Opsview kayıtları
opsview üreticisine ait 16 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')7
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2
- CWE-352 Cross-Site Request Forgery (CSRF)2
- CWE-732 Incorrect Permission Assignment for Critical Resource1
- CWE-20 Improper Input Validation1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
16 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
49Planlayın | CVE-2018-16144İstismar yok | The test connection functionality in the NetAudit section of Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 is vulnerable to command inopsview · opsview · CWE-78 | Kritik9,8 | — | %32,7 | 5 Eyl 2018 |
35İzleyin | CVE-2016-10367Kavram kanıtı | In Opsview Monitor Pro (Prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to 4.6.4.162391051, and 4.5.x without a certain 2016 security opsview · opsview · CWE-22 | Yüksek7,5 | — | %16,1 | 3 May 2017 |
35İzleyin | CVE-2013-3935İstismar yok | Cross-site request forgery (CSRF) vulnerability in Opsview before 4.4.1 and Opsview Core before 20130522 allows remote attackers to hijack topsview · opsview · CWE-352 | Yüksek8,8 | — | %0,5 | 2 Oca 2020 |
33İzleyin | CVE-2018-16145İstismar yok | The /etc/init.d/opsview-reporting-module script that runs at boot time in Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 invokes a fileopsview · opsview · CWE-732 | Yüksek8,1 | — | %2,3 | 5 Eyl 2018 |
31İzleyin | CVE-2013-5694Kavram kanıtı | SQL injection vulnerability in status/service/acknowledge in Opsview before 4.4.1 allows remote attackers to execute arbitrary SQL commands opsview · opsview · CWE-89 | Yüksek7,5 | — | %2,6 | 5 Kas 2013 |
30İzleyin | CVE-2018-16146İstismar yok | The web management console of Opsview Monitor 5.4.x before 5.4.2 provides functionality accessible by an authenticated administrator to testopsview · opsview · CWE-78 | Yüksek7,2 | — | %6,2 | 5 Eyl 2018 |
27İzleyin | CVE-2013-7256İstismar yok | Cross-site request forgery (CSRF) vulnerability in Opsview before 4.4.2 allows remote attackers to hijack the authentication of unspecified opsview · opsview · CWE-352 | Orta6,8 | — | %0,6 | 3 Oca 2014 |
25İzleyin | CVE-2016-10368Kavram kanıtı | Open redirect vulnerability in Opsview Monitor Pro (Prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to 4.6.4.162391051, and 4.5.x withopsview · opsview · CWE-601 | Orta6,1 | — | %2,2 | 3 May 2017 |
24İzleyin | CVE-2018-16148İstismar yok | The diagnosticsb2ksy parameter of the /rest endpoint in Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 is vulnerable to Cross-Site Scriopsview · opsview · CWE-79 | Orta6,1 | — | %1,3 | 5 Eyl 2018 |
24İzleyin | CVE-2018-16147İstismar yok | The data parameter of the /settings/api/router endpoint in Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 is vulnerable to Cross-Site Sopsview · opsview · CWE-79 | Orta6,1 | — | %1,3 | 5 Eyl 2018 |
24İzleyin | CVE-2013-3936İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in Opsview before 4.4.1 and Opsview Core before 20130522 allow remote attackers to injecopsview · opsview · CWE-79 | Orta6,1 | — | %0,8 | 2 Oca 2020 |
24İzleyin | CVE-2015-6035İstismar yok | Opsview before 2015-11-06 has XSS via SNMP.opsview · opsview · CWE-79 | Orta6,1 | — | %0,7 | 9 Nis 2017 |
23İzleyin | CVE-2013-7255İstismar yok | Open redirect vulnerability in Opsview before 4.4.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing atopsview · opsview · CWE-20 | Orta5,8 | — | %1,2 | 3 Oca 2014 |
17İzleyin | CVE-2015-4420Kavram kanıtı | Multiple cross-site scripting (XSS) vulnerabilities in Opsview 4.6.2 and earlier allow remote attackers to inject arbitrary web script or HTopsview · opsview · CWE-79 | Orta4,3 | — | %1,5 | 18 Haz 2015 |
17İzleyin | CVE-2013-7254İstismar yok | Cross-site scripting (XSS) vulnerability in Opsview before 4.4.2 allows remote attackers to inject arbitrary web script or HTML via unspecifopsview · opsview · CWE-79 | Orta4,3 | — | %1,1 | 3 Oca 2014 |
