toutvirtual kayıtları
toutvirtual üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-287 Improper Authentication1
- CWE-310 Cryptographic Issues1
- CWE-352 Cross-Site Request Forgery (CSRF)1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
31İzleyin | CVE-2009-4843İstismar yok | ToutVirtual VirtualIQ Pro before 3.5 build 8691 does not require administrative authentication for JBoss console access, which allows remotetoutvirtual · virtualiq · CWE-287 | Yüksek7,5 | — | %2,1 | 7 May 2010 |
27İzleyin | CVE-2009-4849Kavram kanıtı | Multiple cross-site request forgery (CSRF) vulnerabilities in ToutVirtual VirtualIQ Pro 3.2 build 7882 and 3.5 build 8691 allow remote attactoutvirtual · virtualiq · CWE-352 | Orta6,8 | — | %0,9 | 7 May 2010 |
20İzleyin | CVE-2009-4844İstismar yok | ToutVirtual VirtualIQ Pro 3.2 build 7882 does not restrict access to the /status URI on port 9080, which allows remote attackers to obtain stoutvirtual · virtualiq · CWE-200 | Orta5,0 | — | %1,2 | 7 May 2010 |
20İzleyin | CVE-2009-4845İstismar yok | The configuration page in ToutVirtual VirtualIQ Pro 3.2 build 7882 contains cleartext SSH credentials, which allows remote attackers to obtatoutvirtual · virtualiq · CWE-310 | Orta5,0 | — | %1,2 | 7 May 2010 |
17İzleyin | CVE-2009-4848İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in ToutVirtual VirtualIQ Pro 3.2 build 7882 and 3.5 build 8691 allow remote attackers totoutvirtual · virtualiq · CWE-79 | Orta4,3 | — | %1,1 | 7 May 2010 |
17İzleyin | CVE-2009-4842İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in ToutVirtual VirtualIQ Pro 3.5 build 8691 allow remote attackers to inject arbitrary wtoutvirtual · virtualiq · CWE-79 | Orta4,3 | — | %0,9 | 7 May 2010 |
- CVE-2009-484331İzleyin
ToutVirtual VirtualIQ Pro before 3.5 build 8691 does not require administrative authentication for JBoss console access, which allows remote
YüksekCVSS 7,5İstismar yokEPSS %2toutvirtual · virtualiq7 May 2010
- CVE-2009-484927İzleyin
Multiple cross-site request forgery (CSRF) vulnerabilities in ToutVirtual VirtualIQ Pro 3.2 build 7882 and 3.5 build 8691 allow remote attac
OrtaCVSS 6,8Kavram kanıtıEPSS %1toutvirtual · virtualiq7 May 2010
- CVE-2009-484420İzleyin
ToutVirtual VirtualIQ Pro 3.2 build 7882 does not restrict access to the /status URI on port 9080, which allows remote attackers to obtain s
OrtaCVSS 5,0İstismar yokEPSS %1toutvirtual · virtualiq7 May 2010
- CVE-2009-484520İzleyin
The configuration page in ToutVirtual VirtualIQ Pro 3.2 build 7882 contains cleartext SSH credentials, which allows remote attackers to obta
OrtaCVSS 5,0İstismar yokEPSS %1toutvirtual · virtualiq7 May 2010
- CVE-2009-484817İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in ToutVirtual VirtualIQ Pro 3.2 build 7882 and 3.5 build 8691 allow remote attackers to
OrtaCVSS 4,3İstismar yokEPSS %1toutvirtual · virtualiq7 May 2010
- CVE-2009-484217İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in ToutVirtual VirtualIQ Pro 3.5 build 8691 allow remote attackers to inject arbitrary w
OrtaCVSS 4,3İstismar yokEPSS %1toutvirtual · virtualiq7 May 2010