softaculous kayıtları
softaculous üreticisine ait 16 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %18,8
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')3
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-400 Uncontrolled Resource Consumption1
- CWE-404 Improper Resource Shutdown or Release1
- CWE-665 Improper Initialization1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
16 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2017-6513İstismar yok | The WHMCS Reseller Module V2 2.0.2 in Softaculous Virtualizor before 2.9.1.0 does not verify the user correctly, which allows remote authentsoftaculous · whmcs reseller module · CWE-275 | Kritik9,9 | — | %1,3 | 11 Mar 2017 |
39İzleyin | CVE-2024-24621İstismar yok | Softaculous Webuzo Authentication Bypasssoftaculous · webuzo · CWE-697 | Kritik9,8 | — | %1,1 | 25 Tem 2024 |
36İzleyin | CVE-2024-24623İstismar yok | Softaculous Webuzo FTP Management Command Injectionsoftaculous · webuzo · CWE-78 | Yüksek8,8 | — | %1,8 | 25 Tem 2024 |
36İzleyin | CVE-2024-24622İstismar yok | Softaculous Webuzo Password Reset Command Injectionsoftaculous · webuzo · CWE-78 | Yüksek8,8 | — | %1,8 | 25 Tem 2024 |
33İzleyin | CVE-2024-8669İstismar yok | Backuply – Backup, Restore, Migrate and Clone <= 1.3.4 - Authenticated (Admin+) SQL Injectionsoftaculous · backuply · CWE-89 | Yüksek7,2 | — | %16,6 | 14 Eyl 2024 |
31İzleyin | CVE-2013-6041Kavram kanıtı | index.php in Softaculous Webuzo before 2.1.4 allows remote attackers to execute arbitrary commands via shell metacharacters in a SOFTCookiessoftaculous · webuzo · CWE-78 | Yüksek7,5 | — | %3,5 | 27 Ara 2014 |
31İzleyin | CVE-2020-26886İstismar yok | Softaculous before 5.5.7 is affected by a code execution vulnerability because of External Initialization of Trusted Variables or Data Storesoftaculous · softaculous · CWE-665 | Yüksek7,8 | — | %0,6 | 18 Mar 2021 |
30İzleyin | CVE-2024-0842İstismar yok | Backuply - Backup, Restore, Migrate and Clone <= 1.2.6 - Denial of Servicesoftaculous · backuply · CWE-400 | Yüksek7,5 | — | %0,9 | 9 Şub 2024 |
30İzleyin | CVE-2024-1189İstismar yok | AMPPS Encryption Passphrase denial of servicesoftaculous · ampps · CWE-404 | Yüksek7,5 | — | %0,6 | 2 Şub 2024 |
28İzleyin | CVE-2024-11010İstismar yok | FileOrganizer <= 1.1.4 - Authenticated (Administrator+) Local JavaScript File Inclusionsoftaculous · fileorganizer – wordpress file manager · CWE-22 | Yüksek7,2 | — | %0,8 | 7 Ara 2024 |
21İzleyin | CVE-2013-6043Kavram kanıtı | The login function in Softaculous Webuzo before 2.1.4 provides different error messages for invalid authentication attempts depending on whesoftaculous · webuzo · CWE-200 | Orta5,0 | — | %2,8 | 27 Ara 2014 |
21İzleyin | CVE-2024-43299İstismar yok | WordPress SpeedyCache plugin <= 1.1.8 - Cross Site Request Forgery (CSRF) vulnerabilitysoftaculous · speedycache · CWE-352 | Orta5,4 | — | %0,1 | 26 Ağu 2024 |
19İzleyin | CVE-2024-0697İstismar yok | Backuply – Backup, Restore, Migrate and Clone <= 1.2.3 - Authenticated (Administrator+) Directory Traversalsoftaculous · backuply · CWE-22 | Orta4,9 | — | %0,7 | 27 Oca 2024 |
17İzleyin | CVE-2013-6042Kavram kanıtı | Cross-site scripting (XSS) vulnerability in filemanager/login.php in the File Manager module in Softaculous Webuzo before 2.1.4 allows remotsoftaculous · webuzo · CWE-79 | Orta4,3 | — | %1,6 | 19 Kas 2013 |
