İçeriğe atla
Noroxi

Usermin kayıtları

usermin üreticisine ait 13 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
1 · %7,7
Pre-auth RCE
1
Düzeltme kaydı olan
%46,2
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

    Çubuk: toplam · koyu kısım: CISA KEV.

    Tekrar eden sınıflar

    Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

    CWE

    Saldırı profili

    Tüm kayıtlar

    13 kayıt
    • CVE-2003-0101
      45Planlayın

      miniserv.pl in (1) Webmin before 1.070 and (2) Usermin before 1.000 does not properly handle metacharacters such as line feeds and carriage

      KritikCVSS 10,0Kavram kanıtıEPSS %15

      usermin · usermin3 Mar 2003

    • CVE-2006-3392
      43Planlayın

      Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding HTML, which allows remote attackers to read ar

      OrtaCVSS 5,0SilahlaştırılmışEPSS %78

      usermin · usermin6 Tem 2006

    • CVE-2005-1177
      41Planlayın

      Unknown vulnerability in (1) Webmin and (2) Usermin before 1.200 causes Webmin to change permissions and ownership of configuration files, w

      KritikCVSS 10,0İstismar yokEPSS %2

      usermin · usermin2 May 2005

    • CVE-2005-3042
      31İzleyin

      miniserv.pl in Webmin before 1.230 and Usermin before 1.160, when "full PAM conversations" is enabled, allows remote attackers to bypass aut

      YüksekCVSS 7,5İstismar yokEPSS %4

      usermin · usermin22 Eyl 2005

    • CVE-2004-1468
      31İzleyin

      The web mail functionality in Usermin 1.x and Webmin 1.x allows remote attackers to execute arbitrary commands via shell metacharacters in a

      YüksekCVSS 7,5İstismar yokEPSS %4

      usermin · usermin31 Ara 2004

    • CVE-2002-0757
      31İzleyin

      (1) Webmin 0.96 and (2) Usermin 0.90 with password timeouts enabled allow local and possibly remote attackers to bypass authentication and g

      YüksekCVSS 7,5İstismar yokEPSS %2

      usermin · usermin12 Ağu 2002

    • CVE-2002-0756
      31İzleyin

      Cross-site scripting vulnerability in the authentication page for (1) Webmin 0.96 and (2) Usermin 0.90 allows remote attackers to insert scr

      YüksekCVSS 7,5İstismar yokEPSS %2

      usermin · usermin12 Ağu 2002

    • CVE-2006-4542
      28İzleyin

      Webmin before 1.296 and Usermin before 1.226 do not properly handle a URL with a null ("%00") character, which allows remote attackers to co

      OrtaCVSS 6,8İstismar yokEPSS %3

      usermin · usermin5 Eyl 2006

    • CVE-2004-0588
      27İzleyin

      Cross-site scripting (XSS) vulnerability in the web mail module for Usermin 1.070 allows remote attackers to insert arbitrary HTML and scrip

      OrtaCVSS 6,8İstismar yokEPSS %1

      usermin · usermin6 Ağu 2004

    • CVE-2004-0583
      21İzleyin

      The account lockout functionality in (1) Webmin 1.140 and (2) Usermin 1.070 does not parse certain character strings, which allows remote at

      OrtaCVSS 5,0İstismar yokEPSS %2

      usermin · usermin6 Ağu 2004

    • CVE-2007-1276
      17İzleyin

      Multiple cross-site scripting (XSS) vulnerabilities in chooser.cgi in Webmin before 1.330 and Usermin before 1.260 allow remote attackers to

      OrtaCVSS 4,3İstismar yokEPSS %1

      usermin · usermin5 Mar 2007

    • CVE-2006-4246
      14İzleyin

      Usermin before 1.220 (20060629) allows remote attackers to read arbitrary files, possibly related to chfn/save.cgi not properly handling an

      DüşükCVSS 3,6İstismar yokEPSS %1

      usermin · usermin19 Eyl 2006

    • CVE-2004-0559
      8İzleyin

      The maketemp.pl script in Usermin 1.070 and 1.080 allows local users to overwrite arbitrary files at install time via a symlink attack on th

      DüşükCVSS 2,1İstismar yokEPSS %0

      usermin · usermin20 Eki 2004