passwork kayıtları
passwork üreticisine ait 7 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-312 Cleartext Storage of Sensitive Information2
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-863 Incorrect Authorization1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
7 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2022-25267İstismar yok | Passwork On-Premise Edition before 4.6.13 allows migration/uploadExportFile Directory Traversal (to upload files).passwork · passwork · CWE-22 | Yüksek8,8 | — | %1,5 | 23 Mar 2022 |
35İzleyin | CVE-2022-25268İstismar yok | Passwork On-Premise Edition before 4.6.13 allows CSRF via the groups, password, and history subsystems.passwork · passwork · CWE-352 | Yüksek8,8 | — | %0,4 | 23 Mar 2022 |
32İzleyin | CVE-2023-49949İstismar yok | Passwork before 6.2.0 allows remote authenticated users to bypass 2FA by sending all one million of the possible 6-digit codes.passwork · passwork · CWE-863 | Yüksek8,1 | — | %0,6 | 26 Ara 2023 |
30İzleyin | CVE-2022-42956İstismar yok | The PassWork extension 5.0.9 for Chrome and other browsers allows an attacker to obtain the cleartext master password.passwork · passwork · CWE-312 | Yüksek7,5 | — | %0,4 | 7 Kas 2022 |
30İzleyin | CVE-2022-42955İstismar yok | The PassWork extension 5.0.9 for Chrome and other browsers allows an attacker to obtain cleartext cached credentials.passwork · passwork · CWE-312 | Yüksek7,5 | — | %0,4 | 7 Kas 2022 |
24İzleyin | CVE-2022-25269İstismar yok | Passwork On-Premise Edition before 4.6.13 has multiple XSS issues.passwork · passwork · CWE-79 | Orta6,1 | — | %0,6 | 23 Mar 2022 |
17İzleyin | CVE-2022-25266İstismar yok | Passwork On-Premise Edition before 4.6.13 allows migration/downloadExportFile Directory Traversal (to read files).passwork · passwork · CWE-22 | Orta4,3 | — | %1,0 | 23 Mar 2022 |
- CVE-2022-2526735İzleyin
Passwork On-Premise Edition before 4.6.13 allows migration/uploadExportFile Directory Traversal (to upload files).
YüksekCVSS 8,8İstismar yokEPSS %2passwork · passwork23 Mar 2022
- CVE-2022-2526835İzleyin
Passwork On-Premise Edition before 4.6.13 allows CSRF via the groups, password, and history subsystems.
YüksekCVSS 8,8İstismar yokEPSS %0passwork · passwork23 Mar 2022
- CVE-2023-4994932İzleyin
Passwork before 6.2.0 allows remote authenticated users to bypass 2FA by sending all one million of the possible 6-digit codes.
YüksekCVSS 8,1İstismar yokEPSS %1passwork · passwork26 Ara 2023
- CVE-2022-4295630İzleyin
The PassWork extension 5.0.9 for Chrome and other browsers allows an attacker to obtain the cleartext master password.
YüksekCVSS 7,5İstismar yokEPSS %0passwork · passwork7 Kas 2022
- CVE-2022-4295530İzleyin
The PassWork extension 5.0.9 for Chrome and other browsers allows an attacker to obtain cleartext cached credentials.
YüksekCVSS 7,5İstismar yokEPSS %0passwork · passwork7 Kas 2022
- CVE-2022-2526924İzleyin
Passwork On-Premise Edition before 4.6.13 has multiple XSS issues.
OrtaCVSS 6,1İstismar yokEPSS %1passwork · passwork23 Mar 2022
- CVE-2022-2526617İzleyin
Passwork On-Premise Edition before 4.6.13 allows migration/downloadExportFile Directory Traversal (to read files).
OrtaCVSS 4,3İstismar yokEPSS %1passwork · passwork23 Mar 2022