thruk kayıtları
thruk üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %16,7
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
54Planlayın | CVE-2023-34096Kavram kanıtı | Thruk has Path Traversal Vulnerability in panorama.pmthruk · thruk · CWE-22 | Yüksek8,8 | — | %62,7 | 8 Haz 2023 |
39İzleyin | CVE-2024-23822İstismar yok | Thruk Incorrect limitation of a pathname to a restricted directory (Path Traversal) (CWE-22)thruk · thruk · CWE-22 | Kritik9,8 | — | %1,4 | 29 Oca 2024 |
39İzleyin | CVE-2024-39915İstismar yok | Authenticated remote code execution in Thruksni · thruk · CWE-94 | Kritik9,9 | — | %0,6 | 15 Tem 2024 |
25İzleyin | CVE-2021-35488Kavram kanıtı | Thruk 2.40-2 allows /thruk/#cgi-bin/status.cgi?style=combined&title={TITLE] Reflected XSS via the host or title parameter.thruk · thruk · CWE-79 | Orta6,1 | — | %2,8 | 9 Kas 2021 |
24İzleyin | CVE-2021-35489İstismar yok | Thruk 2.40-2 allows /thruk/#cgi-bin/extinfo.cgi?type=2&host={HOSTNAME]&service={SERVICENAME]&backend={BACKEND] Reflected XSS via the host orthruk · thruk · CWE-79 | Orta6,1 | — | %0,9 | 9 Kas 2021 |
21İzleyin | CVE-2021-35490İstismar yok | Thruk before 2.44 allows XSS for a quick command.thruk · thruk · CWE-79 | Orta5,4 | — | %0,5 | 15 Ara 2021 |
- CVE-2023-3409654Planlayın
Thruk has Path Traversal Vulnerability in panorama.pm
YüksekCVSS 8,8Kavram kanıtıEPSS %63thruk · thruk8 Haz 2023
- CVE-2024-2382239İzleyin
Thruk Incorrect limitation of a pathname to a restricted directory (Path Traversal) (CWE-22)
KritikCVSS 9,8İstismar yokEPSS %1thruk · thruk29 Oca 2024
- CVE-2024-3991539İzleyin
Authenticated remote code execution in Thruk
KritikCVSS 9,9İstismar yokEPSS %1sni · thruk15 Tem 2024
- CVE-2021-3548825İzleyin
Thruk 2.40-2 allows /thruk/#cgi-bin/status.cgi?style=combined&title={TITLE] Reflected XSS via the host or title parameter.
OrtaCVSS 6,1Kavram kanıtıEPSS %3thruk · thruk9 Kas 2021
- CVE-2021-3548924İzleyin
Thruk 2.40-2 allows /thruk/#cgi-bin/extinfo.cgi?type=2&host={HOSTNAME]&service={SERVICENAME]&backend={BACKEND] Reflected XSS via the host or
OrtaCVSS 6,1İstismar yokEPSS %1thruk · thruk9 Kas 2021
- CVE-2021-3549021İzleyin
Thruk before 2.44 allows XSS for a quick command.
OrtaCVSS 5,4İstismar yokEPSS %0thruk · thruk15 Ara 2021