niif kayıtları
niif üreticisine ait 4 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-264 Permissions, Privileges, and Access Controls2
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
4 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
23İzleyin | CVE-2015-3375İstismar yok | Cross-site request forgery (CSRF) vulnerability in the Shibboleth Authentication module before 6.x-4.1 and 7.x-4.x before 7.x-4.1 for Drupalniif · shibboleth authentication · CWE-352 | Orta5,8 | — | %0,6 | 21 Nis 2015 |
18İzleyin | CVE-2009-4527İstismar yok | The Shibboleth authentication module 5.x before 5.x-3.4 and 6.x before 6.x-3.2, a module for Drupal, does not properly remove statically gradrupal · drupal · CWE-264 | Orta4,6 | — | %0,3 | 31 Ara 2009 |
17İzleyin | CVE-2012-4494İstismar yok | The Shibboleth authentication module 7.x-4.0 for Drupal does not properly check the active status of users, which allows remote blocked userdrupal · drupal · CWE-264 | Orta4,3 | — | %1,0 | 31 Eki 2012 |
8İzleyin | CVE-2015-5513İstismar yok | Cross-site scripting (XSS) vulnerability in the Shibboleth authentication module 6.x-4.x before 6.x-4.2 and 7.x-4.x before 7.x-4.2 for Drupaniif · shibboleth authentication · CWE-79 | Düşük2,1 | — | %1,4 | 18 Ağu 2015 |
- CVE-2015-337523İzleyin
Cross-site request forgery (CSRF) vulnerability in the Shibboleth Authentication module before 6.x-4.1 and 7.x-4.x before 7.x-4.1 for Drupal
OrtaCVSS 5,8İstismar yokEPSS %0niif · shibboleth authentication21 Nis 2015
- CVE-2009-452718İzleyin
The Shibboleth authentication module 5.x before 5.x-3.4 and 6.x before 6.x-3.2, a module for Drupal, does not properly remove statically gra
OrtaCVSS 4,6İstismar yokEPSS %0drupal · drupal31 Ara 2009
- CVE-2012-449417İzleyin
The Shibboleth authentication module 7.x-4.0 for Drupal does not properly check the active status of users, which allows remote blocked user
OrtaCVSS 4,3İstismar yokEPSS %1drupal · drupal31 Eki 2012
- CVE-2015-55138İzleyin
Cross-site scripting (XSS) vulnerability in the Shibboleth authentication module 6.x-4.x before 6.x-4.2 and 7.x-4.x before 7.x-4.2 for Drupa
DüşükCVSS 2,1İstismar yokEPSS %1niif · shibboleth authentication18 Ağu 2015