sparkdevnetwork kayıtları
sparkdevnetwork üreticisine ait 3 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Saldırı profili
Tüm kayıtlar
3 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2019-18643İstismar yok | Rock RMS versions before 8.10 and versions 9.0 through 9.3 fails to properly validate files uploaded in the application.sparkdevnetwork · rock rms · CWE-434 | Kritik9,8 | — | %4,1 | 7 Oca 2021 |
40Planlayın | CVE-2019-18641İstismar yok | Rock RMS before 1.8.6 mishandles vCard access control within the People/GetVCard/REST controller.sparkdevnetwork · rock rms | Kritik9,8 | — | %3,4 | 20 Mar 2020 |
40Planlayın | CVE-2019-18642İstismar yok | Rock RMS version before 8.6 is vulnerable to account takeover by tampering with the user ID parameter in the profile update feature.sparkdevnetwork · rock rms | Kritik9,8 | — | %1,7 | 7 Oca 2021 |
- CVE-2019-1864340Planlayın
Rock RMS versions before 8.10 and versions 9.0 through 9.3 fails to properly validate files uploaded in the application.
KritikCVSS 9,8İstismar yokEPSS %4sparkdevnetwork · rock rms7 Oca 2021
- CVE-2019-1864140Planlayın
Rock RMS before 1.8.6 mishandles vCard access control within the People/GetVCard/REST controller.
KritikCVSS 9,8İstismar yokEPSS %3sparkdevnetwork · rock rms20 Mar 2020
- CVE-2019-1864240Planlayın
Rock RMS version before 8.6 is vulnerable to account takeover by tampering with the user ID parameter in the profile update feature.
KritikCVSS 9,8İstismar yokEPSS %2sparkdevnetwork · rock rms7 Oca 2021