trovebox kayıtları
trovebox üreticisine ait 4 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-640 Weak Password Recovery Mechanism for Forgotten Password1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
- CWE-918 Server-Side Request Forgery (SSRF)1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
4 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2018-1000554İstismar yok | Trovebox version <= 4.0.0-rc6 contains a Unsafe password reset token generation vulnerability in user component that can result in Password trovebox · trovebox · CWE-640 | Kritik9,8 | — | %1,2 | 26 Haz 2018 |
35İzleyin | CVE-2018-1000551İstismar yok | Trovebox version <= 4.0.0-rc6 contains a PHP Type juggling vulnerability in album view component that can result in Authentication bypass.trovebox · trovebox | Yüksek8,8 | — | %1,3 | 26 Haz 2018 |
35İzleyin | CVE-2018-1000553İstismar yok | Trovebox version <= 4.0.0-rc6 contains a Server-Side request forgery vulnerability in webhook component that can result in read or update introvebox · trovebox · CWE-918 | Yüksek8,8 | — | %1,1 | 26 Haz 2018 |
35İzleyin | CVE-2018-1000552İstismar yok | Trovebox version <= 4.0.0-rc6 contains a SQL Injection vulnerability in album component that can result in SQL code injection.trovebox · trovebox · CWE-89 | Yüksek8,8 | — | %1,0 | 26 Haz 2018 |
- CVE-2018-100055439İzleyin
Trovebox version <= 4.0.0-rc6 contains a Unsafe password reset token generation vulnerability in user component that can result in Password
KritikCVSS 9,8İstismar yokEPSS %1trovebox · trovebox26 Haz 2018
- CVE-2018-100055135İzleyin
Trovebox version <= 4.0.0-rc6 contains a PHP Type juggling vulnerability in album view component that can result in Authentication bypass.
YüksekCVSS 8,8İstismar yokEPSS %1trovebox · trovebox26 Haz 2018
- CVE-2018-100055335İzleyin
Trovebox version <= 4.0.0-rc6 contains a Server-Side request forgery vulnerability in webhook component that can result in read or update in
YüksekCVSS 8,8İstismar yokEPSS %1trovebox · trovebox26 Haz 2018
- CVE-2018-100055235İzleyin
Trovebox version <= 4.0.0-rc6 contains a SQL Injection vulnerability in album component that can result in SQL code injection.
YüksekCVSS 8,8İstismar yokEPSS %1trovebox · trovebox26 Haz 2018