secureideas kayıtları
secureideas üreticisine ait 13 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 6
- Düzeltme kaydı olan
- %7,7
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')4
- CWE-20 Improper Input Validation1
- CWE-287 Improper Authentication1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
13 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
32İzleyin | CVE-2012-1198Kavram kanıtı | base_ag_main.php in Basic Analysis and Security Engine (BASE) 1.4.5 allows remote attackers to execute arbitrary code by uploading contents secureideas · basic analysis and security engine · CWE-20 | Yüksek7,5 | — | %5,3 | 17 Şub 2012 |
31İzleyin | CVE-2012-1199Kavram kanıtı | Multiple PHP remote file inclusion vulnerabilities in Basic Analysis and Security Engine (BASE) 1.4.5 allow remote attackers to execute arbisecureideas · basic analysis and security engine · CWE-94 | Yüksek7,5 | — | %3,4 | 17 Şub 2012 |
31İzleyin | CVE-2005-3325Kavram kanıtı | Multiple SQL injection vulnerabilities in (1) acid_qry_main.php in Analysis Console for Intrusion Databases (ACID) 0.9.6b20 and (2) base_qryacid · analysis console for intrusion databases · CWE-89 | Yüksek7,5 | — | %2,6 | 27 Eki 2005 |
31İzleyin | CVE-2007-5578İstismar yok | Basic Analysis and Security Engine (BASE) before 1.3.8 sends a redirect to the web browser but does not exit, which allows remote attackers secureideas · basic analysis and security engine · CWE-287 | Yüksek7,5 | — | %1,8 | 18 Eki 2007 |
30İzleyin | CVE-2009-4592İstismar yok | Unspecified vulnerability in base_local_rules.php in Basic Analysis and Security Engine (BASE) before 1.4.4 allows remote attackers to inclusecureideas · base | Yüksek7,5 | — | %1,4 | 7 Oca 2010 |
30İzleyin | CVE-2012-1017Kavram kanıtı | Multiple SQL injection vulnerabilities in base_qry_main.php in Basic Analysis and Security Engine (BASE) 1.4.5 allow remote attackers to exesecureideas · base · CWE-89 | Yüksek7,5 | — | %1,3 | 7 Şub 2012 |
30İzleyin | CVE-2009-4591İstismar yok | SQL injection vulnerability in Basic Analysis and Security Engine (BASE) before 1.4.4 allows remote attackers to execute arbitrary SQL commasecureideas · base · CWE-89 | Yüksek7,5 | — | %1,1 | 7 Oca 2010 |
30İzleyin | CVE-2009-4838İstismar yok | SQL injection vulnerability in base_ag_common.php in Basic Analysis and Security Engine (BASE) before 1.4.3.1 allows remote attackers to exesecureideas · basic analysis and security engine · CWE-89 | Yüksek7,5 | — | %1,1 | 6 May 2010 |
17İzleyin | CVE-2007-6156İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in base_qry_main.php in Base Analysis and Security Engine (BASE) before 1.3.9 allow remosecureideas · basic analysis and security engine · CWE-79 | Orta4,3 | — | %1,3 | 28 Kas 2007 |
17İzleyin | CVE-2009-4837İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in Basic Analysis and Security Engine (BASE) before 1.4.3.1 allow remote attackers to insecureideas · basic analysis and security engine · CWE-79 | Orta4,3 | — | %1,1 | 6 May 2010 |
17İzleyin | CVE-2009-4590İstismar yok | Cross-site scripting (XSS) vulnerability in base_local_rules.php in Basic Analysis and Security Engine (BASE) before 1.4.4 allows remote attsecureideas · base · CWE-79 | Orta4,3 | — | %1,1 | 7 Oca 2010 |
17İzleyin | CVE-2005-4878İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in (1) acid_qry_main.php in Analysis Console for Intrusion Databases (ACID) 0.9.6b20 andacid · analysis console for intrusion databases · CWE-79 | Orta4,3 | — | %1,1 | 18 Şub 2009 |
