İçeriğe atla
Noroxi

twiki kayıtları

twiki üreticisine ait 30 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
3 · %10
Pre-auth RCE
11
Düzeltme kaydı olan
%3,3
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 19
  2. 20

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

30 kayıt
  • CVE-2004-1037
    59Planlayın

    The search function in TWiki 20030201 allows remote attackers to execute arbitrary commands via shell metacharacters in a search string.

    KritikCVSS 10,0SilahlaştırılmışEPSS %62

    twiki · twiki1 Mar 2005

  • CVE-2014-7236
    53Planlayın

    Eval injection vulnerability in lib/TWiki/Plugins.pm in TWiki before 6.0.1 allows remote attackers to execute arbitrary Perl code via the de

    KritikCVSS 9,1SilahlaştırılmışEPSS %56

    twiki · twiki17 Şub 2020

  • CVE-2005-2877
    51Planlayın

    The history (revision control) function in TWiki 02-Sep-2004 and earlier allows remote attackers to execute arbitrary code via shell metacha

    YüksekCVSS 7,5SilahlaştırılmışEPSS %71

    twiki · twiki16 Eyl 2005

  • CVE-2008-5305
    41Planlayın

    Eval injection vulnerability in TWiki before 4.2.4 allows remote attackers to execute arbitrary Perl code via the %SEARCH{}% variable.

    KritikCVSS 10,0Kavram kanıtıEPSS %5

    twiki · twiki9 Ara 2008

  • CVE-2013-1751
    40Planlayın

    TWiki before 5.1.4 allows remote attackers to execute arbitrary shell commands by sending a crafted '%MAKETEXT{}%' parameter value containin

    KritikCVSS 9,8İstismar yokEPSS %5

    twiki · twiki7 Kas 2019

  • CVE-2005-3056
    40Planlayın

    TWiki allows arbitrary shell command execution via the Include function

    KritikCVSS 9,8İstismar yokEPSS %3

    twiki · twiki1 Kas 2019

  • CVE-2006-6071
    37İzleyin

    TWiki 4.0.5 and earlier, when running under Apache 1.3 using ApacheLogin with sessions and "ErrorDocument 401" redirects to a valid wiki top

    KritikCVSS 9,0İstismar yokEPSS %2

    twiki · twiki1 Ara 2006

  • CVE-2014-7237
    33İzleyin

    lib/TWiki/Sandbox.pm in TWiki 6.0.0 and earlier, when running on Windows, allows remote attackers to bypass intended access restrictions and

    OrtaCVSS 6,8İstismar yokEPSS %20

    twiki · twiki15 Eki 2014

  • CVE-2012-6330
    31İzleyin

    The localization functionality in TWiki before 5.1.3, and Foswiki 1.0.x through 1.0.10 and 1.1.x through 1.1.6, allows remote attackers to c

    OrtaCVSS 5,0Kavram kanıtıEPSS %36

    twiki · twiki4 Oca 2013

  • CVE-2006-3819
    31İzleyin

    Eval injection vulnerability in the configure script in TWiki 4.0.0 through 4.0.4 allows remote attackers to execute arbitrary Perl code via

    YüksekCVSS 7,5Kavram kanıtıEPSS %4

    twiki · twiki26 Tem 2006

  • CVE-2005-0516
    31İzleyin

    The ImageGalleryPlugin (ImageGalleryPlugin.pm) in Twiki allows remote attackers to execute arbitrary commands via certain commands that gene

    YüksekCVSS 7,5İstismar yokEPSS %2

    twiki · imagegalleryplugin23 Şub 2005

  • CVE-2006-1386
    31İzleyin

    The (1) rdiff and (2) preview scripts in TWiki 4.0 and 4.0.1 ignore access control settings, which allows remote attackers to read restricte

    YüksekCVSS 7,5İstismar yokEPSS %2

    twiki · twiki26 Mar 2006

  • CVE-2008-3195
    29İzleyin

    Directory traversal vulnerability in bin/configure in TWiki before 4.2.3, when a certain step in the installation guide is skipped, allows r

    OrtaCVSS 6,8Kavram kanıtıEPSS %8

    twiki · twiki18 Eyl 2008

  • CVE-2009-4898
    27İzleyin

    Cross-site request forgery (CSRF) vulnerability in TWiki before 4.3.2 allows remote attackers to hijack the authentication of arbitrary user

    OrtaCVSS 6,8İstismar yokEPSS %1

    twiki · twiki7 Eyl 2010

  • CVE-2008-4998
    27İzleyin

    postinst in twiki 4.1.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/twiki temporary file.

    OrtaCVSS 6,9İstismar yokEPSS %0

    twiki · twiki7 Kas 2008

  • CVE-2018-20212
    24İzleyin

    bin/statistics in TWiki 6.0.2 allows cross-site scripting (XSS) via the webs parameter.

    OrtaCVSS 6,1İstismar yokEPSS %2

    twiki · twiki21 Mar 2019

  • CVE-2009-1339
    24İzleyin

    Cross-site request forgery (CSRF) vulnerability in TWiki before 4.3.1 allows remote authenticated users to hijack the authentication of arbi

    OrtaCVSS 6,0İstismar yokEPSS %1

    twiki · twiki30 Nis 2009

  • CVE-2006-4294
    21İzleyin

    Directory traversal vulnerability in viewfile in TWiki 4.0.0 through 4.0.4 allows remote attackers to read arbitrary files via a ..

    OrtaCVSS 5,0Kavram kanıtıEPSS %4

    twiki · twiki8 Eyl 2006

  • CVE-2007-5193
    20İzleyin

    The default configuration for twiki 4.1.2 on Debian GNU/Linux, and possibly other operating systems, specifies the work area directory (cfg{

    OrtaCVSS 5,0İstismar yokEPSS %2

    debian · debian linux4 Eki 2007

  • CVE-2006-2942
    20İzleyin

    TWiki 4.0.0, 4.0.1, and 4.0.2 allows remote attackers to gain Twiki administrator privileges via a TWiki.TWikiRegistration form with a modif

    OrtaCVSS 5,1İstismar yokEPSS %2

    twiki · twiki20 Haz 2006

  • CVE-2011-3010
    19İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in TWiki before 5.1.0 allow remote attackers to inject arbitrary web script or HTML via

    OrtaCVSS 4,3Kavram kanıtıEPSS %5

    twiki · twiki30 Eyl 2011

  • CVE-2010-3841
    18İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in lib/TWiki.pm in TWiki before 5.0.1 allow remote attackers to inject arbitrary web scr

    OrtaCVSS 4,3Kavram kanıtıEPSS %3

    twiki · twiki18 Eki 2010

  • CVE-2011-1838
    18İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in TemplateLogin.pm in TWiki before 5.0.2 allow remote attackers to inject arbitrary web

    OrtaCVSS 4,3Kavram kanıtıEPSS %3

    twiki · twiki20 May 2011

  • CVE-2008-5304
    18İzleyin

    Cross-site scripting (XSS) vulnerability in TWiki before 4.2.4 allows remote attackers to inject arbitrary web script or HTML via the %URLPA

    OrtaCVSS 4,3Kavram kanıtıEPSS %2

    twiki · twiki9 Ara 2008

  • CVE-2012-0979
    18İzleyin

    Cross-site scripting (XSS) vulnerability in TWiki allows remote attackers to inject arbitrary web script or HTML via the organization field

    OrtaCVSS 4,3İstismar yokEPSS %2

    twiki · twiki2 Şub 2012