trms kayıtları
trms üreticisine ait 5 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-269 Improper Privilege Management1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-798 Use of Hard-coded Credentials1
- CWE-918 Server-Side Request Forgery (SSRF)1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
5 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2019-13020İstismar yok | The fetch API in Tightrope Media Carousel before 7.1.3 has CarouselAPI/v0/fetch?url= SSRF.trms · tightrope media carousel · CWE-918 | Kritik10,0 | — | %1,1 | 26 Ağu 2019 |
36İzleyin | CVE-2018-18930İstismar yok | The Tightrope Media Carousel digital signage product 7.0.4.104 contains an arbitrary file upload vulnerability in the Manage Bulletins/Uploatrms · carousel digital signage · CWE-434 | Yüksek8,8 | — | %2,8 | 29 Eki 2019 |
35İzleyin | CVE-2018-18931İstismar yok | An issue was discovered in the Tightrope Media Carousel digital signage product 7.0.4.104.trms · carousel digital signage · CWE-269 | Yüksek8,8 | — | %1,6 | 29 Eki 2019 |
35İzleyin | CVE-2018-18929İstismar yok | The Tightrope Media Carousel Seneca HDn Windows-based appliance 7.0.4.104 is shipped with a default local administrator username and passwortrms · seneca hdn firmware · CWE-798 | Yüksek8,8 | — | %1,1 | 29 Eki 2019 |
24İzleyin | CVE-2018-14573İstismar yok | A Local File Inclusion (LFI) vulnerability exists in the Web Interface API of TightRope Media Carousel Digital Signage before 7.3.5.trms · tightrope media carousel digital signage · CWE-22 | Orta5,5 | — | %6,4 | 23 Tem 2018 |
- CVE-2019-1302040Planlayın
The fetch API in Tightrope Media Carousel before 7.1.3 has CarouselAPI/v0/fetch?url= SSRF.
KritikCVSS 10,0İstismar yokEPSS %1trms · tightrope media carousel26 Ağu 2019
- CVE-2018-1893036İzleyin
The Tightrope Media Carousel digital signage product 7.0.4.104 contains an arbitrary file upload vulnerability in the Manage Bulletins/Uploa
YüksekCVSS 8,8İstismar yokEPSS %3trms · carousel digital signage29 Eki 2019
- CVE-2018-1893135İzleyin
An issue was discovered in the Tightrope Media Carousel digital signage product 7.0.4.104.
YüksekCVSS 8,8İstismar yokEPSS %2trms · carousel digital signage29 Eki 2019
- CVE-2018-1892935İzleyin
The Tightrope Media Carousel Seneca HDn Windows-based appliance 7.0.4.104 is shipped with a default local administrator username and passwor
YüksekCVSS 8,8İstismar yokEPSS %1trms · seneca hdn firmware29 Eki 2019
- CVE-2018-1457324İzleyin
A Local File Inclusion (LFI) vulnerability exists in the Web Interface API of TightRope Media Carousel Digital Signage before 7.3.5.
OrtaCVSS 5,5İstismar yokEPSS %6trms · tightrope media carousel digital signage23 Tem 2018