İçeriğe atla
Noroxi

sixapart kayıtları

sixapart üreticisine ait 50 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
2 · %4
Pre-auth RCE
9
Düzeltme kaydı olan
%22
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

50 kayıt
  • CVE-2021-20837
    65Bu hafta

    Movable Type 7 r.5002 and earlier (Movable Type 7 Series), Movable Type 6.8.2 and earlier (Movable Type 6 Series), Movable Type Advanced 7 r

    KritikCVSS 9,8Kavram kanıtıEPSS %88

    sixapart · movable type26 Eki 2021

  • CVE-2015-1592
    53Planlayın

    Movable Type Pro, Open Source, and Advanced before 5.2.12 and Pro and Advanced 6.0.x before 6.0.7 does not properly use the Perl Storable::t

    YüksekCVSS 7,5SilahlaştırılmışEPSS %75

    debian · debian linux19 Şub 2015

  • CVE-2013-0209
    44Planlayın

    lib/MT/Upgrade.pm in mt-upgrade.cgi in Movable Type 4.2x and 4.3x through 4.38 does not require authentication for requests to database-migr

    YüksekCVSS 7,5SilahlaştırılmışEPSS %45

    sixapart · movable type22 Oca 2013

  • CVE-2022-38078
    40Planlayın

    Movable Type XMLRPC API provided by Six Apart Ltd.

    KritikCVSS 9,8İstismar yokEPSS %2

    sixapart · movable type24 Ağu 2022

  • CVE-2010-4511
    40Planlayın

    Unspecified vulnerability in Movable Type 4.x before 4.35 and 5.x before 5.04 has unknown impact and attack vectors related to the "dynamic

    KritikCVSS 10,0İstismar yokEPSS %2

    sixapart · movabletype9 Ara 2010

  • CVE-2010-4509
    40Planlayın

    Multiple unspecified vulnerabilities in Movable Type 4.x before 4.35 and 5.x before 5.04 have unknown impact and attack vectors related to t

    KritikCVSS 10,0İstismar yokEPSS %2

    sixapart · movabletype9 Ara 2010

  • CVE-2009-0752
    40Planlayın

    Unspecified vulnerability in Movable Type Pro and Community Solution 4.x before 4.24 has unknown impact and attack vectors, possibly related

    KritikCVSS 10,0İstismar yokEPSS %1

    sixapart · movable type2 Mar 2009

  • CVE-2016-5742
    39İzleyin

    SQL injection vulnerability in the XML-RPC interface in Movable Type Pro and Advanced 6.x before 6.1.3 and 6.2.x before 6.2.6 and Movable Ty

    KritikCVSS 9,8İstismar yokEPSS %2

    sixapart · movable type23 Oca 2017

  • CVE-2026-25776
    37İzleyin

    Movable Type provided by Six Apart Ltd.

    KritikCVSS 9,3İstismar yokEPSS %1

    sixapart · movable type8 Nis 2026

  • CVE-2020-5577
    36İzleyin

    Movable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Movable Type 7), Movable Type Advanced 7 r.4606 (7.2.1) and earlier (Movable

    YüksekCVSS 8,8İstismar yokEPSS %2

    sixapart · movable type13 May 2020

  • CVE-2020-5576
    35İzleyin

    Cross-site request forgery (CSRF) vulnerability in Movable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Movable Type 7), Movable

    YüksekCVSS 8,8İstismar yokEPSS %1

    sixapart · movable type13 May 2020

  • CVE-2015-0845
    31İzleyin

    Format string vulnerability in Movable Type Pro, Open Source, and Advanced before 5.2.13 and Pro and Advanced 6.0.x before 6.0.8 allows remo

    YüksekCVSS 7,5İstismar yokEPSS %4

    sixapart · movabletype17 Nis 2015

  • CVE-2013-2184
    31İzleyin

    Movable Type before 5.2.6 does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via the

    YüksekCVSS 7,5İstismar yokEPSS %4

    sixapart · movable type27 Mar 2015

  • CVE-2012-0320
    31İzleyin

    Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allows remote attackers to take control of sessions via unspecified vectors

    YüksekCVSS 7,5İstismar yokEPSS %3

    sixapart · movable type3 Mar 2012

  • CVE-2011-5085
    31İzleyin

    Unspecified vulnerability in Movable Type 4.x before 4.36 and 5.x before 5.05 allows remote attackers to read or modify data via unknown vec

    YüksekCVSS 7,5İstismar yokEPSS %2

    sixapart · movable type2 Nis 2012

  • CVE-2014-9057
    31İzleyin

    SQL injection vulnerability in the XML-RPC interface in Movable Type before 5.18, 5.2.x before 5.2.11, and 6.x before 6.0.6 allows remote at

    YüksekCVSS 7,5İstismar yokEPSS %2

    debian · debian linux16 Ara 2014

  • CVE-2010-3922
    30İzleyin

    SQL injection vulnerability in Movable Type 4.x before 4.35 and 5.x before 5.04 allows remote attackers to execute arbitrary SQL commands vi

    YüksekCVSS 7,5İstismar yokEPSS %1

    sixapart · movabletype9 Ara 2010

  • CVE-2022-43660
    28İzleyin

    Improper neutralization of Server-Side Includes (SSW) within a web page in Movable Type series allows a remote authenticated attacker with P

    YüksekCVSS 7,2İstismar yokEPSS %1

    sixapart · movable type7 Ara 2022

  • CVE-2012-0317
    27İzleyin

    Multiple cross-site request forgery (CSRF) vulnerabilities in Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allow remote

    OrtaCVSS 6,8İstismar yokEPSS %1

    sixapart · movable type3 Mar 2012

  • CVE-2026-33088
    27İzleyin

    Movable Type provided by Six Apart Ltd.

    OrtaCVSS 6,9İstismar yokEPSS %0

    sixapart · movable type8 Nis 2026

  • CVE-2022-45113
    26İzleyin

    Improper validation of syntactic correctness of input vulnerability exist in Movable Type series.

    OrtaCVSS 6,5İstismar yokEPSS %1

    sixapart · movable type7 Ara 2022

  • CVE-2020-5575
    24İzleyin

    Cross-site scripting vulnerability in Movable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Movable Type 7), Movable Type Advanced

    OrtaCVSS 6,1İstismar yokEPSS %1

    sixapart · movable type13 May 2020

  • CVE-2021-20810
    24İzleyin

    Cross-site scripting vulnerability in Website Management screen of Movable Type (Movable Type 7 r.4903 and earlier (Movable Type 7 Series),

    OrtaCVSS 6,1İstismar yokEPSS %1

    sixapart · movable type25 Ağu 2021

  • CVE-2021-20814
    24İzleyin

    Cross-site scripting vulnerability in Setting screen of ContentType Information Widget Plugin of Movable Type (Movable Type 7 r.4903 and ear

    OrtaCVSS 6,1İstismar yokEPSS %1

    sixapart · movable type25 Ağu 2021

  • CVE-2021-20812
    24İzleyin

    Cross-site scripting vulnerability in Setting screen of Server Sync of Movable Type (Movable Type Advanced 7 r.4903 and earlier (Movable Typ

    OrtaCVSS 6,1İstismar yokEPSS %1

    sixapart · movable type25 Ağu 2021