roxy-wi kayıtları
roxy-wi üreticisine ait 20 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 1 · %5
- Pre-auth RCE
- 5
- Düzeltme kaydı olan
- %15
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')6
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')4
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')3
- CWE-287 Improper Authentication2
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
20 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
66Bu hafta | CVE-2022-31137Silahlaştırılmış | Unauthenticated Remote Code Execution in Roxy-WIroxy-wi · roxy-wi · CWE-78 | Kritik9,8 | — | %90,6 | 8 Tem 2022 |
55Planlayın | CVE-2022-31126Kavram kanıtı | Unauthenticated Remote Code Execution in Roxy-wiroxy-wi · roxy-wi · CWE-74 | Kritik9,8 | — | %52,6 | 6 Tem 2022 |
48Planlayın | CVE-2022-31161Kavram kanıtı | Roxy-WI Vulnerable to Unauthenticated Remote Code Execution via ssl_cert Uploadroxy-wi · roxy-wi · CWE-77 | Kritik9,8 | — | %28,4 | 15 Tem 2022 |
45Planlayın | CVE-2022-31125Kavram kanıtı | Authentication Bypass in Roxy-wiroxy-wi · roxy-wi · CWE-287 | Kritik9,8 | — | %20,3 | 6 Tem 2022 |
39İzleyin | CVE-2021-38167İstismar yok | Roxy-WI through 5.2.2.0 allows SQL Injection via check_login.roxy-wi · roxy-wi · CWE-89 | Kritik9,8 | — | %1,3 | 7 Ağu 2021 |
36İzleyin | CVE-2026-27811İstismar yok | Roxy-WI has a Command Injection via diff parameter in config comparison allows authenticated RCEroxy-wi · roxy-wi · CWE-77 | Yüksek8,8 | — | %3,0 | 17 Mar 2026 |
36İzleyin | CVE-2024-43804İstismar yok | OS Command Injection via Port Scan Functionality in Roxy-WIroxy-wi · roxy-wi · CWE-78 | Yüksek8,8 | — | %2,6 | 29 Ağu 2024 |
35İzleyin | CVE-2021-38169İstismar yok | Roxy-WI through 5.2.2.0 allows command injection via /app/funct.py and /api/api_funct.py.roxy-wi · roxy-wi · CWE-77 | Yüksek8,8 | — | %1,5 | 7 Ağu 2021 |
35İzleyin | CVE-2026-33076İstismar yok | Roxy-WI vulnerable to path traversal and arbitrary file writingroxy-wi · roxy-wi · CWE-22 | Yüksek8,9 | — | %1,0 | 23 Nis 2026 |
35İzleyin | CVE-2021-38168İstismar yok | Roxy-WI through 5.2.2.0 allows authenticated SQL injection via select_servers.roxy-wi · roxy-wi · CWE-89 | Yüksek8,8 | — | %0,9 | 7 Ağu 2021 |
35İzleyin | CVE-2026-33078İstismar yok | Roxy-WI has SQL Injection in haproxy_section_save Endpoint via Unsanitized server_ip Parameterroxy-wi · roxy-wi · CWE-89 | Yüksek8,9 | — | %0,5 | 23 Nis 2026 |
31İzleyin | CVE-2026-22265İstismar yok | Roxy-WI has a Command Injection via grep parameter in logs.py allows authenticated RCEroxy-wi · roxy-wi · CWE-78 | Yüksek7,5 | — | %2,3 | 15 Oca 2026 |
30İzleyin | CVE-2023-25803İstismar yok | Roxy-WI is a Web interface for managing Haproxy, Nginx, Apache, and Keepalived servers.roxy-wi · roxy-wi · CWE-22 | Yüksek7,5 | — | %1,2 | 13 Mar 2023 |
30İzleyin | CVE-2023-25802İstismar yok | Roxy-WI has Path Traversal vulnerabilityroxy-wi · roxy-wi · CWE-22 | Yüksek7,5 | — | %1,0 | 13 Mar 2023 |
30İzleyin | CVE-2026-33432İstismar yok | Roxy-WI has Pre-Authentication LDAP Injection that Leads to Authentication Bypassroxy-wi · roxy-wi · CWE-287 | Yüksek7,7 | — | %0,6 | 20 Nis 2026 |
30İzleyin | CVE-2026-33077İstismar yok | Roxy-WI has an arbitrary file read vulnerabilityroxy-wi · roxy-wi · CWE-22 | Yüksek7,7 | — | %0,5 | 23 Nis 2026 |
29İzleyin | CVE-2026-33208İstismar yok | Roxy-WI Vulnerable to Authenticated Remote Code Execution via OS Command Injection in find-in-config Endpointroxy-wi · roxy-wi · CWE-78 | Yüksek7,4 | — | %0,9 | 23 Nis 2026 |
26İzleyin | CVE-2023-29004İstismar yok | Path Traversal Vulnerability in hap-wi/roxy-wiroxy-wi · roxy-wi · CWE-22 | Orta6,5 | — | %0,9 | 17 Nis 2023 |
22İzleyin | CVE-2026-33431İstismar yok | Roxy-WI Vulnerable to Authenticated Arbitrary File Read via Path Traversal in Config Version Viewerroxy-wi · roxy-wi · CWE-24 | Orta5,7 | — | %0,5 | 20 Nis 2026 |
21İzleyin | CVE-2023-25804İstismar yok | Roxy-WI vulnerable to Limited Path Traversal in name parameterroxy-wi · roxy-wi · CWE-22 | Orta5,3 | — | %0,8 | 15 Mar 2023 |
- CVE-2022-3113766Bu hafta
Unauthenticated Remote Code Execution in Roxy-WI
KritikCVSS 9,8SilahlaştırılmışEPSS %91roxy-wi · roxy-wi8 Tem 2022
- CVE-2022-3112655Planlayın
Unauthenticated Remote Code Execution in Roxy-wi
KritikCVSS 9,8Kavram kanıtıEPSS %53roxy-wi · roxy-wi6 Tem 2022
- CVE-2022-3116148Planlayın
Roxy-WI Vulnerable to Unauthenticated Remote Code Execution via ssl_cert Upload
KritikCVSS 9,8Kavram kanıtıEPSS %28roxy-wi · roxy-wi15 Tem 2022
- CVE-2022-3112545Planlayın
Authentication Bypass in Roxy-wi
KritikCVSS 9,8Kavram kanıtıEPSS %20roxy-wi · roxy-wi6 Tem 2022
- CVE-2021-3816739İzleyin
Roxy-WI through 5.2.2.0 allows SQL Injection via check_login.
