tramyardg kayıtları
tramyardg üreticisine ait 4 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-269 Improper Privilege Management1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
4 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2023-48902İstismar yok | An issue was discovered in tramyardg autoexpress version 1.3.0, allows unauthenticated remote attackers to escalate privileges, update car dtramyardg · autoexpress · CWE-269 | Kritik9,8 | — | %1,3 | 21 Mar 2024 |
39İzleyin | CVE-2023-48901İstismar yok | A SQL injection vulnerability in tramyardg Autoexpress version 1.3.0, allows remote unauthenticated attackers to execute arbitrary SQL commatramyardg · autoexpress · CWE-89 | Kritik9,8 | — | %1,0 | 21 Mar 2024 |
29İzleyin | CVE-2024-30974İstismar yok | SQL Injection vulnerability in autoexpress v.1.3.0 allows attackers to run arbitrary SQL commands via the carId parameter.tramyardg · autoexpress · CWE-89 | Yüksek7,3 | — | %0,3 | 19 Nis 2024 |
24İzleyin | CVE-2023-48903İstismar yok | Stored Cross-Site Scripting (XSS) vulnerability in tramyardg autoexpress 1.3.0, allows remote unauthenticated attackers to inject arbitrary tramyardg · autoexpress · CWE-79 | Orta6,1 | — | %0,6 | 21 Mar 2024 |
- CVE-2023-4890239İzleyin
An issue was discovered in tramyardg autoexpress version 1.3.0, allows unauthenticated remote attackers to escalate privileges, update car d
KritikCVSS 9,8İstismar yokEPSS %1tramyardg · autoexpress21 Mar 2024
- CVE-2023-4890139İzleyin
A SQL injection vulnerability in tramyardg Autoexpress version 1.3.0, allows remote unauthenticated attackers to execute arbitrary SQL comma
KritikCVSS 9,8İstismar yokEPSS %1tramyardg · autoexpress21 Mar 2024
- CVE-2024-3097429İzleyin
SQL Injection vulnerability in autoexpress v.1.3.0 allows attackers to run arbitrary SQL commands via the carId parameter.
YüksekCVSS 7,3İstismar yokEPSS %0tramyardg · autoexpress19 Nis 2024
- CVE-2023-4890324İzleyin
Stored Cross-Site Scripting (XSS) vulnerability in tramyardg autoexpress 1.3.0, allows remote unauthenticated attackers to inject arbitrary
OrtaCVSS 6,1İstismar yokEPSS %1tramyardg · autoexpress21 Mar 2024