notify technology kayıtları

notify technology üreticisine ait 4 yayımlanmış kayıt.

Araştırmacı profili

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

4 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
30İzleyin	CVE-2005-0810İstismar yok	SQL injection vulnerability in NotifyLink before 3.0 allows remote attackers to execute arbitrary SQL commands via the URL.notify technology · notifylink pre-auth RCE SQL enjeksiyonu	Yüksek7,5	—	%1,5	2 May 2005
30İzleyin	CVE-2005-0809İstismar yok	NotifyLink, when configured for client key retrieval, allows remote attackers to obtain AES keys via a direct request to /hwp/get.asp, then notify technology · notifylink Kimlik doğrulamasız	Yüksek7,5	—	%1,2	2 May 2005
20İzleyin	CVE-2005-0812İstismar yok	The web interface in NotifyLink 3.0 displays passwords in cleartext on the administrative page, which could allow remote attackers or local notify technology · notifylink Kimlik doğrulamasız	Orta5,0	—	%1,6	2 May 2005
18İzleyin	CVE-2005-0811İstismar yok	The web interface in NotifyLink 3.0 does not properly restrict access to functions that have been disabled in the GUI, which allows remote anotify technology · notifylink	Orta4,6	—	%0,7	2 May 2005

CVE-2005-0810
30İzleyin
SQL injection vulnerability in NotifyLink before 3.0 allows remote attackers to execute arbitrary SQL commands via the URL.
YüksekCVSS 7,5İstismar yokEPSS %2
- pre-auth RCE
- SQL enjeksiyonu
notify technology · notifylink2 May 2005
CVE-2005-0809
30İzleyin
NotifyLink, when configured for client key retrieval, allows remote attackers to obtain AES keys via a direct request to /hwp/get.asp, then
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
notify technology · notifylink2 May 2005
CVE-2005-0812
20İzleyin
The web interface in NotifyLink 3.0 displays passwords in cleartext on the administrative page, which could allow remote attackers or local
OrtaCVSS 5,0İstismar yokEPSS %2
- Kimlik doğrulamasız
notify technology · notifylink2 May 2005
CVE-2005-0811
18İzleyin
The web interface in NotifyLink 3.0 does not properly restrict access to functions that have been disabled in the GUI, which allows remote a
OrtaCVSS 4,6İstismar yokEPSS %1
notify technology · notifylink2 May 2005