Vembu kayıtları
vembu üreticisine ait 7 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 3
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-428 Unquoted Search Path or Element1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
7 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2021-26472İstismar yok | Unauthenticated remote command execution with SYSTEM privileges in Vembu productsvembu · bdr suite · CWE-78 | Kritik9,8 | — | %2,4 | 8 Haz 2021 |
40Planlayın | CVE-2021-26471İstismar yok | Unauthenticated remote command execution in Vembu productsvembu · bdr suite | Kritik9,8 | — | %2,2 | 8 Haz 2021 |
40Planlayın | CVE-2021-26473İstismar yok | Unauthenticated arbitrary file upload and command execution in Vembu productsvembu · bdr suite · CWE-434 | Kritik9,8 | — | %1,7 | 8 Haz 2021 |
35İzleyin | CVE-2021-26474İstismar yok | UNAUTHENTICATED SERVER SIDE REQUEST FORGERY IN VEMBU PRODUCTSvembu · bdr suite · CWE-352 | Yüksek8,8 | — | %0,7 | 8 Haz 2021 |
31İzleyin | CVE-2021-43458İstismar yok | An Unquoted Service Path vulnerability exits in Vembu BDR 4.2.0.1 via a specially crafted file in the (1) hsflowd, (2) VembuBDR360Agent, or vembu · bdr suite · CWE-428 | Yüksek7,8 | — | %0,4 | 4 Nis 2022 |
25İzleyin | CVE-2014-10078Kavram kanıtı | Vembu StoreGrid 4.4.x has XSS in interface/registercustomer/onlineregsuccess.php, interface/registerreseller/onlineregfailure.php, interfacevembu · storegrid · CWE-79 | Orta6,1 | — | %3,2 | 23 Şub 2019 |
24İzleyin | CVE-2014-10079Kavram kanıtı | In Vembu StoreGrid 4.4.x, the front page of the server web interface leaks the private IP address in the "ipaddress" hidden form value of thvembu · storegrid · CWE-200 | Orta5,3 | — | %8,7 | 23 Şub 2019 |
- CVE-2021-2647240Planlayın
Unauthenticated remote command execution with SYSTEM privileges in Vembu products
KritikCVSS 9,8İstismar yokEPSS %2vembu · bdr suite8 Haz 2021
- CVE-2021-2647140Planlayın
Unauthenticated remote command execution in Vembu products
KritikCVSS 9,8İstismar yokEPSS %2vembu · bdr suite8 Haz 2021
- CVE-2021-2647340Planlayın
Unauthenticated arbitrary file upload and command execution in Vembu products
KritikCVSS 9,8İstismar yokEPSS %1vembu · bdr suite8 Haz 2021
- CVE-2021-2647435İzleyin
UNAUTHENTICATED SERVER SIDE REQUEST FORGERY IN VEMBU PRODUCTS
YüksekCVSS 8,8İstismar yokEPSS %0vembu · bdr suite8 Haz 2021
- CVE-2021-4345831İzleyin
An Unquoted Service Path vulnerability exits in Vembu BDR 4.2.0.1 via a specially crafted file in the (1) hsflowd, (2) VembuBDR360Agent, or
YüksekCVSS 7,8İstismar yokEPSS %0vembu · bdr suite4 Nis 2022
- CVE-2014-1007825İzleyin
Vembu StoreGrid 4.4.x has XSS in interface/registercustomer/onlineregsuccess.php, interface/registerreseller/onlineregfailure.php, interface
OrtaCVSS 6,1Kavram kanıtıEPSS %3vembu · storegrid23 Şub 2019
- CVE-2014-1007924İzleyin
In Vembu StoreGrid 4.4.x, the front page of the server web interface leaks the private IP address in the "ipaddress" hidden form value of th
OrtaCVSS 5,3Kavram kanıtıEPSS %8vembu · storegrid23 Şub 2019