İçeriğe atla
Noroxi

VestaCP kayıtları

vestacp üreticisine ait 23 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
1 · %4,3
Pre-auth RCE
0
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 19
  3. 20
  4. 21
  5. 22

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

23 kayıt
  • CVE-2020-10808
    58Planlayın

    Vesta Control Panel (VestaCP) through 0.9.8-26 allows Command Injection via the schedule/backup Backup Listing Endpoint.

    YüksekCVSS 8,8SilahlaştırılmışEPSS %77

    vestacp · vesta control panel22 Mar 2020

  • CVE-2018-1000884
    39İzleyin

    Vesta CP version Prior to commit f6f6f9cfbbf2979e301956d1c6ab5c44386822c0 -- any release prior to 0.9.8-18 contains a CWE-208 / Information

    KritikCVSS 9,8İstismar yokEPSS %1

    vestacp · vesta control panel20 Ara 2018

  • CVE-2021-43693
    39İzleyin

    vesta 0.9.8-24 is affected by a file inclusion vulnerability in file web/add/user/index.php.

    KritikCVSS 9,8İstismar yokEPSS %1

    vestacp · vesta control panel29 Kas 2021

  • CVE-2015-4117
    38İzleyin

    Vesta Control Panel before 0.9.8-14 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the backup p

    YüksekCVSS 8,8Kavram kanıtıEPSS %10

    vestacp · control panel28 Şub 2018

  • CVE-2019-12791
    37İzleyin

    A directory traversal vulnerability in the v-list-user script in Vesta Control Panel 0.9.8-24 allows remote attackers to escalate from regul

    YüksekCVSS 8,8İstismar yokEPSS %6

    vestacp · control panel15 Ağu 2019

  • CVE-2021-28379
    37İzleyin

    web/upload/UploadHandler.php in Vesta Control Panel (aka VestaCP) through 0.9.8-27 and myVesta through 0.9.8-26-39 allows uploads from a dif

    YüksekCVSS 8,8Kavram kanıtıEPSS %6

    vestacp · vesta control panel15 Mar 2021

  • CVE-2019-12792
    36İzleyin

    A command injection vulnerability in UploadHandler.php in Vesta Control Panel 0.9.8-24 allows remote attackers to escalate from regular regi

    YüksekCVSS 8,8İstismar yokEPSS %4

    vestacp · control panel15 Ağu 2019

  • CVE-2020-10786
    36İzleyin

    A remote command execution in Vesta Control Panel through 0.9.8-26 allows any authenticated user to execute arbitrary commands on the system

    YüksekCVSS 8,8İstismar yokEPSS %4

    vestacp · vesta control panel21 Nis 2020

  • CVE-2019-9859
    36İzleyin

    Vesta Control Panel (VestaCP) 0.9.7 through 0.9.8-23 is vulnerable to an authenticated command execution that can result in remote root acce

    YüksekCVSS 8,8İstismar yokEPSS %3

    vestacp · vesta control panel10 Mar 2020

  • CVE-2020-10787
    36İzleyin

    An elevation of privilege in Vesta Control Panel through 0.9.8-26 allows an attacker to gain root system access from the admin account via v

    YüksekCVSS 8,8İstismar yokEPSS %2

    vestacp · vesta control panel21 Nis 2020

  • CVE-2021-30463
    31İzleyin

    VestaCP through 0.9.8-24 allows attackers to gain privileges by creating symlinks to files for which they lack permissions.

    YüksekCVSS 7,8İstismar yokEPSS %0

    vestacp · control panel8 Nis 2021

  • CVE-2022-3967
    31İzleyin

    Vesta Control Panel sed main.sh argument injection

    YüksekCVSS 7,8İstismar yokEPSS %0

    vestacp · control panel13 Kas 2022

  • CVE-2021-46850
    30İzleyin

    myVesta Control Panel before 0.9.8-26-43 and Vesta Control Panel before 0.9.8-26 are vulnerable to command injection.

    YüksekCVSS 7,2İstismar yokEPSS %6

    vestacp · control panel24 Eki 2022

  • CVE-2021-30462
    29İzleyin

    VestaCP through 0.9.8-24 allows the admin user to escalate privileges to root because the Sudo configuration does not require a password to

    YüksekCVSS 7,2İstismar yokEPSS %1

    vestacp · vesta control panel8 Nis 2021

  • CVE-2020-10966
    27İzleyin

    In the Password Reset Module in VESTA Control Panel through 0.9.8-25 and Hestia Control Panel before 1.1.1, Host header manipulation leads t

    OrtaCVSS 6,5İstismar yokEPSS %1

    hestiacp · control panel25 Mar 2020

  • CVE-2015-2861
    27İzleyin

    Cross-site request forgery (CSRF) vulnerability in Vesta Control Panel before 0.9.8-14 allows remote attackers to hijack the authentication

    OrtaCVSS 6,8İstismar yokEPSS %1

    vestacp · vesta control panel18 Haz 2015

  • CVE-2019-9841
    24İzleyin

    Vesta Control Panel 0.9.8-23 allows XSS via a crafted URL.

    OrtaCVSS 6,1İstismar yokEPSS %1

    vestacp · control panel19 Nis 2019

  • CVE-2018-10686
    24İzleyin

    An issue was discovered in Vesta Control Panel 0.9.8-20.

    OrtaCVSS 6,1İstismar yokEPSS %1

    vestacp · control panel6 May 2018

  • CVE-2018-18547
    24İzleyin

    Vesta Control Panel through 0.9.8-22 has XSS via the edit/web/ domain parameter, the list/backup/ backup parameter, the list/rrd/ period par

    OrtaCVSS 6,1İstismar yokEPSS %1

    vestacp · control panel24 Eki 2018

  • CVE-2022-36303
    24İzleyin

    Vesta v1.0.0-5 was discovered to contain a cross-site scripting (XSS) vulnerability via the handle_file_upload function at /web/api/v1/uploa

    OrtaCVSS 6,1İstismar yokEPSS %0

    vestacp · vesta control panel19 Tem 2022

  • CVE-2022-36304
    24İzleyin

    Vesta v1.0.0-5 was discovered to contain a cross-site scripting (XSS) vulnerability via the generate_response function at /web/api/v1/upload

    OrtaCVSS 6,1İstismar yokEPSS %0

    vestacp · vesta control panel19 Tem 2022

  • CVE-2022-36305
    24İzleyin

    Vesta v1.0.0-5 was discovered to contain a cross-site scripting (XSS) vulnerability via the body function at /web/api/v1/upload/UploadHandle

    OrtaCVSS 6,1İstismar yokEPSS %0

    vestacp · vesta control panel19 Tem 2022

  • CVE-2022-34025
    24İzleyin

    Vesta v1.0.0-5 was discovered to contain a cross-site scripting (XSS) vulnerability via the post function at /web/api/v1/upload/UploadHandle

    OrtaCVSS 6,1İstismar yokEPSS %0

    vestacp · vesta control panel19 Tem 2022