17İzleyin | CVE-2023-6598İstismar yok | SpeedyCache <= 1.1.3 - Missing Authorization to Plugin Options Updatesoftaculous · speedycache · CWE-862 | Orta4,3 | — | %0,3 | 11 Oca 2024 |
17İzleyin | CVE-2023-49746İstismar yok | WordPress SpeedyCache Plugin <= 1.1.2 is vulnerable to Server Side Request Forgery (SSRF)softaculous · speedycache · CWE-918 | Orta4,3 | — | %0,3 | 7 Ara 2023 |
- CVE-2017-651339İzleyin
The WHMCS Reseller Module V2 2.0.2 in Softaculous Virtualizor before 2.9.1.0 does not verify the user correctly, which allows remote authent
KritikCVSS 9,9İstismar yokEPSS %1softaculous · whmcs reseller module11 Mar 2017
- CVE-2024-2462139İzleyin
Softaculous Webuzo Authentication Bypass
KritikCVSS 9,8İstismar yokEPSS %1softaculous · webuzo25 Tem 2024
- CVE-2024-2462336İzleyin
Softaculous Webuzo FTP Management Command Injection
YüksekCVSS 8,8İstismar yokEPSS %1softaculous · webuzo25 Tem 2024
- CVE-2024-2462236İzleyin
Softaculous Webuzo Password Reset Command Injection
YüksekCVSS 8,8İstismar yokEPSS %1softaculous · webuzo25 Tem 2024
- CVE-2024-866933İzleyin
Backuply – Backup, Restore, Migrate and Clone <= 1.3.4 - Authenticated (Admin+) SQL Injection
YüksekCVSS 7,2İstismar yokEPSS %16softaculous · backuply14 Eyl 2024
- CVE-2013-604131İzleyin
index.php in Softaculous Webuzo before 2.1.4 allows remote attackers to execute arbitrary commands via shell metacharacters in a SOFTCookies
YüksekCVSS 7,5Kavram kanıtıEPSS %3softaculous · webuzo27 Ara 2014
- CVE-2020-2688631İzleyin
Softaculous before 5.5.7 is affected by a code execution vulnerability because of External Initialization of Trusted Variables or Data Store
YüksekCVSS 7,8İstismar yokEPSS %0softaculous · softaculous18 Mar 2021
- CVE-2024-084230İzleyin
Backuply - Backup, Restore, Migrate and Clone <= 1.2.6 - Denial of Service
YüksekCVSS 7,5İstismar yokEPSS %0softaculous · backuply9 Şub 2024
- CVE-2024-118930İzleyin
AMPPS Encryption Passphrase denial of service
YüksekCVSS 7,5İstismar yokEPSS %0softaculous · ampps2 Şub 2024
- CVE-2024-1101028İzleyin
FileOrganizer <= 1.1.4 - Authenticated (Administrator+) Local JavaScript File Inclusion
YüksekCVSS 7,2İstismar yokEPSS %0softaculous · fileorganizer – wordpress file manager7 Ara 2024
- CVE-2013-604321İzleyin
The login function in Softaculous Webuzo before 2.1.4 provides different error messages for invalid authentication attempts depending on whe
OrtaCVSS 5,0Kavram kanıtıEPSS %2softaculous · webuzo27 Ara 2014
- CVE-2024-4329921İzleyin
WordPress SpeedyCache plugin <= 1.1.8 - Cross Site Request Forgery (CSRF) vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0softaculous · speedycache26 Ağu 2024
- CVE-2024-069719İzleyin
Backuply – Backup, Restore, Migrate and Clone <= 1.2.3 - Authenticated (Administrator+) Directory Traversal
OrtaCVSS 4,9İstismar yokEPSS %0softaculous · backuply27 Oca 2024
- CVE-2013-604217İzleyin
Cross-site scripting (XSS) vulnerability in filemanager/login.php in the File Manager module in Softaculous Webuzo before 2.1.4 allows remot
OrtaCVSS 4,3Kavram kanıtıEPSS %1softaculous · webuzo19 Kas 2013
- CVE-2023-659817İzleyin
SpeedyCache <= 1.1.3 - Missing Authorization to Plugin Options Update
OrtaCVSS 4,3İstismar yokEPSS %0softaculous · speedycache11 Oca 2024
- CVE-2023-4974617İzleyin
WordPress SpeedyCache Plugin <= 1.1.2 is vulnerable to Server Side Request Forgery (SSRF)
OrtaCVSS 4,3İstismar yokEPSS %0softaculous · speedycache7 Ara 2023