eyl 2017

  • CVE-2012-2447
    27İzleyin

    Cross-site request forgery (CSRF) vulnerability in accountmgr/adminupdate.php in the WebAdmin Portal in Netsweeper allows remote attackers t

    OrtaCVSS 6,8İstismar yokEPSS %1

    netsweeper · netsweeper9 Tem 2012

  • CVE-2014-9617
    26İzleyin

    Open redirect vulnerability in remotereporter/load_logfiles.php in Netsweeper before 4.0.5 allows remote attackers to redirect users to arbi

    OrtaCVSS 6,1Kavram kanıtıEPSS %8

    netsweeper · netsweeper19 Şub 2020

  • CVE-2014-9609
    25İzleyin

    Directory traversal vulnerability in webadmin/reporter/view_server_log.php in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before

    OrtaCVSS 5,3Kavram kanıtıEPSS %13

    netsweeper · netsweeper19 Şub 2020

  • CVE-2014-9607
    25İzleyin

    Cross-site scripting (XSS) vulnerability in remotereporter/load_logfiles.php in Netsweeper 4.0.3 and 4.0.4 allows remote attackers to inject

    OrtaCVSS 6,1Kavram kanıtıEPSS %5

    netsweeper · netsweeper19 Şub 2020

  • CVE-2014-9608
    25İzleyin

    Cross-site scripting (XSS) vulnerability in webadmin/policy/group_table_ajax.php/ in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x

    OrtaCVSS 6,1Kavram kanıtıEPSS %5

    netsweeper · netsweeper19 Şub 2020

  • CVE-2014-9606
    25İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allow remote att

    OrtaCVSS 6,1Kavram kanıtıEPSS %4

    netsweeper · netsweeper19 Şub 2020

  • CVE-2014-9615
    25İzleyin

    Cross-site scripting (XSS) vulnerability in Netsweeper 4.0.4 allows remote attackers to inject arbitrary web script or HTML via the url para

    OrtaCVSS 6,1Kavram kanıtıEPSS %4

    netsweeper · netsweeper19 Şub 2020

  • CVE-2014-9610
    22İzleyin

    Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass authentication and remove IP addresse

    OrtaCVSS 5,3Kavram kanıtıEPSS %4

    netsweeper · netsweeper19 Eyl 2017

  • CVE-2012-2446
    17İzleyin

    Cross-site scripting (XSS) vulnerability in tools/local_lookup.php in the WebAdmin Portal in Netsweeper allows remote attackers to inject ar

    OrtaCVSS 4,3İstismar yokEPSS %1

    netsweeper · netsweeper9 Tem 2012