ruvar kayıtları
ruvar üreticisine ait 26 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Saldırı profili
Tüm kayıtlar
26 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2024-25517İstismar yok | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the tbTable argument at /WebUtility/MF.aspx.ruvar · ruvaroa · CWE-89 | Kritik9,8 | — | %0,7 | 8 May 2024 |
39İzleyin | CVE-2024-25523İstismar yok | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the file_id parameter at /filemanage/file_memo.aspx.ruvar · ruvaroa · CWE-89 | Kritik9,8 | — | %0,7 | 8 May 2024 |
39İzleyin | CVE-2024-25519İstismar yok | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the idlist parameter at /WorkFlow/wf_work_print.aspx.ruvar · ruvaroa · CWE-89 | Kritik9,8 | — | %0,7 | 8 May 2024 |
39İzleyin | CVE-2024-25510İstismar yok | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /AddressBook/address_public_show.aruvar · ruvaroa · CWE-89 | Kritik9,8 | — | %0,7 | 7 May 2024 |
39İzleyin | CVE-2024-25508İstismar yok | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /bulletin/bulletin_template_show.aruvar · ruvaroa · CWE-89 | Kritik9,8 | — | %0,7 | 7 May 2024 |
39İzleyin | CVE-2024-25520İstismar yok | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /SysManage/sys_blogtemplate_new.asruvar · ruvaroa · CWE-89 | Kritik9,8 | — | %0,6 | 8 May 2024 |
39İzleyin | CVE-2024-25525İstismar yok | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the filename parameter at /WorkFlow/OfficeFileDownloadruvar · ruvaroa · CWE-89 | Kritik9,8 | — | %0,6 | 8 May 2024 |
39İzleyin | CVE-2024-25529İstismar yok | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /WorkFlow/wf_office_file_history_sruvar · ruvaroa · CWE-89 | Kritik9,8 | — | %0,6 | 8 May 2024 |
39İzleyin | CVE-2024-25531İstismar yok | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the PageID parameter at /WebUtility/SearchCondiction.aruvar · ruvaroa · CWE-89 | Kritik9,8 | — | %0,6 | 8 May 2024 |
39İzleyin | CVE-2024-25530İstismar yok | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the PageID parameter at /WebUtility/get_find_condictioruvar · ruvaroa · CWE-89 | Kritik9,8 | — | %0,6 | 8 May 2024 |
39İzleyin | CVE-2024-25532İstismar yok | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the bt_id parameter at /include/get_dict.aspx.ruvar · ruvaroa · CWE-89 | Kritik9,8 | — | %0,5 | 8 May 2024 |
37İzleyin | CVE-2024-25533İstismar yok | Error messages in RuvarOA v6.01 and v12.01 were discovered to leak the physical path of the website (/WorkFlow/OfficeFileUpdate.aspx).ruvar · ruvaroa · CWE-89 | Kritik9,4 | — | %0,7 | 8 May 2024 |
37İzleyin | CVE-2024-25521İstismar yok | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the txt_keyword parameter at get_company.aspx.ruvar · ruvaroa · CWE-89 | Kritik9,4 | — | %0,6 | 8 May 2024 |
37İzleyin | CVE-2024-25518İstismar yok | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the template_id parameter at /WorkFlow/wf_get_fields_aruvar · ruvaroa · CWE-89 | Kritik9,4 | — | %0,6 | 8 May 2024 |
37İzleyin | CVE-2024-25524İstismar yok | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the sys_file_storage_id parameter at /WorkPlan/WorkPlaruvar · ruvaroa · CWE-89 | Kritik9,4 | — | %0,6 | 8 May 2024 |
37İzleyin | CVE-2024-25511İstismar yok | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /AddressBook/address_public_new.asruvar · ruvaroa · CWE-89 | Kritik9,4 | — | %0,6 | 7 May 2024 |
37İzleyin | CVE-2024-25509İstismar yok | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the sys_file_storage_id parameter at /WorkFlow/wf_fileruvar · ruvaroa · CWE-89 | Kritik9,4 | — | %0,6 | 7 May 2024 |
37İzleyin | CVE-2024-25507İstismar yok | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the email_attach_id parameter at /LHMail/AttachDown.asruvar · ruvaroa · CWE-89 | Kritik9,4 | — | %0,6 | 7 May 2024 |
37İzleyin | CVE-2024-25522İstismar yok | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the office_missive_id parameter at /WorkFlow/wf_work_fruvar · ruvaroa · CWE-89 | Kritik9,4 | — | %0,6 | 8 May 2024 |
37İzleyin | CVE-2024-25514İstismar yok | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the template_id parameter at /SysManage/wf_template_chruvar · ruvaroa · CWE-89 | Kritik9,4 | — | %0,6 | 7 May 2024 |
37İzleyin | CVE-2024-25527İstismar yok | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /PersonalAffair/worklog_template_sruvar · ruvaroa · CWE-89 | Kritik9,4 | — | %0,5 | 8 May 2024 |
32İzleyin | CVE-2024-25526İstismar yok | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the project_id parameter at /ProjectManage/pm_gatt_incruvar · ruvaroa · CWE-89 | Yüksek8,1 | — | %0,6 | 8 May 2024 |
32İzleyin | CVE-2024-25512İstismar yok | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the attach_id parameter at /Bulletin/AttachDownLoad.asruvar · ruvaroa · CWE-89 | Yüksek8,1 | — | %0,5 | 7 May 2024 |
31İzleyin | CVE-2024-25513İstismar yok | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the file_id parameter at /CorporateCulture/kaizen_downruvar · ruvaroa · CWE-89 | Yüksek7,8 | — | %0,3 | 7 May 2024 |
29İzleyin | CVE-2024-25515İstismar yok | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the sys_file_storage_id parameter at /WorkFlow/wf_workruvar · ruvaroa · CWE-89 | Yüksek7,3 | — | %0,6 | 8 May 2024 |
- CVE-2024-2551739İzleyin
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the tbTable argument at /WebUtility/MF.aspx.
