Weaver kayıtları
weaver üreticisine ait 18 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 5
- Düzeltme kaydı olan
- %11,1
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3
- CWE-434 Unrestricted Upload of File with Dangerous Type2
- CWE-24 Path Traversal: '../filedir'1
- CWE-306 Missing Authentication for Critical Function1
- CWE-36 Absolute Path Traversal1
- CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
18 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
48Planlayın | CVE-2023-2648Kavram kanıtı | Weaver E-Office uploadify.php unrestricted uploadweaver · e-office · CWE-434 | Kritik9,8 | — | %28,5 | 11 May 2023 |
46Planlayın | CVE-2023-2766Kavram kanıtı | Weaver OA jx2_config.ini file accessweaver · e-office · CWE-552 | Yüksek7,5 | — | %54,2 | 17 May 2023 |
43Planlayın | CVE-2026-22679Kavram kanıtı | Weaver E-cology 10.0 Unauthenticated RCE via dubboApi Debug Endpointweaver · e-cology · CWE-306 | Kritik9,3 | — | %20,4 | 7 Nis 2026 |
39İzleyin | CVE-2023-51892İstismar yok | An issue in weaver e-cology v.10.0.2310.01 allows a remote attacker to execute arbitrary code via a crafted script to the FrameworkShellContweaver · e-cology | Kritik9,8 | — | %1,0 | 19 Oca 2024 |
39İzleyin | CVE-2023-34798İstismar yok | An arbitrary file upload vulnerability in eoffice before v9.5 allows attackers to execute arbitrary code via uploading a crafted file.weaver · e-office · CWE-434 | Kritik9,8 | — | %0,8 | 25 Tem 2023 |
39İzleyin | CVE-2024-48070İstismar yok | An issue in Weaver E-cology v.weaver · e-cology · CWE-94 | Kritik9,8 | — | %0,7 | 19 Kas 2024 |
39İzleyin | CVE-2023-3793İstismar yok | Weaver e-cology HTTP POST Request filelFileDownloadForOutDoc.class sql injectionweaver · e-cology · CWE-89 | Kritik9,8 | — | %0,5 | 20 Tem 2023 |
39İzleyin | CVE-2024-48072İstismar yok | Weaver Ecology v9.* was discovered to contain a SQL injection vulnerability via the component /mobilemode/Action.jsp?invoker=com.weaver.formweaver · e-cology · CWE-89 | Kritik9,8 | — | %0,4 | 19 Kas 2024 |
39İzleyin | CVE-2024-48069İstismar yok | A vulnerability was found in Weaver E-cology allows attackers use race conditions to bypass security mechanisms to upload malicious files anweaver · e-cology · CWE-362 | Kritik9,8 | — | %0,4 | 19 Kas 2024 |
37İzleyin | CVE-2023-2647İstismar yok | Weaver E-Office File Upload utility_all.php command injectionweaver · e-office · CWE-77 | Yüksek8,8 | — | %7,0 | 11 May 2023 |
35İzleyin | CVE-2025-34038Kavram kanıtı | Weaver E-cology SQL Injectionweaver · e-cology · CWE-89 | Yüksek8,7 | — | %2,1 | 23 Haz 2025 |
35İzleyin | CVE-2023-2806İstismar yok | Weaver e-cology API RequestInfoByXml xml external entity referenceweaver · e-cology · CWE-611 | Yüksek8,8 | — | %1,0 | 19 May 2023 |
31İzleyin | CVE-2023-2765İstismar yok | Weaver OA downfile.php absolute path traversalweaver · e-office · CWE-36 | Yüksek7,5 | — | %2,2 | 17 May 2023 |
28İzleyin | CVE-2024-3227İstismar yok | Panwei eoffice OA Backend save_image.php path traversalweaver · e-office · CWE-24 | Yüksek7,2 | — | %1,0 | 2 Nis 2024 |
27İzleyin | CVE-2024-7704İstismar yok | Weaver e-cology Source Code ecology_dev.zip information disclosureweaver · e-cology · CWE-200 | Orta6,9 | — | %0,8 | 12 Ağu 2024 |
