TOBESOFT kayıtları

tobesoft üreticisine ait 18 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 10
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

18 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
40Planlayın	CVE-2020-7825İstismar yok	A vulnerability exists that could allow the execution of operating system commands on systems running MiPlatform 2019.05.16 and earlier.tobesoft · miplatform · CWE-78 pre-auth RCE Komut enjeksiyonu	Kritik9,8	—	%2,1	17 Tem 2020
40Planlayın	CVE-2021-26607İstismar yok	TOBESOFT NEXACRO17 arbitrary command execution vulnerabilitytobesoft · nexacro · CWE-20 pre-auth RCE	Kritik9,8	—	%1,9	26 Eki 2021
39İzleyin	CVE-2021-26612İstismar yok	tobesoft Nexacro platform arbitrary file creation vulnerabilitytobesoft · nexacro · CWE-20 pre-auth RCE	Kritik9,8	—	%1,2	30 Kas 2021
39İzleyin	CVE-2020-7815İstismar yok	XPLATFORM v9.2.260 and eariler versions contain a vulnerability that could allow remote files to be downloaded by setting the arguments to ttobesoft · xplatform Kimlik doğrulamasız	Kritik9,8	—	%1,2	10 Tem 2020
39İzleyin	CVE-2020-7857İstismar yok	A vulnerability of XPlatform could allow an unauthenticated attacker to execute arbitrary command.tobesoft · xplatform · CWE-470 pre-auth RCE	Kritik9,8	—	%1,0	20 Nis 2021
39İzleyin	CVE-2020-7866İstismar yok	Tobesoft XPLATFORM Arbitrary Command Execution Vulnerabilitytobesoft · xplatform · CWE-20 pre-auth RCE	Kritik9,8	—	%1,0	20 Tem 2021
39İzleyin	CVE-2020-7853İstismar yok	TOBESOFT XPLATFORM Out-of-Bounds Read/Write Vulnerabilitiestobesoft · xplatform · CWE-125 pre-auth RCE Bellek hatası	Kritik9,8	—	%0,8	24 Mar 2021
39İzleyin	CVE-2020-7806İstismar yok	Tobesoft Xplatform ActiveX File Download Vulnerabilitytobesoft · xplatform · CWE-494 pre-auth RCE	Kritik9,8	—	%0,7	6 May 2020
39İzleyin	CVE-2019-19167İstismar yok	Tobesoft Nexacro14 ActiveX File Download Vulnerabilitytobesoft · nexacro · CWE-494 pre-auth RCE	Kritik9,8	—	%0,7	6 May 2020
35İzleyin	CVE-2020-7841İstismar yok	TOBESOFT XPLATFORM arbitrary hta file execution vulnerabilitytobesoft · xplatform · CWE-20 Kimlik doğrulamasız	Yüksek8,8	—	%1,6	17 Kas 2020
35İzleyin	CVE-2021-26629İstismar yok	tobesoft XPLATFORM Path Traversal Vulnerabilitytobesoft · xplatform · CWE-22 Kimlik doğrulamasız Yol geçişi	Yüksek8,8	—	%1,6	26 Nis 2022
35İzleyin	CVE-2021-26626İstismar yok	tobesoft XPLATFORM Arbitrary file execution Vulnerabilitytobesoft · xplatform · CWE-20 pre-auth RCE	Yüksek8,8	—	%1,3	19 Nis 2022
35İzleyin	CVE-2021-26625İstismar yok	tobesoft Nexacro arbitrary file download vulnerabilitytobesoft · nexacro · CWE-345 pre-auth RCE	Yüksek8,8	—	%0,6	19 Nis 2022
35İzleyin	CVE-2020-7874İstismar yok	NEXACRO14 Runtime arbitrary file download and execution vulnerabilitytobesoft · nexacro · CWE-494 Kimlik doğrulamasız	Yüksek8,8	—	%0,6	9 Eyl 2021
31İzleyin	CVE-2019-19162İstismar yok	A use-after-free vulnerability in the TOBESOFT XPLATFORM versions 9.1 to 9.2.2 may lead to code execution on a system running it.tobesoft · xplatform · CWE-416 Bellek hatası	Yüksek7,8	—	%1,2	11 May 2020
31İzleyin	CVE-2018-5197İstismar yok	A vulnerability in the ExtCommon.dll user extension module version 9.2, 9.2.1, 9.2.2 of Xplatform ActiveX could allow attacker to perform a tobesoft · xplatform · CWE-20 RCE Komut enjeksiyonu	Yüksek7,8	—	%1,1	2 Oca 2019
31İzleyin	CVE-2019-19166İstismar yok	Tobesoft XPlatform Arbitrary File Execution Vulnerabilitytobesoft · xplatform · CWE-494 RCE	Yüksek7,8	—	%0,4	6 May 2020
30İzleyin	CVE-2021-26613İstismar yok	tobesoft nexacro arbitrary file creation vulnerabilitytobesoft · nexacro · CWE-20 Kimlik doğrulamasız	Yüksek7,5	—	%0,8	9 Şub 2022

