tdiary kayıtları
tdiary üreticisine ait 4 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-20 Improper Input Validation1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
4 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
24İzleyin | CVE-2006-6852İstismar yok | Eval injection vulnerability in tDiary 2.0.3 and 2.1.4.200 61127 allows remote authenticated users to execute arbitrary Ruby code via unspectdiary · tdiary · CWE-20 | Orta6,0 | — | %1,0 | 31 Ara 2006 |
21İzleyin | CVE-2005-2411İstismar yok | Cross-Site Request Forgery (CSRF) vulnerability in tDiary 2.1.1, and tDiary 2.0.1 and earlier, allows remote attackers to conduct actions astdiary · tdiary | Orta5,1 | — | %1,9 | 1 Ağu 2005 |
18İzleyin | CVE-2010-0726İstismar yok | Cross-site scripting (XSS) vulnerability in the tb-send.rb (TrackBack transmission) plugin in tDiary 2.2.2 and earlier allows remote attacketdiary · tdiary · CWE-79 | Orta4,3 | — | %2,0 | 2 Mar 2010 |
17İzleyin | CVE-2006-6174İstismar yok | Cross-site scripting (XSS) vulnerability in tDiary before 2.0.3 and 2.1.x before 2.1.4.20061126 allows remote attackers to inject arbitrary tdiary · tdiary | Orta4,3 | — | %1,6 | 30 Kas 2006 |
- CVE-2006-685224İzleyin
Eval injection vulnerability in tDiary 2.0.3 and 2.1.4.200 61127 allows remote authenticated users to execute arbitrary Ruby code via unspec
OrtaCVSS 6,0İstismar yokEPSS %1tdiary · tdiary31 Ara 2006
- CVE-2005-241121İzleyin
Cross-Site Request Forgery (CSRF) vulnerability in tDiary 2.1.1, and tDiary 2.0.1 and earlier, allows remote attackers to conduct actions as
OrtaCVSS 5,1İstismar yokEPSS %2tdiary · tdiary1 Ağu 2005
- CVE-2010-072618İzleyin
Cross-site scripting (XSS) vulnerability in the tb-send.rb (TrackBack transmission) plugin in tDiary 2.2.2 and earlier allows remote attacke
OrtaCVSS 4,3İstismar yokEPSS %2tdiary · tdiary2 Mar 2010
- CVE-2006-617417İzleyin
Cross-site scripting (XSS) vulnerability in tDiary before 2.0.3 and 2.1.x before 2.1.4.20061126 allows remote attackers to inject arbitrary
OrtaCVSS 4,3İstismar yokEPSS %2tdiary · tdiary30 Kas 2006