26İzleyin | CVE-2019-16133İstismar yok | An issue was discovered in eteams OA v4.0.34.weaver · eteams oa · CWE-613 | Orta6,5 | — | %1,0 | 8 Eyl 2019 |
26İzleyin | CVE-2024-48071İstismar yok | E-cology has a directory traversal vulnerability.weaver · e-cology · CWE-22 | Orta6,5 | — | %0,9 | 19 Kas 2024 |
24İzleyin | CVE-2019-10272İstismar yok | An issue was discovered in Weaver e-cology 9.0.weaver · e-cology · CWE-93 | Orta6,1 | — | %0,7 | 30 Nis 2019 |
- CVE-2023-264848Planlayın
Weaver E-Office uploadify.php unrestricted upload
KritikCVSS 9,8Kavram kanıtıEPSS %28weaver · e-office11 May 2023
- CVE-2023-276646Planlayın
Weaver OA jx2_config.ini file access
YüksekCVSS 7,5Kavram kanıtıEPSS %54weaver · e-office17 May 2023
- CVE-2026-2267943Planlayın
Weaver E-cology 10.0 Unauthenticated RCE via dubboApi Debug Endpoint
KritikCVSS 9,3Kavram kanıtıEPSS %20weaver · e-cology7 Nis 2026
- CVE-2023-5189239İzleyin
An issue in weaver e-cology v.10.0.2310.01 allows a remote attacker to execute arbitrary code via a crafted script to the FrameworkShellCont
KritikCVSS 9,8İstismar yokEPSS %1weaver · e-cology19 Oca 2024
- CVE-2023-3479839İzleyin
An arbitrary file upload vulnerability in eoffice before v9.5 allows attackers to execute arbitrary code via uploading a crafted file.
KritikCVSS 9,8İstismar yokEPSS %1weaver · e-office25 Tem 2023
- CVE-2024-4807039İzleyin
An issue in Weaver E-cology v.
KritikCVSS 9,8İstismar yokEPSS %1weaver · e-cology19 Kas 2024
- CVE-2023-379339İzleyin
Weaver e-cology HTTP POST Request filelFileDownloadForOutDoc.class sql injection
KritikCVSS 9,8İstismar yokEPSS %0weaver · e-cology20 Tem 2023
- CVE-2024-4807239İzleyin
Weaver Ecology v9.* was discovered to contain a SQL injection vulnerability via the component /mobilemode/Action.jsp?invoker=com.weaver.form
KritikCVSS 9,8İstismar yokEPSS %0weaver · e-cology19 Kas 2024
- CVE-2024-4806939İzleyin
A vulnerability was found in Weaver E-cology allows attackers use race conditions to bypass security mechanisms to upload malicious files an
KritikCVSS 9,8İstismar yokEPSS %0weaver · e-cology19 Kas 2024
- CVE-2023-264737İzleyin
Weaver E-Office File Upload utility_all.php command injection
YüksekCVSS 8,8İstismar yokEPSS %7weaver · e-office11 May 2023
- CVE-2025-3403835İzleyin
Weaver E-cology SQL Injection
YüksekCVSS 8,7Kavram kanıtıEPSS %2weaver · e-cology23 Haz 2025
- CVE-2023-280635İzleyin
Weaver e-cology API RequestInfoByXml xml external entity reference
YüksekCVSS 8,8İstismar yokEPSS %1weaver · e-cology19 May 2023
- CVE-2023-276531İzleyin
Weaver OA downfile.php absolute path traversal
YüksekCVSS 7,5İstismar yokEPSS %2weaver · e-office17 May 2023
- CVE-2024-322728İzleyin
Panwei eoffice OA Backend save_image.php path traversal
YüksekCVSS 7,2İstismar yokEPSS %1weaver · e-office2 Nis 2024
- CVE-2024-770427İzleyin
Weaver e-cology Source Code ecology_dev.zip information disclosure
OrtaCVSS 6,9İstismar yokEPSS %1weaver · e-cology12 Ağu 2024
- CVE-2019-1613326İzleyin
An issue was discovered in eteams OA v4.0.34.
OrtaCVSS 6,5İstismar yokEPSS %1weaver · eteams oa8 Eyl 2019
- CVE-2024-4807126İzleyin
E-cology has a directory traversal vulnerability.
OrtaCVSS 6,5İstismar yokEPSS %1weaver · e-cology19 Kas 2024
- CVE-2019-1027224İzleyin
An issue was discovered in Weaver e-cology 9.0.
OrtaCVSS 6,1İstismar yokEPSS %1weaver · e-cology30 Nis 2019