tt-rss kayıtları
tt-rss üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %83,3
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-20 Improper Input Validation1
- CWE-829 Inclusion of Functionality from Untrusted Control Sphere1
- CWE-863 Incorrect Authorization1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
45Planlayın | CVE-2020-25787Kavram kanıtı | An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16.tt-rss · tiny tiny rss · CWE-20 | Kritik9,8 | — | %18,4 | 19 Eyl 2020 |
39İzleyin | CVE-2017-16896İstismar yok | A SQL injection in classes/handler/public.php in the forgotpass component of Tiny Tiny RSS 17.4 exists via the login parameter.tt-rss · tiny tiny rss · CWE-89 | Kritik9,8 | — | %1,5 | 20 Kas 2017 |
32İzleyin | CVE-2020-25788İstismar yok | An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16.tt-rss · tiny tiny rss · CWE-829 | Yüksek8,1 | — | %1,2 | 19 Eyl 2020 |
30İzleyin | CVE-2021-28373İstismar yok | The auth_internal plugin in Tiny Tiny RSS (aka tt-rss) before 2021-03-12 allows an attacker to log in via the OTP code without a valid passwtt-rss · tiny tiny rss · CWE-863 | Yüksek7,5 | — | %0,9 | 13 Mar 2021 |
24İzleyin | CVE-2017-1000035İstismar yok | Tiny Tiny RSS before 829d478f is vulnerable to XSS window.opener attacktt-rss · tiny tiny rss · CWE-79 | Orta6,1 | — | %0,9 | 17 Tem 2017 |
24İzleyin | CVE-2020-25789İstismar yok | An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16.tt-rss · tiny tiny rss · CWE-79 | Orta6,1 | — | %0,9 | 19 Eyl 2020 |
- CVE-2020-2578745Planlayın
An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16.
KritikCVSS 9,8Kavram kanıtıEPSS %18tt-rss · tiny tiny rss19 Eyl 2020
- CVE-2017-1689639İzleyin
A SQL injection in classes/handler/public.php in the forgotpass component of Tiny Tiny RSS 17.4 exists via the login parameter.
KritikCVSS 9,8İstismar yokEPSS %1tt-rss · tiny tiny rss20 Kas 2017
- CVE-2020-2578832İzleyin
An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16.
YüksekCVSS 8,1İstismar yokEPSS %1tt-rss · tiny tiny rss19 Eyl 2020
- CVE-2021-2837330İzleyin
The auth_internal plugin in Tiny Tiny RSS (aka tt-rss) before 2021-03-12 allows an attacker to log in via the OTP code without a valid passw
YüksekCVSS 7,5İstismar yokEPSS %1tt-rss · tiny tiny rss13 Mar 2021
- CVE-2017-100003524İzleyin
Tiny Tiny RSS before 829d478f is vulnerable to XSS window.opener attack
OrtaCVSS 6,1İstismar yokEPSS %1tt-rss · tiny tiny rss17 Tem 2017
- CVE-2020-2578924İzleyin
An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16.
OrtaCVSS 6,1İstismar yokEPSS %1tt-rss · tiny tiny rss19 Eyl 2020