sahipro kayıtları
sahipro üreticisine ait 8 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-1236 Improper Neutralization of Formula Elements in a CSV File1
- CWE-306 Missing Authentication for Critical Function1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
8 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
45Planlayın | CVE-2018-20469Kavram kanıtı | An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0.sahipro · sahi pro · CWE-89 | Kritik9,8 | — | %18,5 | 17 Haz 2019 |
44Planlayın | CVE-2018-20470Kavram kanıtı | An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0.sahipro · sahi pro · CWE-22 | Yüksek7,5 | — | %46,0 | 17 Haz 2019 |
43Planlayın | CVE-2019-13597Kavram kanıtı | _s_/sprm/_s_/dyn/Player_setScriptFile in Sahi Pro 8.0.0 allows command execution.sahipro · sahi pro · CWE-78 | Kritik9,8 | — | %14,3 | 14 Tem 2019 |
40Planlayın | CVE-2019-15102İstismar yok | An issue was discovered in Tyto Sahi Pro 6.x through 8.0.0.sahipro · sahi pro · CWE-306 | Kritik9,8 | — | %3,8 | 6 Eyl 2019 |
38İzleyin | CVE-2019-13063Kavram kanıtı | Within Sahi Pro 8.0.0, an attacker can send a specially crafted URL to include any victim files on the system via the script parameter on thsahipro · sahi pro · CWE-22 | Yüksek7,5 | — | %27,2 | 23 Eyl 2019 |
36İzleyin | CVE-2018-20468İstismar yok | An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0.sahipro · sahi pro · CWE-1236 | Yüksek8,8 | — | %2,2 | 17 Haz 2019 |
24İzleyin | CVE-2019-13066İstismar yok | Sahi Pro 8.0.0 has a script manager arena located at _s_/dyn/pro/DBReports with many different areas that are vulnerable to reflected XSS, bsahipro · sahi pro · CWE-79 | Orta6,1 | — | %0,9 | 29 Eki 2019 |
22İzleyin | CVE-2018-20472Kavram kanıtı | An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0.sahipro · sahi pro · CWE-79 | Orta5,4 | — | %2,0 | 17 Haz 2019 |
- CVE-2018-2046945Planlayın
An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0.
KritikCVSS 9,8Kavram kanıtıEPSS %18sahipro · sahi pro17 Haz 2019
- CVE-2018-2047044Planlayın
An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0.
YüksekCVSS 7,5Kavram kanıtıEPSS %46sahipro · sahi pro17 Haz 2019
- CVE-2019-1359743Planlayın
_s_/sprm/_s_/dyn/Player_setScriptFile in Sahi Pro 8.0.0 allows command execution.
KritikCVSS 9,8Kavram kanıtıEPSS %14sahipro · sahi pro14 Tem 2019
- CVE-2019-1510240Planlayın
An issue was discovered in Tyto Sahi Pro 6.x through 8.0.0.
KritikCVSS 9,8İstismar yokEPSS %3sahipro · sahi pro6 Eyl 2019
- CVE-2019-1306338İzleyin
Within Sahi Pro 8.0.0, an attacker can send a specially crafted URL to include any victim files on the system via the script parameter on th
YüksekCVSS 7,5Kavram kanıtıEPSS %27sahipro · sahi pro23 Eyl 2019
- CVE-2018-2046836İzleyin
An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0.
YüksekCVSS 8,8İstismar yokEPSS %2sahipro · sahi pro17 Haz 2019
- CVE-2019-1306624İzleyin
Sahi Pro 8.0.0 has a script manager arena located at _s_/dyn/pro/DBReports with many different areas that are vulnerable to reflected XSS, b
OrtaCVSS 6,1İstismar yokEPSS %0sahipro · sahi pro29 Eki 2019
- CVE-2018-2047222İzleyin
An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0.
OrtaCVSS 5,4Kavram kanıtıEPSS %2sahipro · sahi pro17 Haz 2019