İçeriğe atla
Noroxi

ss-proj kayıtları

ss-proj üreticisine ait 12 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
0
Düzeltme kaydı olan
%8,3
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 19
  2. 20
  3. 22
  4. 23
  5. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

12 kayıt
  • CVE-2023-39448
    35İzleyin

    Path traversal vulnerability in SHIRASAGI prior to v1.18.0 allows a remote authenticated attacker to alter or create arbitrary files on the

    YüksekCVSS 8,8İstismar yokEPSS %1

    ss-proj · shirasagi5 Eyl 2023

  • CVE-2024-46898
    30İzleyin

    SHIRASAGI prior to v1.19.1 processes URLs in HTTP requests improperly, resulting in a path traversal vulnerability.

    YüksekCVSS 7,5İstismar yokEPSS %1

    ss-proj · shirasagi15 Eki 2024

  • CVE-2019-6009
    25İzleyin

    Open redirect vulnerability in SHIRASAGI v1.7.0 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phi

    OrtaCVSS 6,1İstismar yokEPSS %1

    ss-proj · shirasagi12 Eyl 2019

  • CVE-2020-5607
    24İzleyin

    Open redirect vulnerability in SHIRASAGI v1.13.1 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct ph

    OrtaCVSS 6,1İstismar yokEPSS %1

    ss-proj · shirasagi9 Tem 2020

  • CVE-2022-29485
    24İzleyin

    Cross-site scripting vulnerability in SHIRASAGI v1.0.0 to v1.14.2, and v1.15.0 allows a remote attacker to inject an arbitrary script via un

    OrtaCVSS 6,1İstismar yokEPSS %1

    ss-proj · shirasagi14 Haz 2022

  • CVE-2022-43479
    24İzleyin

    Open redirect vulnerability in SHIRASAGI v1.14.4 to v1.15.0 allows a remote unauthenticated attacker to redirect users to an arbitrary web s

    OrtaCVSS 6,1İstismar yokEPSS %0

    ss-proj · shirasagi5 Ara 2022

  • CVE-2023-36492
    24İzleyin

    Reflected cross-site scripting vulnerability in SHIRASAGI prior to v1.18.0 allows a remote unauthenticated attacker to execute an arbitrary

    OrtaCVSS 6,1İstismar yokEPSS %0

    ss-proj · shirasagi5 Eyl 2023

  • CVE-2022-43499
    21İzleyin

    Stored cross-site scripting vulnerability in SHIRASAGI versions prior to v1.16.2 allows a remote authenticated attacker with an administrati

    OrtaCVSS 5,4İstismar yokEPSS %0

    ss-proj · shirasagi5 Ara 2022

  • CVE-2023-22425
    21İzleyin

    Stored cross-site scripting vulnerability in Schedule function of SHIRASAGI v1.16.2 and earlier versions allows a remote authenticated attac

    OrtaCVSS 5,4İstismar yokEPSS %0

    ss-proj · shirasagi24 Şub 2023

  • CVE-2023-41889
    21İzleyin

    Late-Unicode normalization vulnerability in SHIRASAGI

    OrtaCVSS 5,3İstismar yokEPSS %0

    ss-proj · shirasagi15 Eyl 2023

  • CVE-2023-38569
    21İzleyin

    Stored cross-site scripting vulnerability in SHIRASAGI prior to v1.18.0 allows a remote authenticated attacker to execute an arbitrary scrip

    OrtaCVSS 5,4İstismar yokEPSS %0

    ss-proj · shirasagi5 Eyl 2023

  • CVE-2023-22427
    19İzleyin

    Stored cross-site scripting vulnerability in Theme switching function of SHIRASAGI v1.16.2 and earlier versions allows a remote attacker wit

    OrtaCVSS 4,8İstismar yokEPSS %0

    ss-proj · shirasagi24 Şub 2023