supremainc kayıtları
supremainc üreticisine ait 8 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-269 Improper Privilege Management1
- CWE-281 Improper Preservation of Permissions1
- CWE-287 Improper Authentication1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
8 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
45Planlayın | CVE-2020-15050Kavram kanıtı | An issue was discovered in the Video Extension in Suprema BioStar 2 before 2.8.2.supremainc · biostar 2 · CWE-22 | Yüksek7,5 | — | %50,7 | 13 Tem 2020 |
35İzleyin | CVE-2023-33364İstismar yok | An OS Command injection vulnerability exists in Suprema BioStar 2 before V2.9.1, which allows authenticated users to execute arbitrary OS cosupremainc · biostar 2 · CWE-78 | Yüksek8,8 | — | %1,6 | 3 Ağu 2023 |
35İzleyin | CVE-2022-38351İstismar yok | A vulnerability in Suprema BioStar (aka Bio Star) 2 v2.8.16 allows attackers to escalate privileges to System Administrator via a crafted PUsupremainc · biostar 2 · CWE-269 | Yüksek8,8 | — | %1,1 | 19 Eyl 2022 |
35İzleyin | CVE-2023-31923İstismar yok | Suprema BioStar 2 before 2022 Q4, v2.9.1 has Insecure Permissions.supremainc · biostar 2 · CWE-281 | Yüksek8,8 | — | %0,9 | 22 May 2023 |
35İzleyin | CVE-2023-33366İstismar yok | A SQL injection vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows authenticated users to inject arbitrary SQL directives supremainc · biostar 2 · CWE-89 | Yüksek8,8 | — | %0,6 | 3 Ağu 2023 |
30İzleyin | CVE-2023-33365İstismar yok | A path traversal vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows unauthenticated attackers to fetch arbitrary files frosupremainc · biostar 2 · CWE-22 | Yüksek7,5 | — | %0,7 | 3 Ağu 2023 |
30İzleyin | CVE-2023-33363İstismar yok | An authentication bypass vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows unauthenticated users to access some functionasupremainc · biostar 2 · CWE-287 | Yüksek7,5 | — | %0,6 | 3 Ağu 2023 |
28İzleyin | CVE-2023-27167Kavram kanıtı | Suprema BioStar 2 v2.8.16 was discovered to contain a SQL injection vulnerability via the values parameter at /users/absence?search_month=1.supremainc · biostar 2 · CWE-89 | Orta6,5 | — | %7,6 | 29 Mar 2023 |
- CVE-2020-1505045Planlayın
An issue was discovered in the Video Extension in Suprema BioStar 2 before 2.8.2.
YüksekCVSS 7,5Kavram kanıtıEPSS %51supremainc · biostar 213 Tem 2020
- CVE-2023-3336435İzleyin
An OS Command injection vulnerability exists in Suprema BioStar 2 before V2.9.1, which allows authenticated users to execute arbitrary OS co
YüksekCVSS 8,8İstismar yokEPSS %2supremainc · biostar 23 Ağu 2023
- CVE-2022-3835135İzleyin
A vulnerability in Suprema BioStar (aka Bio Star) 2 v2.8.16 allows attackers to escalate privileges to System Administrator via a crafted PU
YüksekCVSS 8,8İstismar yokEPSS %1supremainc · biostar 219 Eyl 2022
- CVE-2023-3192335İzleyin
Suprema BioStar 2 before 2022 Q4, v2.9.1 has Insecure Permissions.
YüksekCVSS 8,8İstismar yokEPSS %1supremainc · biostar 222 May 2023
- CVE-2023-3336635İzleyin
A SQL injection vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows authenticated users to inject arbitrary SQL directives
YüksekCVSS 8,8İstismar yokEPSS %1supremainc · biostar 23 Ağu 2023
- CVE-2023-3336530İzleyin
A path traversal vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows unauthenticated attackers to fetch arbitrary files fro
YüksekCVSS 7,5İstismar yokEPSS %1supremainc · biostar 23 Ağu 2023
- CVE-2023-3336330İzleyin
An authentication bypass vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows unauthenticated users to access some functiona
YüksekCVSS 7,5İstismar yokEPSS %1supremainc · biostar 23 Ağu 2023
- CVE-2023-2716728İzleyin
Suprema BioStar 2 v2.8.16 was discovered to contain a SQL injection vulnerability via the values parameter at /users/absence?search_month=1.
OrtaCVSS 6,5Kavram kanıtıEPSS %8supremainc · biostar 229 Mar 2023