stimulsoft kayıtları

stimulsoft üreticisine ait 9 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 5
Düzeltme kaydı olan: %33,3
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

9 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
41Planlayın	CVE-2020-15865İstismar yok	A Remote Code Execution vulnerability in Stimulsoft (aka Stimulsoft Reports) 2013.1.1600.0 allows an attacker to encode C# scripts as base-6stimulsoft · reports · CWE-94 pre-auth RCE	Kritik9,8	—	%5,1	18 Ağu 2020
40Planlayın	CVE-2024-24398Kavram kanıtı	Directory Traversal vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.2 allows a remote attacker to execute arbitrarystimulsoft · dashboards.php · CWE-22 pre-auth RCE Yol geçişi	Kritik9,8	—	%2,0	5 Şub 2024
40Planlayın	CVE-2023-25261Kavram kanıtı	Certain Stimulsoft GmbH products are affected by: Remote Code Execution.stimulsoft · designer · CWE-94 pre-auth RCE	Kritik9,8	—	%1,9	27 Mar 2023
39İzleyin	CVE-2021-42777İstismar yok	Stimulsoft (aka Stimulsoft Reports) 2013.1.1600.0, when Compilation Mode is used, allows an attacker to execute arbitrary C# code on any macstimulsoft · reports · CWE-209 pre-auth RCE Bilgi sızıntısı	Kritik9,8	—	%1,0	29 Eki 2022
30İzleyin	CVE-2023-25262Kavram kanıtı	Stimulsoft GmbH Stimulsoft Designer (Web) 2023.1.3 is vulnerable to Server Side Request Forgery (SSRF).stimulsoft · designer · CWE-918 Kimlik doğrulamasız SSRF	Yüksek7,5	—	%0,9	27 Mar 2023
30İzleyin	CVE-2023-25260Kavram kanıtı	Stimulsoft Designer (Web) 2023.1.3 is vulnerable to Local File Inclusion.stimulsoft · designer · CWE-552 Kimlik doğrulamasız	Yüksek7,5	—	%0,8	28 Mar 2023
24İzleyin	CVE-2024-24396Kavram kanıtı	Cross Site Scripting vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.2 allows a remote attacker to execute arbitrarstimulsoft · dashboard.js · CWE-79 pre-auth RCE XSS	Orta6,1	—	%0,8	5 Şub 2024
22İzleyin	CVE-2023-25263Kavram kanıtı	In Stimulsoft Designer (Desktop) 2023.1.5, and 2023.1.4, once an attacker decompiles the Stimulsoft.report.dll the attacker is able to decrystimulsoft · designer · CWE-312	Orta5,5	—	%0,2	27 Mar 2023
21İzleyin	CVE-2024-24397Kavram kanıtı	Cross Site Scripting vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.2 allows a remote attacker to execute arbitrarstimulsoft · dashboards.js · CWE-79 RCE XSS	Orta5,4	—	%0,8	5 Şub 2024

CVE-2020-15865
41Planlayın
A Remote Code Execution vulnerability in Stimulsoft (aka Stimulsoft Reports) 2013.1.1600.0 allows an attacker to encode C# scripts as base-6
KritikCVSS 9,8İstismar yokEPSS %5
- pre-auth RCE
stimulsoft · reports18 Ağu 2020
CVE-2024-24398
40Planlayın
Directory Traversal vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.2 allows a remote attacker to execute arbitrary
KritikCVSS 9,8Kavram kanıtıEPSS %2
- pre-auth RCE
- Yol geçişi
stimulsoft · dashboards.php5 Şub 2024
CVE-2023-25261
40Planlayın
Certain Stimulsoft GmbH products are affected by: Remote Code Execution.
KritikCVSS 9,8Kavram kanıtıEPSS %2
- pre-auth RCE
stimulsoft · designer27 Mar 2023
CVE-2021-42777
39İzleyin
Stimulsoft (aka Stimulsoft Reports) 2013.1.1600.0, when Compilation Mode is used, allows an attacker to execute arbitrary C# code on any mac
KritikCVSS 9,8İstismar yokEPSS %1
- pre-auth RCE
- Bilgi sızıntısı
stimulsoft · reports29 Eki 2022
CVE-2023-25262
30İzleyin
Stimulsoft GmbH Stimulsoft Designer (Web) 2023.1.3 is vulnerable to Server Side Request Forgery (SSRF).
YüksekCVSS 7,5Kavram kanıtıEPSS %1
- Kimlik doğrulamasız
- SSRF
stimulsoft · designer27 Mar 2023
CVE-2023-25260
30İzleyin
Stimulsoft Designer (Web) 2023.1.3 is vulnerable to Local File Inclusion.
YüksekCVSS 7,5Kavram kanıtıEPSS %1
- Kimlik doğrulamasız
stimulsoft · designer28 Mar 2023
CVE-2024-24396
24İzleyin
Cross Site Scripting vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.2 allows a remote attacker to execute arbitrar
OrtaCVSS 6,1Kavram kanıtıEPSS %1
- pre-auth RCE
- XSS
stimulsoft · dashboard.js5 Şub 2024
CVE-2023-25263
22İzleyin
In Stimulsoft Designer (Desktop) 2023.1.5, and 2023.1.4, once an attacker decompiles the Stimulsoft.report.dll the attacker is able to decry
OrtaCVSS 5,5Kavram kanıtıEPSS %0
stimulsoft · designer27 Mar 2023
CVE-2024-24397
21İzleyin
Cross Site Scripting vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.2 allows a remote attacker to execute arbitrar
OrtaCVSS 5,4Kavram kanıtıEPSS %1
- RCE
- XSS
stimulsoft · dashboards.js5 Şub 2024