KritikCVSS 9,8İstismar yokEPSS %1roxy-wi · roxy-wi7 Ağu 2021
- CVE-2026-2781136İzleyin
Roxy-WI has a Command Injection via diff parameter in config comparison allows authenticated RCE
YüksekCVSS 8,8İstismar yokEPSS %3roxy-wi · roxy-wi17 Mar 2026
- CVE-2024-4380436İzleyin
OS Command Injection via Port Scan Functionality in Roxy-WI
YüksekCVSS 8,8İstismar yokEPSS %3roxy-wi · roxy-wi29 Ağu 2024
- CVE-2021-3816935İzleyin
Roxy-WI through 5.2.2.0 allows command injection via /app/funct.py and /api/api_funct.py.
YüksekCVSS 8,8İstismar yokEPSS %2roxy-wi · roxy-wi7 Ağu 2021
- CVE-2026-3307635İzleyin
Roxy-WI vulnerable to path traversal and arbitrary file writing
YüksekCVSS 8,9İstismar yokEPSS %1roxy-wi · roxy-wi23 Nis 2026
- CVE-2021-3816835İzleyin
Roxy-WI through 5.2.2.0 allows authenticated SQL injection via select_servers.
YüksekCVSS 8,8İstismar yokEPSS %1roxy-wi · roxy-wi7 Ağu 2021
- CVE-2026-3307835İzleyin
Roxy-WI has SQL Injection in haproxy_section_save Endpoint via Unsanitized server_ip Parameter
YüksekCVSS 8,9İstismar yokEPSS %1roxy-wi · roxy-wi23 Nis 2026
- CVE-2026-2226531İzleyin
Roxy-WI has a Command Injection via grep parameter in logs.py allows authenticated RCE
YüksekCVSS 7,5İstismar yokEPSS %2roxy-wi · roxy-wi15 Oca 2026
- CVE-2023-2580330İzleyin
Roxy-WI is a Web interface for managing Haproxy, Nginx, Apache, and Keepalived servers.
YüksekCVSS 7,5İstismar yokEPSS %1roxy-wi · roxy-wi13 Mar 2023
- CVE-2023-2580230İzleyin
Roxy-WI has Path Traversal vulnerability
YüksekCVSS 7,5İstismar yokEPSS %1roxy-wi · roxy-wi13 Mar 2023
- CVE-2026-3343230İzleyin
Roxy-WI has Pre-Authentication LDAP Injection that Leads to Authentication Bypass
YüksekCVSS 7,7İstismar yokEPSS %1roxy-wi · roxy-wi20 Nis 2026
- CVE-2026-3307730İzleyin
Roxy-WI has an arbitrary file read vulnerability
YüksekCVSS 7,7İstismar yokEPSS %1roxy-wi · roxy-wi23 Nis 2026
- CVE-2026-3320829İzleyin
Roxy-WI Vulnerable to Authenticated Remote Code Execution via OS Command Injection in find-in-config Endpoint
YüksekCVSS 7,4İstismar yokEPSS %1roxy-wi · roxy-wi23 Nis 2026
- CVE-2023-2900426İzleyin
Path Traversal Vulnerability in hap-wi/roxy-wi
OrtaCVSS 6,5İstismar yokEPSS %1roxy-wi · roxy-wi17 Nis 2023
- CVE-2026-3343122İzleyin
Roxy-WI Vulnerable to Authenticated Arbitrary File Read via Path Traversal in Config Version Viewer
OrtaCVSS 5,7İstismar yokEPSS %0roxy-wi · roxy-wi20 Nis 2026
- CVE-2023-2580421İzleyin
Roxy-WI vulnerable to Limited Path Traversal in name parameter
OrtaCVSS 5,3İstismar yokEPSS %1roxy-wi · roxy-wi15 Mar 2023