İçeriğe atla
Noroxi

tribalsystems kayıtları

tribalsystems üreticisine ait 22 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
2
Düzeltme kaydı olan
%40,9
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 21
  3. 22
  4. 23
  5. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

22 kayıt
  • CVE-2022-44136
    39İzleyin

    Zenario CMS 9.3.57186 is vulnerable to Remote Code Excution (RCE).

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    tribalsystems · zenario30 Kas 2022

  • CVE-2024-34461
    39İzleyin

    Zenario before 9.5.60437 uses Twig filters insecurely in the Twig Snippet plugin, and in the site-wide HEAD and BODY elements, enabling code

    KritikCVSS 9,8İstismar yokEPSS %0

    4 May 2024

  • CVE-2021-26830
    37İzleyin

    SQL Injection in Tribalsystems Zenario CMS 8.8.52729 allows remote attackers to access the database or delete the plugin.

    KritikCVSS 9,1Kavram kanıtıEPSS %4

    tribalsystems · zenario16 Nis 2021

  • CVE-2018-5960
    35İzleyin

    Zenario v7.1 - v7.6 has SQL injection via the `Name` input field of organizer.php or admin_boxes.ajax.php in the `Categories - Edit` module.

    YüksekCVSS 8,8İstismar yokEPSS %0

    tribalsystems · zenario21 Oca 2018

  • CVE-2018-18420
    35İzleyin

    Cross-Site Request Forgery (CSRF) vulnerability was discovered in the 8.3 version of Zenario Content Management System via the admin/organiz

    YüksekCVSS 8,8İstismar yokEPSS %0

    tribalsystems · zenario19 Eki 2018

  • CVE-2021-42171
    29İzleyin

    Zenario CMS 9.0.54156 is vulnerable to File Upload.

    YüksekCVSS 7,2Kavram kanıtıEPSS %2

    tribalsystems · zenario14 Mar 2022

  • CVE-2022-23043
    28İzleyin

    Zenario CMS 9.2 allows an authenticated admin user to bypass the file upload restriction by creating a new 'File/MIME Types' using the '.pha

    YüksekCVSS 7,2İstismar yokEPSS %1

    tribalsystems · zenario24 Şub 2022

  • CVE-2020-36608
    24İzleyin

    Tribal Systems Zenario CMS Error Log Module admin_organizer.js cross site scripting

    OrtaCVSS 6,1İstismar yokEPSS %0

    tribalsystems · zenario2 Kas 2022

  • CVE-2023-44769
    21İzleyin

    A Cross-Site Scripting (XSS) vulnerability in Zenario CMS v.9.4.59197 allows a local attacker to execute arbitrary code via a crafted script

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    tribalsystems · zenario25 Eki 2023

  • CVE-2023-44770
    21İzleyin

    A Cross-Site Scripting (XSS) vulnerability in Zenario CMS v.9.4.59197 allows an attacker to execute arbitrary code via a crafted script to t

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    tribalsystems · zenario6 Eki 2023

  • CVE-2023-44771
    21İzleyin

    A Cross-Site Scripting (XSS) vulnerability in Zenario CMS v.9.4.59197 allows a local attacker to execute arbitrary code via a crafted script

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    tribalsystems · zenario6 Eki 2023

  • CVE-2022-44070
    21İzleyin

    Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting (XSS) via News articles.

    OrtaCVSS 5,4İstismar yokEPSS %0

    tribalsystems · zenario16 Kas 2022

  • CVE-2022-44069
    21İzleyin

    Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting (XSS) via the Nest library module.

    OrtaCVSS 5,4İstismar yokEPSS %0

    tribalsystems · zenario16 Kas 2022

  • CVE-2022-44071
    21İzleyin

    Zenario CMS 9.3.57186 is is vulnerable to Cross Site Scripting (XSS) via profile.

    OrtaCVSS 5,4İstismar yokEPSS %0

    tribalsystems · zenario16 Kas 2022

  • CVE-2022-44073
    21İzleyin

    Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting (XSS) via svg,Users & Contacts.

    OrtaCVSS 5,4İstismar yokEPSS %0

    tribalsystems · zenario16 Kas 2022

  • CVE-2022-4231
    21İzleyin

    Tribal Systems Zenario CMS Remember Me session fixiation

    OrtaCVSS 5,4İstismar yokEPSS %0

    tribalsystems · zenario30 Kas 2022

  • CVE-2021-27672
    19İzleyin

    SQL Injection in the "admin_boxes.ajax.php" component of Tribal Systems Zenario CMS v8.8.52729 allows remote attackers to obtain sesnitive d

    OrtaCVSS 4,9İstismar yokEPSS %1

    tribalsystems · zenario15 Nis 2021

  • CVE-2021-27673
    19İzleyin

    Cross Site Scripting (XSS) in the "admin_boxes.ajax.php" component of Tribal Systems Zenario CMS v8.8.52729 allows remote attackers to execu

    OrtaCVSS 4,8İstismar yokEPSS %1

    tribalsystems · zenario15 Nis 2021

  • CVE-2021-41952
    19İzleyin

    Zenario CMS 9.0.54156 is vulnerable to Cross Site Scripting (XSS) via upload file to *.SVG.

    OrtaCVSS 4,8İstismar yokEPSS %0

    tribalsystems · zenario14 Mar 2022

  • CVE-2023-39578
    19İzleyin

    A stored cross-site scripting (XSS) vulnerability in the Create function of Zenario CMS v9.4 allows attackers to execute arbitrary web scrip

    OrtaCVSS 4,8İstismar yokEPSS %0

    tribalsystems · zenario28 Ağu 2023

  • CVE-2024-45964
    19İzleyin

    Zenario 9.7.61188 is vulnerable to Cross Site Scripting (XSS) in the Image library via the "Organizer tags" field.

    OrtaCVSS 4,8İstismar yokEPSS %0

    tribalsystems · zenario2 Eki 2024

  • CVE-2024-45960
    19İzleyin

    Zenario 9.7.61188 allows authenticated admin users to upload PDF files containing malicious code into the target system.

    OrtaCVSS 4,8İstismar yokEPSS %0

    tribalsystems · zenario2 Eki 2024