17İzleyin | CVE-2009-4839İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in Basic Analysis and Security Engine (BASE), possibly 1.4.4 and earlier, allow remote asecureideas · basic analysis and security engine · CWE-79 | Orta4,3 | — | %1,1 | 6 May 2010 |
- CVE-2012-119832İzleyin
base_ag_main.php in Basic Analysis and Security Engine (BASE) 1.4.5 allows remote attackers to execute arbitrary code by uploading contents
YüksekCVSS 7,5Kavram kanıtıEPSS %5secureideas · basic analysis and security engine17 Şub 2012
- CVE-2012-119931İzleyin
Multiple PHP remote file inclusion vulnerabilities in Basic Analysis and Security Engine (BASE) 1.4.5 allow remote attackers to execute arbi
YüksekCVSS 7,5Kavram kanıtıEPSS %3secureideas · basic analysis and security engine17 Şub 2012
- CVE-2005-332531İzleyin
Multiple SQL injection vulnerabilities in (1) acid_qry_main.php in Analysis Console for Intrusion Databases (ACID) 0.9.6b20 and (2) base_qry
YüksekCVSS 7,5Kavram kanıtıEPSS %3acid · analysis console for intrusion databases27 Eki 2005
- CVE-2007-557831İzleyin
Basic Analysis and Security Engine (BASE) before 1.3.8 sends a redirect to the web browser but does not exit, which allows remote attackers
YüksekCVSS 7,5İstismar yokEPSS %2secureideas · basic analysis and security engine18 Eki 2007
- CVE-2009-459230İzleyin
Unspecified vulnerability in base_local_rules.php in Basic Analysis and Security Engine (BASE) before 1.4.4 allows remote attackers to inclu
YüksekCVSS 7,5İstismar yokEPSS %1secureideas · base7 Oca 2010
- CVE-2012-101730İzleyin
Multiple SQL injection vulnerabilities in base_qry_main.php in Basic Analysis and Security Engine (BASE) 1.4.5 allow remote attackers to exe
YüksekCVSS 7,5Kavram kanıtıEPSS %1secureideas · base7 Şub 2012
- CVE-2009-459130İzleyin
SQL injection vulnerability in Basic Analysis and Security Engine (BASE) before 1.4.4 allows remote attackers to execute arbitrary SQL comma
YüksekCVSS 7,5İstismar yokEPSS %1secureideas · base7 Oca 2010
- CVE-2009-483830İzleyin
SQL injection vulnerability in base_ag_common.php in Basic Analysis and Security Engine (BASE) before 1.4.3.1 allows remote attackers to exe
YüksekCVSS 7,5İstismar yokEPSS %1secureideas · basic analysis and security engine6 May 2010
- CVE-2007-615617İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in base_qry_main.php in Base Analysis and Security Engine (BASE) before 1.3.9 allow remo
OrtaCVSS 4,3İstismar yokEPSS %1secureideas · basic analysis and security engine28 Kas 2007
- CVE-2009-483717İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in Basic Analysis and Security Engine (BASE) before 1.4.3.1 allow remote attackers to in
OrtaCVSS 4,3İstismar yokEPSS %1secureideas · basic analysis and security engine6 May 2010
- CVE-2009-459017İzleyin
Cross-site scripting (XSS) vulnerability in base_local_rules.php in Basic Analysis and Security Engine (BASE) before 1.4.4 allows remote att
OrtaCVSS 4,3İstismar yokEPSS %1secureideas · base7 Oca 2010
- CVE-2005-487817İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in (1) acid_qry_main.php in Analysis Console for Intrusion Databases (ACID) 0.9.6b20 and
OrtaCVSS 4,3İstismar yokEPSS %1acid · analysis console for intrusion databases18 Şub 2009
- CVE-2009-483917İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in Basic Analysis and Security Engine (BASE), possibly 1.4.4 and earlier, allow remote a
OrtaCVSS 4,3İstismar yokEPSS %1secureideas · basic analysis and security engine6 May 2010