KritikCVSS 9,8İstismar yokEPSS %1ruvar · ruvaroa8 May 2024
- CVE-2024-2552339İzleyin
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the file_id parameter at /filemanage/file_memo.aspx.
KritikCVSS 9,8İstismar yokEPSS %1ruvar · ruvaroa8 May 2024
- CVE-2024-2551939İzleyin
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the idlist parameter at /WorkFlow/wf_work_print.aspx.
KritikCVSS 9,8İstismar yokEPSS %1ruvar · ruvaroa8 May 2024
- CVE-2024-2551039İzleyin
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /AddressBook/address_public_show.a
KritikCVSS 9,8İstismar yokEPSS %1ruvar · ruvaroa7 May 2024
- CVE-2024-2550839İzleyin
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /bulletin/bulletin_template_show.a
KritikCVSS 9,8İstismar yokEPSS %1ruvar · ruvaroa7 May 2024
- CVE-2024-2552039İzleyin
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /SysManage/sys_blogtemplate_new.as
KritikCVSS 9,8İstismar yokEPSS %1ruvar · ruvaroa8 May 2024
- CVE-2024-2552539İzleyin
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the filename parameter at /WorkFlow/OfficeFileDownload
KritikCVSS 9,8İstismar yokEPSS %1ruvar · ruvaroa8 May 2024
- CVE-2024-2552939İzleyin
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /WorkFlow/wf_office_file_history_s
KritikCVSS 9,8İstismar yokEPSS %1ruvar · ruvaroa8 May 2024
- CVE-2024-2553139İzleyin
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the PageID parameter at /WebUtility/SearchCondiction.a
KritikCVSS 9,8İstismar yokEPSS %1ruvar · ruvaroa8 May 2024
- CVE-2024-2553039İzleyin
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the PageID parameter at /WebUtility/get_find_condictio
KritikCVSS 9,8İstismar yokEPSS %1ruvar · ruvaroa8 May 2024
- CVE-2024-2553239İzleyin
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the bt_id parameter at /include/get_dict.aspx.
KritikCVSS 9,8İstismar yokEPSS %1ruvar · ruvaroa8 May 2024
- CVE-2024-2553337İzleyin
Error messages in RuvarOA v6.01 and v12.01 were discovered to leak the physical path of the website (/WorkFlow/OfficeFileUpdate.aspx).
KritikCVSS 9,4İstismar yokEPSS %1ruvar · ruvaroa8 May 2024
- CVE-2024-2552137İzleyin
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the txt_keyword parameter at get_company.aspx.
KritikCVSS 9,4İstismar yokEPSS %1ruvar · ruvaroa8 May 2024
- CVE-2024-2551837İzleyin
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the template_id parameter at /WorkFlow/wf_get_fields_a
KritikCVSS 9,4İstismar yokEPSS %1ruvar · ruvaroa8 May 2024
- CVE-2024-2552437İzleyin
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the sys_file_storage_id parameter at /WorkPlan/WorkPla
KritikCVSS 9,4İstismar yokEPSS %1ruvar · ruvaroa8 May 2024
- CVE-2024-2551137İzleyin
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /AddressBook/address_public_new.as
KritikCVSS 9,4İstismar yokEPSS %1ruvar · ruvaroa7 May 2024
- CVE-2024-2550937İzleyin
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the sys_file_storage_id parameter at /WorkFlow/wf_file
KritikCVSS 9,4İstismar yokEPSS %1ruvar · ruvaroa7 May 2024
- CVE-2024-2550737İzleyin
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the email_attach_id parameter at /LHMail/AttachDown.as
KritikCVSS 9,4İstismar yokEPSS %1ruvar · ruvaroa7 May 2024
- CVE-2024-2552237İzleyin
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the office_missive_id parameter at /WorkFlow/wf_work_f
KritikCVSS 9,4İstismar yokEPSS %1ruvar · ruvaroa8 May 2024
- CVE-2024-2551437İzleyin
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the template_id parameter at /SysManage/wf_template_ch
KritikCVSS 9,4İstismar yokEPSS %1ruvar · ruvaroa7 May 2024
- CVE-2024-2552737İzleyin
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /PersonalAffair/worklog_template_s
KritikCVSS 9,4İstismar yokEPSS %1ruvar · ruvaroa8 May 2024
- CVE-2024-2552632İzleyin
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the project_id parameter at /ProjectManage/pm_gatt_inc
YüksekCVSS 8,1İstismar yokEPSS %1ruvar · ruvaroa8 May 2024
- CVE-2024-2551232İzleyin
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the attach_id parameter at /Bulletin/AttachDownLoad.as
YüksekCVSS 8,1İstismar yokEPSS %1ruvar · ruvaroa7 May 2024
- CVE-2024-2551331İzleyin
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the file_id parameter at /CorporateCulture/kaizen_down
YüksekCVSS 7,8İstismar yokEPSS %0ruvar · ruvaroa7 May 2024
- CVE-2024-2551529İzleyin
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the sys_file_storage_id parameter at /WorkFlow/wf_work
YüksekCVSS 7,3İstismar yokEPSS %1ruvar · ruvaroa8 May 2024