17İzleyin | CVE-2013-5695İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in Opsview before 4.4.1 allow remote attackers to inject arbitrary web script or HTML viopsview · opsview · CWE-79 | Orta4,3 | — | %1,0 | 5 Kas 2013 |
- CVE-2018-1614449Planlayın
The test connection functionality in the NetAudit section of Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 is vulnerable to command in
KritikCVSS 9,8İstismar yokEPSS %33opsview · opsview5 Eyl 2018
- CVE-2016-1036735İzleyin
In Opsview Monitor Pro (Prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to 4.6.4.162391051, and 4.5.x without a certain 2016 security
YüksekCVSS 7,5Kavram kanıtıEPSS %16opsview · opsview3 May 2017
- CVE-2013-393535İzleyin
Cross-site request forgery (CSRF) vulnerability in Opsview before 4.4.1 and Opsview Core before 20130522 allows remote attackers to hijack t
YüksekCVSS 8,8İstismar yokEPSS %1opsview · opsview2 Oca 2020
- CVE-2018-1614533İzleyin
The /etc/init.d/opsview-reporting-module script that runs at boot time in Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 invokes a file
YüksekCVSS 8,1İstismar yokEPSS %2opsview · opsview5 Eyl 2018
- CVE-2013-569431İzleyin
SQL injection vulnerability in status/service/acknowledge in Opsview before 4.4.1 allows remote attackers to execute arbitrary SQL commands
YüksekCVSS 7,5Kavram kanıtıEPSS %3opsview · opsview5 Kas 2013
- CVE-2018-1614630İzleyin
The web management console of Opsview Monitor 5.4.x before 5.4.2 provides functionality accessible by an authenticated administrator to test
YüksekCVSS 7,2İstismar yokEPSS %6opsview · opsview5 Eyl 2018
- CVE-2013-725627İzleyin
Cross-site request forgery (CSRF) vulnerability in Opsview before 4.4.2 allows remote attackers to hijack the authentication of unspecified
OrtaCVSS 6,8İstismar yokEPSS %1opsview · opsview3 Oca 2014
- CVE-2016-1036825İzleyin
Open redirect vulnerability in Opsview Monitor Pro (Prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to 4.6.4.162391051, and 4.5.x with
OrtaCVSS 6,1Kavram kanıtıEPSS %2opsview · opsview3 May 2017
- CVE-2018-1614824İzleyin
The diagnosticsb2ksy parameter of the /rest endpoint in Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 is vulnerable to Cross-Site Scri
OrtaCVSS 6,1İstismar yokEPSS %1opsview · opsview5 Eyl 2018
- CVE-2018-1614724İzleyin
The data parameter of the /settings/api/router endpoint in Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 is vulnerable to Cross-Site S
OrtaCVSS 6,1İstismar yokEPSS %1opsview · opsview5 Eyl 2018
- CVE-2013-393624İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in Opsview before 4.4.1 and Opsview Core before 20130522 allow remote attackers to injec
OrtaCVSS 6,1İstismar yokEPSS %1opsview · opsview2 Oca 2020
- CVE-2015-603524İzleyin
Opsview before 2015-11-06 has XSS via SNMP.
OrtaCVSS 6,1İstismar yokEPSS %1opsview · opsview9 Nis 2017
- CVE-2013-725523İzleyin
Open redirect vulnerability in Opsview before 4.4.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing at
OrtaCVSS 5,8İstismar yokEPSS %1opsview · opsview3 Oca 2014
- CVE-2015-442017İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in Opsview 4.6.2 and earlier allow remote attackers to inject arbitrary web script or HT
OrtaCVSS 4,3Kavram kanıtıEPSS %2opsview · opsview18 Haz 2015
- CVE-2013-725417İzleyin
Cross-site scripting (XSS) vulnerability in Opsview before 4.4.2 allows remote attackers to inject arbitrary web script or HTML via unspecif
OrtaCVSS 4,3İstismar yokEPSS %1opsview · opsview3 Oca 2014
- CVE-2013-569517İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in Opsview before 4.4.1 allow remote attackers to inject arbitrary web script or HTML vi
OrtaCVSS 4,3İstismar yokEPSS %1opsview · opsview5 Kas 2013