nibbleblog kayıtları
nibbleblog üreticisine ait 7 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 1 · %14,3
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-94 Improper Control of Generation of Code ('Code Injection')2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
7 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
41Planlayın | CVE-2015-6967Silahlaştırılmış | Unrestricted file upload vulnerability in the My Image plugin in Nibbleblog before 4.0.5 allows remote administrators to execute arbitrary cnibbleblog · nibbleblog | Orta6,5 | — | %49,3 | 16 Eyl 2015 |
40Planlayın | CVE-2019-7719İstismar yok | Nibbleblog 4.0.5 allows eval injection by placing PHP code in the install.php username parameter and then making a content/private/shadow.phnibbleblog · nibbleblog · CWE-94 | Kritik9,8 | — | %1,7 | 11 Şub 2019 |
30İzleyin | CVE-2020-23356İstismar yok | dmin/kernel/api/login.class.phpin in nibbleblog v3.7.1c allows type juggling for login bypass because == is used instead of === for passwordnibbleblog · nibbleblog | Yüksek7,5 | — | %1,0 | 27 Oca 2021 |
28İzleyin | CVE-2018-16604İstismar yok | An issue was discovered in Nibbleblog v4.0.5.nibbleblog · nibbleblog · CWE-94 | Yüksek7,2 | — | %1,5 | 6 Eyl 2018 |
27İzleyin | CVE-2015-6966İstismar yok | Multiple cross-site request forgery (CSRF) vulnerabilities in Nibbleblog before 4.0.5 allow remote attackers to hijack the authentication ofnibbleblog · nibbleblog · CWE-352 | Orta6,8 | — | %0,7 | 16 Eyl 2015 |
21İzleyin | CVE-2018-6470İstismar yok | Nibbleblog 4.0.5 on macOS defaults to having .DS_Store in each directory, causing DS_Store information to leak.nibbleblog · nibbleblog · CWE-200 | Orta5,3 | — | %1,1 | 1 Şub 2018 |
18İzleyin | CVE-2014-8996İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in Nibbleblog before 4.0.2 allow remote attackers to inject arbitrary web script or HTMLnibbleblog · nibbleblog · CWE-79 | Orta4,3 | — | %1,9 | 20 Kas 2014 |
- CVE-2015-696741Planlayın
Unrestricted file upload vulnerability in the My Image plugin in Nibbleblog before 4.0.5 allows remote administrators to execute arbitrary c
OrtaCVSS 6,5SilahlaştırılmışEPSS %49nibbleblog · nibbleblog16 Eyl 2015
- CVE-2019-771940Planlayın
Nibbleblog 4.0.5 allows eval injection by placing PHP code in the install.php username parameter and then making a content/private/shadow.ph
KritikCVSS 9,8İstismar yokEPSS %2nibbleblog · nibbleblog11 Şub 2019
- CVE-2020-2335630İzleyin
dmin/kernel/api/login.class.phpin in nibbleblog v3.7.1c allows type juggling for login bypass because == is used instead of === for password
YüksekCVSS 7,5İstismar yokEPSS %1nibbleblog · nibbleblog27 Oca 2021
- CVE-2018-1660428İzleyin
An issue was discovered in Nibbleblog v4.0.5.
YüksekCVSS 7,2İstismar yokEPSS %2nibbleblog · nibbleblog6 Eyl 2018
- CVE-2015-696627İzleyin
Multiple cross-site request forgery (CSRF) vulnerabilities in Nibbleblog before 4.0.5 allow remote attackers to hijack the authentication of
OrtaCVSS 6,8İstismar yokEPSS %1nibbleblog · nibbleblog16 Eyl 2015
- CVE-2018-647021İzleyin
Nibbleblog 4.0.5 on macOS defaults to having .DS_Store in each directory, causing DS_Store information to leak.
OrtaCVSS 5,3İstismar yokEPSS %1nibbleblog · nibbleblog1 Şub 2018
- CVE-2014-899618İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in Nibbleblog before 4.0.2 allow remote attackers to inject arbitrary web script or HTML
OrtaCVSS 4,3İstismar yokEPSS %2nibbleblog · nibbleblog20 Kas 2014