CVE-2020-7825
40Planlayın
A vulnerability exists that could allow the execution of operating system commands on systems running MiPlatform 2019.05.16 and earlier.
KritikCVSS 9,8İstismar yokEPSS %2
- pre-auth RCE
- Komut enjeksiyonu
tobesoft · miplatform17 Tem 2020
CVE-2021-26607
40Planlayın
TOBESOFT NEXACRO17 arbitrary command execution vulnerability
KritikCVSS 9,8İstismar yokEPSS %2
- pre-auth RCE
tobesoft · nexacro26 Eki 2021
CVE-2021-26612
39İzleyin
tobesoft Nexacro platform arbitrary file creation vulnerability
KritikCVSS 9,8İstismar yokEPSS %1
- pre-auth RCE
tobesoft · nexacro30 Kas 2021
CVE-2020-7815
39İzleyin
XPLATFORM v9.2.260 and eariler versions contain a vulnerability that could allow remote files to be downloaded by setting the arguments to t
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
tobesoft · xplatform10 Tem 2020
CVE-2020-7857
39İzleyin
A vulnerability of XPlatform could allow an unauthenticated attacker to execute arbitrary command.
KritikCVSS 9,8İstismar yokEPSS %1
- pre-auth RCE
tobesoft · xplatform20 Nis 2021
CVE-2020-7866
39İzleyin
Tobesoft XPLATFORM Arbitrary Command Execution Vulnerability
KritikCVSS 9,8İstismar yokEPSS %1
- pre-auth RCE
tobesoft · xplatform20 Tem 2021
CVE-2020-7853
39İzleyin
TOBESOFT XPLATFORM Out-of-Bounds Read/Write Vulnerabilities
KritikCVSS 9,8İstismar yokEPSS %1
- pre-auth RCE
- Bellek hatası
tobesoft · xplatform24 Mar 2021
CVE-2020-7806
39İzleyin
Tobesoft Xplatform ActiveX File Download Vulnerability
KritikCVSS 9,8İstismar yokEPSS %1
- pre-auth RCE
tobesoft · xplatform6 May 2020
CVE-2019-19167
39İzleyin
Tobesoft Nexacro14 ActiveX File Download Vulnerability
KritikCVSS 9,8İstismar yokEPSS %1
- pre-auth RCE
tobesoft · nexacro6 May 2020
CVE-2020-7841
35İzleyin
TOBESOFT XPLATFORM arbitrary hta file execution vulnerability
YüksekCVSS 8,8İstismar yokEPSS %2
- Kimlik doğrulamasız
tobesoft · xplatform17 Kas 2020
CVE-2021-26629
35İzleyin
tobesoft XPLATFORM Path Traversal Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %2
- Kimlik doğrulamasız
- Yol geçişi
tobesoft · xplatform26 Nis 2022
CVE-2021-26626
35İzleyin
tobesoft XPLATFORM Arbitrary file execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1
- pre-auth RCE
tobesoft · xplatform19 Nis 2022
CVE-2021-26625
35İzleyin
tobesoft Nexacro arbitrary file download vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1
- pre-auth RCE
tobesoft · nexacro19 Nis 2022
CVE-2020-7874
35İzleyin
NEXACRO14 Runtime arbitrary file download and execution vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1
- Kimlik doğrulamasız
tobesoft · nexacro9 Eyl 2021
CVE-2019-19162
31İzleyin
A use-after-free vulnerability in the TOBESOFT XPLATFORM versions 9.1 to 9.2.2 may lead to code execution on a system running it.
YüksekCVSS 7,8İstismar yokEPSS %1
- Bellek hatası
tobesoft · xplatform11 May 2020
CVE-2018-5197
31İzleyin
A vulnerability in the ExtCommon.dll user extension module version 9.2, 9.2.1, 9.2.2 of Xplatform ActiveX could allow attacker to perform a
YüksekCVSS 7,8İstismar yokEPSS %1
- RCE
- Komut enjeksiyonu
tobesoft · xplatform2 Oca 2019
CVE-2019-19166
31İzleyin
Tobesoft XPlatform Arbitrary File Execution Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0
- RCE
tobesoft · xplatform6 May 2020
CVE-2021-26613
30İzleyin
tobesoft nexacro arbitrary file creation vulnerability
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
tobesoft · nexacro9 Şub 2022