İçeriğe atla
Noroxi

weseek kayıtları

weseek üreticisine ait 43 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
0
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 19
  3. 20
  4. 21
  5. 22
  6. 23
  7. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

43 kayıt
  • CVE-2021-20736
    36İzleyin

    NoSQL injection vulnerability in GROWI versions prior to v4.2.20 allows a remote attacker to obtain and/or alter the information stored in t

    KritikCVSS 9,1İstismar yokEPSS %1

    weseek · growi21 Haz 2021

  • CVE-2019-5968
    35İzleyin

    Cross-site request forgery (CSRF) vulnerability in GROWI v3.4.6 and earlier allows remote attackers to hijack the authentication of administ

    YüksekCVSS 8,8İstismar yokEPSS %0

    weseek · growi5 Tem 2019

  • CVE-2020-5683
    31İzleyin

    Directory traversal vulnerability in GROWI versions prior to v4.2.3 (v4.2 Series), GROWI versions prior to v4.1.12 (v4.1 Series), and GROWI

    YüksekCVSS 7,5İstismar yokEPSS %3

    weseek · growi16 Ara 2020

  • CVE-2020-5682
    31İzleyin

    Improper input validation in GROWI versions prior to v4.2.3 (v4.2 Series), GROWI versions prior to v4.1.12 (v4.1 Series), and GROWI v3 serie

    YüksekCVSS 7,5İstismar yokEPSS %1

    weseek · growi16 Ara 2020

  • CVE-2019-13338
    31İzleyin

    In WESEEK GROWI before 3.5.0, a remote attacker can obtain the password hash of the creator of a page by leveraging wiki access to make API

    YüksekCVSS 7,5İstismar yokEPSS %1

    weseek · growi9 Tem 2019

  • CVE-2020-5676
    31İzleyin

    GROWI v4.1.3 and earlier allow remote attackers to obtain information which is not allowed to access via unspecified vectors.

    YüksekCVSS 7,5İstismar yokEPSS %1

    weseek · growi3 Ara 2020

  • CVE-2021-20670
    30İzleyin

    Improper access control vulnerability in GROWI versions v4.2.2 and earlier allows a remote unauthenticated attacker to read the user's perso

    YüksekCVSS 7,5İstismar yokEPSS %1

    weseek · growi10 Mar 2021

  • CVE-2019-13337
    30İzleyin

    In WESEEK GROWI before 3.5.0, the site-wide basic authentication can be bypassed by adding a URL parameter access_token (this is the paramet

    YüksekCVSS 7,5İstismar yokEPSS %1

    weseek · growi9 Tem 2019

  • CVE-2021-3852
    30İzleyin

    Authorization Bypass Through User-Controlled Key in weseek/growi

    YüksekCVSS 7,5İstismar yokEPSS %0

    weseek · growi12 Oca 2022

  • CVE-2021-20671
    29İzleyin

    Invalid file validation on the upload feature in GROWI versions v4.2.2 allows a remote attacker with administrative privilege to overwrite t

    YüksekCVSS 7,2İstismar yokEPSS %1

    weseek · growi10 Mar 2021

  • CVE-2021-20737
    26İzleyin

    Improper authentication vulnerability in GROWI versions prior to v4.2.20 allows a remote attacker to view the unauthorized pages without acc

    OrtaCVSS 6,5İstismar yokEPSS %1

    weseek · growi21 Haz 2021

  • CVE-2022-41799
    26İzleyin

    Improper access control vulnerability in GROWI prior to v5.1.4 (v5 series) and versions prior to v4.5.25 (v4 series) allows a remote authent

    OrtaCVSS 6,5İstismar yokEPSS %0

    weseek · growi24 Eki 2022

  • CVE-2022-1236
    26İzleyin

    Weak Password Requirements in weseek/growi

    OrtaCVSS 6,5İstismar yokEPSS %0

    weseek · growi5 Nis 2022

  • CVE-2023-50332
    26İzleyin

    Improper authorization vulnerability exists in the User Management (/admin/users) page of GROWI versions prior to v6.0.6.

    OrtaCVSS 6,5İstismar yokEPSS %0

    weseek · growi26 Ara 2023

  • CVE-2023-50294
    26İzleyin

    The App Settings (/admin/app) page in GROWI versions prior to v6.0.6 stores sensitive information in cleartext form.

    OrtaCVSS 6,5İstismar yokEPSS %0

    weseek · growi26 Ara 2023

  • CVE-2020-5677
    24İzleyin

    Reflected cross-site scripting vulnerability in GROWI v4.0.0 and earlier allows remote attackers to inject arbitrary script via unspecified

    OrtaCVSS 6,1İstismar yokEPSS %1

    weseek · growi3 Ara 2020

  • CVE-2020-5678
    24İzleyin

    Stored cross-site scripting vulnerability in GROWI v3.8.1 and earlier allows remote attackers to inject arbitrary script via unspecified vec

    OrtaCVSS 6,1İstismar yokEPSS %1

    weseek · growi3 Ara 2020

  • CVE-2019-5969
    24İzleyin

    Open redirect vulnerability in GROWI v3.4.6 and earlier allows remote attackersto redirect users to arbitrary web sites and conduct phishing

    OrtaCVSS 6,1İstismar yokEPSS %1

    weseek · growi5 Tem 2019

  • CVE-2021-20619
    24İzleyin

    Cross-site scripting vulnerability in GROWI (v4.2 Series) versions prior to v4.2.3 allows remote attackers to inject an arbitrary script via

    OrtaCVSS 6,1İstismar yokEPSS %1

    weseek · growi19 Oca 2021

  • CVE-2021-20672
    24İzleyin

    Reflected cross-site scripting vulnerability due to insufficient verification of URL query parameters in GROWI (v4.2 Series) versions from v

    OrtaCVSS 6,1İstismar yokEPSS %0

    weseek · growi10 Mar 2021

  • CVE-2018-0654
    24İzleyin

    Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote attackers to inject arbitrary web script or HTML via the moda

    OrtaCVSS 6,1İstismar yokEPSS %0

    weseek · growi7 Eyl 2018

  • CVE-2018-0653
    24İzleyin

    Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote attackers to inject arbitrary web script or HTML via Wiki pag

    OrtaCVSS 6,1İstismar yokEPSS %0

    weseek · growi7 Eyl 2018

  • CVE-2021-20829
    24İzleyin

    Cross-site scripting vulnerability due to the inadequate tag sanitization in GROWI versions v4.2.19 and earlier allows remote attackers to e

    OrtaCVSS 6,1İstismar yokEPSS %0

    weseek · growi21 Eyl 2021

  • CVE-2018-16205
    21İzleyin

    Cross-site scripting vulnerability in GROWI v3.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via New Page m

    OrtaCVSS 5,4İstismar yokEPSS %0

    weseek · growi9 Oca 2019

  • CVE-2021-20667
    21İzleyin

    Stored cross-site scripting vulnerability due to inadequate CSP (Content Security Policy) configuration in GROWI versions v4.2.2 and earlier

    OrtaCVSS 5,4İstismar yokEPSS %0

    weseek · growi10 Mar 2021