urbackup kayıtları
urbackup üreticisine ait 4 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-20 Improper Input Validation1
- CWE-203 Observable Discrepancy1
- CWE-476 NULL Pointer Dereference1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
4 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
30İzleyin | CVE-2018-20013İstismar yok | In UrBackup 2.2.6, an attacker can send a malformed request to the client over the network, and trigger a fileservplugin/CClientThread.cpp Curbackup · urbackup · CWE-20 | Yüksek7,5 | — | %1,4 | 18 Haz 2019 |
30İzleyin | CVE-2018-20014İstismar yok | In UrBackup 2.2.6, an attacker can send a malformed request to the client over the network, and trigger a fileservplugin/CClientThread.cpp Curbackup · urbackup · CWE-476 | Yüksek7,5 | — | %1,4 | 7 Haz 2019 |
24İzleyin | CVE-2017-16950İstismar yok | Cross - site scripting (XSS) vulnerability in UrBackup Server before 2.1.20 allows remote attackers to inject arbitrary web script or HTML vurbackup · urbackup server · CWE-79 | Orta6,1 | — | %0,8 | 17 Ara 2017 |
21İzleyin | CVE-2023-47102Kavram kanıtı | UrBackup Server 2.5.31 allows brute-force enumeration of user accounts because a failure message confirms that a username is not valid.urbackup · urbackup server · CWE-203 | Orta5,3 | — | %0,6 | 7 Kas 2023 |
- CVE-2018-2001330İzleyin
In UrBackup 2.2.6, an attacker can send a malformed request to the client over the network, and trigger a fileservplugin/CClientThread.cpp C
YüksekCVSS 7,5İstismar yokEPSS %1urbackup · urbackup18 Haz 2019
- CVE-2018-2001430İzleyin
In UrBackup 2.2.6, an attacker can send a malformed request to the client over the network, and trigger a fileservplugin/CClientThread.cpp C
YüksekCVSS 7,5İstismar yokEPSS %1urbackup · urbackup7 Haz 2019
- CVE-2017-1695024İzleyin
Cross - site scripting (XSS) vulnerability in UrBackup Server before 2.1.20 allows remote attackers to inject arbitrary web script or HTML v
OrtaCVSS 6,1İstismar yokEPSS %1urbackup · urbackup server17 Ara 2017
- CVE-2023-4710221İzleyin
UrBackup Server 2.5.31 allows brute-force enumeration of user accounts because a failure message confirms that a username is not valid.
OrtaCVSS 5,3Kavram kanıtıEPSS %1urbackup · urbackup server7 Kas 2023