İçeriğe atla
Noroxi

positive software kayıtları

positive software üreticisine ait 12 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
2
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

    Çubuk: toplam · koyu kısım: CISA KEV.

    Tekrar eden sınıflar

    Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

    CWE

    Saldırı profili

    Tüm kayıtlar

    12 kayıt
    • CVE-2007-2633
      41Planlayın

      Directory traversal vulnerability in H-Sphere SiteStudio 1.6 allows remote attackers to read, or include and execute, arbitrary local files

      KritikCVSS 10,0İstismar yokEPSS %2

      positive software · sitestudio13 May 2007

    • CVE-2008-1049
      40Planlayın

      Unspecified vulnerability in Parallels SiteStudio before 1.7.2, and 1.8.x before 1.8b, as used in Parallels H-Sphere 3.0 before Patch 9 and

      KritikCVSS 10,0İstismar yokEPSS %2

      positive software · h-sphere27 Şub 2008

    • CVE-2003-1247
      33İzleyin

      Multiple buffer overflows in H-Sphere WebShell 2.3 allow remote attackers to execute arbitrary code via (1) a long URL content type in CGI::

      YüksekCVSS 7,5Kavram kanıtıEPSS %10

      positive software · h-sphere31 Ara 2003

    • CVE-2005-4261
      32İzleyin

      Unspecified vulnerability in Positive Software Corporation CP+ (cpplus) before 2.5.5 allows attackers to have unknown impact and attack vect

      YüksekCVSS 7,8İstismar yokEPSS %2

      positive software · cp\+15 Ara 2005

    • CVE-2003-1248
      31İzleyin

      H-Sphere WebShell 2.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) mode and (2) zipfile paramet

      YüksekCVSS 7,5İstismar yokEPSS %2

      positive software · h-sphere31 Ara 2003

    • CVE-2005-1605
      27İzleyin

      Cross-site scripting (XSS) vulnerability in the guestbook for SiteStudio 1.6 allows remote attackers to inject arbitrary web script or HTML

      OrtaCVSS 6,8İstismar yokEPSS %2

      positive software · sitestudio16 May 2005

    • CVE-2008-4448
      27İzleyin

      Cross-site request forgery (CSRF) vulnerability in actions.php in Positive Software H-Sphere WebShell 4.3.10 allows remote attackers to perf

      OrtaCVSS 6,8İstismar yokEPSS %1

      positive software · h-sphere6 Eki 2008

    • CVE-2006-6382
      27İzleyin

      The control panel for Positive Software H-Sphere before 2.5.0 RC3 creates log files in a user's directory with insecure permissions, which a

      OrtaCVSS 6,8İstismar yokEPSS %0

      positive software · h-sphere7 Ara 2006

    • CVE-2005-1606
      18İzleyin

      H-Sphere Winbox 2.4.2 and 2.4.3 RC1 stores sensitive information such as username and password in plaintext in world-readable log files, whi

      OrtaCVSS 4,6Kavram kanıtıEPSS %1

      positive software · h-sphere winbox16 May 2005

    • CVE-2008-4447
      17İzleyin

      Cross-site scripting (XSS) vulnerability in actions.php in Positive Software H-Sphere WebShell 4.3.10 allows remote attackers to inject arbi

      OrtaCVSS 4,3Kavram kanıtıEPSS %1

      positive software · h-sphere6 Eki 2008

    • CVE-2006-0193
      17İzleyin

      Cross-site scripting (XSS) vulnerability in the Hosting Control Panel (psoft.hsphere.CP) in Positive Software H-Sphere 2.4.3 Patch 8 and ear

      OrtaCVSS 4,3İstismar yokEPSS %1

      positive software · h-sphere13 Oca 2006

    • CVE-2006-3278
      10İzleyin

      Cross-site scripting (XSS) vulnerability in H-Sphere 2.5.1 Beta 1 and earlier allows remote attackers to inject arbitrary web script or HTML

      DüşükCVSS 2,6İstismar yokEPSS %1

      positive software · h-sphere28 Haz 2006