tollgrade kayıtları
tollgrade üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor2
- CWE-255 Credentials Management Errors1
- CWE-284 Improper Access Control1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
36İzleyin | CVE-2016-0865İstismar yok | Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS before 5.1, and 4.1.0 Build 16, allows remote authenticated userstollgrade · smartgrid lighthouse sensor management system · CWE-255 | Yüksek8,8 | — | %2,0 | 12 Şub 2016 |
35İzleyin | CVE-2016-0863İstismar yok | Cross-site request forgery (CSRF) vulnerability in Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS before 5.1, antollgrade · smartgrid lighthouse sensor management system · CWE-352 | Yüksek8,8 | — | %0,6 | 12 Şub 2016 |
32İzleyin | CVE-2016-5807İstismar yok | Tollgrade LightHouse SMS before 5.1 patch 3 allows remote authenticated users to bypass an intended administrative-authentication requirementollgrade · lighthouse sms · CWE-284 | Yüksek8,1 | — | %1,2 | 15 Tem 2016 |
24İzleyin | CVE-2016-0866İstismar yok | Cross-site scripting (XSS) vulnerability in Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS before 5.1, and 4.1.0tollgrade · smartgrid lighthouse sensor management system · CWE-79 | Orta6,1 | — | %0,9 | 12 Şub 2016 |
21İzleyin | CVE-2016-5797İstismar yok | Tollgrade LightHouse SMS before 5.1 patch 3 provides different error messages for failed authentication attempts depending on whether the ustollgrade · lighthouse sms · CWE-200 | Orta5,3 | — | %1,2 | 15 Tem 2016 |
21İzleyin | CVE-2016-0864İstismar yok | Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS before 5.1, and 4.1.0 Build 16, allows remote attackers to obtaintollgrade · smartgrid lighthouse sensor management system · CWE-200 | Orta5,3 | — | %1,1 | 12 Şub 2016 |
- CVE-2016-086536İzleyin
Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS before 5.1, and 4.1.0 Build 16, allows remote authenticated users
YüksekCVSS 8,8İstismar yokEPSS %2tollgrade · smartgrid lighthouse sensor management system12 Şub 2016
- CVE-2016-086335İzleyin
Cross-site request forgery (CSRF) vulnerability in Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS before 5.1, an
YüksekCVSS 8,8İstismar yokEPSS %0tollgrade · smartgrid lighthouse sensor management system12 Şub 2016
- CVE-2016-580732İzleyin
Tollgrade LightHouse SMS before 5.1 patch 3 allows remote authenticated users to bypass an intended administrative-authentication requiremen
YüksekCVSS 8,1İstismar yokEPSS %1tollgrade · lighthouse sms15 Tem 2016
- CVE-2016-086624İzleyin
Cross-site scripting (XSS) vulnerability in Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS before 5.1, and 4.1.0
OrtaCVSS 6,1İstismar yokEPSS %0tollgrade · smartgrid lighthouse sensor management system12 Şub 2016
- CVE-2016-579721İzleyin
Tollgrade LightHouse SMS before 5.1 patch 3 provides different error messages for failed authentication attempts depending on whether the us
OrtaCVSS 5,3İstismar yokEPSS %1tollgrade · lighthouse sms15 Tem 2016
- CVE-2016-086421İzleyin
Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS before 5.1, and 4.1.0 Build 16, allows remote attackers to obtain
OrtaCVSS 5,3İstismar yokEPSS %1tollgrade · smartgrid lighthouse sensor management system12 Şub 2016