rainbowfishsoftware kayıtları
rainbowfishsoftware üreticisine ait 7 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-306 Missing Authentication for Critical Function1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
7 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2020-29165İstismar yok | PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by incorrect access control, which can result in remotely gaining administrarainbowfishsoftware · pacsone server · CWE-306 | Kritik9,8 | — | %1,7 | 3 Şub 2021 |
39İzleyin | CVE-2020-12870İstismar yok | RainbowFish PacsOne Server 6.8.4 allows SQL injection on the username parameter in the signup page.rainbowfishsoftware · pacsone server · CWE-89 | Kritik9,8 | — | %1,6 | 30 Eyl 2020 |
35İzleyin | CVE-2020-12715İstismar yok | RainbowFish PacsOne Server 6.8.4 has Incorrect Access Control.rainbowfishsoftware · pacsone server · CWE-434 | Yüksek8,8 | — | %1,2 | 30 Eyl 2020 |
35İzleyin | CVE-2020-29163İstismar yok | PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by SQL injection.rainbowfishsoftware · pacsone server · CWE-89 | Yüksek8,8 | — | %1,1 | 3 Şub 2021 |
31İzleyin | CVE-2020-29166İstismar yok | PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by file read/manipulation, which can result in remote information disclosurerainbowfishsoftware · pacsone server · CWE-22 | Yüksek7,5 | — | %2,3 | 3 Şub 2021 |
26İzleyin | CVE-2020-29164Kavram kanıtı | PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by cross-site scripting (XSS).rainbowfishsoftware · pacsone server · CWE-79 | Orta6,1 | — | %6,2 | 3 Şub 2021 |
21İzleyin | CVE-2020-12869İstismar yok | RainbowFish PacsOne Server 6.8.4 allows XSS.rainbowfishsoftware · pacsone server · CWE-79 | Orta5,4 | — | %0,6 | 30 Eyl 2020 |
- CVE-2020-2916540Planlayın
PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by incorrect access control, which can result in remotely gaining administra
KritikCVSS 9,8İstismar yokEPSS %2rainbowfishsoftware · pacsone server3 Şub 2021
- CVE-2020-1287039İzleyin
RainbowFish PacsOne Server 6.8.4 allows SQL injection on the username parameter in the signup page.
KritikCVSS 9,8İstismar yokEPSS %2rainbowfishsoftware · pacsone server30 Eyl 2020
- CVE-2020-1271535İzleyin
RainbowFish PacsOne Server 6.8.4 has Incorrect Access Control.
YüksekCVSS 8,8İstismar yokEPSS %1rainbowfishsoftware · pacsone server30 Eyl 2020
- CVE-2020-2916335İzleyin
PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by SQL injection.
YüksekCVSS 8,8İstismar yokEPSS %1rainbowfishsoftware · pacsone server3 Şub 2021
- CVE-2020-2916631İzleyin
PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by file read/manipulation, which can result in remote information disclosure
YüksekCVSS 7,5İstismar yokEPSS %2rainbowfishsoftware · pacsone server3 Şub 2021
- CVE-2020-2916426İzleyin
PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by cross-site scripting (XSS).
OrtaCVSS 6,1Kavram kanıtıEPSS %6rainbowfishsoftware · pacsone server3 Şub 2021
- CVE-2020-1286921İzleyin
RainbowFish PacsOne Server 6.8.4 allows XSS.
OrtaCVSS 5,4İstismar yokEPSS %1rainbowfishsoftware · pacsone server30 Eyl 2020