İçeriğe atla
Noroxi

Wowza kayıtları

wowza üreticisine ait 26 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
2
Düzeltme kaydı olan
%19,2
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 19
  3. 20
  4. 21
  5. 24
  6. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

26 kayıt
  • CVE-2018-19365
    43Planlayın

    The REST API in Wowza Streaming Engine 4.7.4.01 allows traversal of the directory structure and retrieval of a file via a remote, specifical

    KritikCVSS 9,1Kavram kanıtıEPSS %22

    wowza · streaming engine21 Mar 2019

  • CVE-2018-7047
    40Planlayın

    An issue was discovered in the MBeans Server in Wowza Streaming Engine before 4.7.1.

    KritikCVSS 9,8İstismar yokEPSS %2

    wowza · streaming engine1 Mar 2018

  • CVE-2024-52052
    37İzleyin

    Stream Target Remote Code Execution in Wowza Streaming Engine

    KritikCVSS 9,4İstismar yokEPSS %0

    wowza · streaming engine21 Kas 2024

  • CVE-2020-9004
    36İzleyin

    A remote authenticated authorization-bypass vulnerability in Wowza Streaming Engine 4.8.0 and earlier allows any read-only user to issue req

    YüksekCVSS 8,8İstismar yokEPSS %4

    wowza · streaming engine14 Nis 2020

  • CVE-2024-52053
    34İzleyin

    Stored Cross-Site Scripting in Wowza Streaming Engine

    YüksekCVSS 8,7İstismar yokEPSS %1

    wowza · streaming engine21 Kas 2024

  • CVE-2016-20034
    34İzleyin

    Wowza Streaming Engine 4.5.0 Privilege Escalation via user edit

    YüksekCVSS 8,7İstismar yokEPSS %0

    wowza · streaming engine16 Mar 2026

  • CVE-2016-20033
    34İzleyin

    Wowza Streaming Engine 4.5.0 Local Privilege Escalation via nssm_x64.exe

    YüksekCVSS 8,5İstismar yokEPSS %0

    wowza · streaming engine16 Mar 2026

  • CVE-2024-52055
    32İzleyin

    Application Copy Path Traversal in Wowza Streaming Engine

    YüksekCVSS 8,2İstismar yokEPSS %1

    wowza · streaming engine21 Kas 2024

  • CVE-2021-35491
    32İzleyin

    A Cross-Site Request Forgery (CSRF) vulnerability in Wowza Streaming Engine through 4.8.11+5 allows a remote attacker to delete a user accou

    YüksekCVSS 8,1İstismar yokEPSS %1

    wowza · streaming engine5 Eki 2021

  • CVE-2019-7656
    31İzleyin

    A privilege escalation vulnerability in Wowza Streaming Engine 4.8.0 and earlier allows any unprivileged Linux user to escalate privileges t

    YüksekCVSS 7,8İstismar yokEPSS %0

    wowza · streaming engine29 Oca 2020

  • CVE-2019-19455
    31İzleyin

    Wowza Streaming Engine before 4.8.5 has Insecure Permissions which may allow a local attacker to escalate privileges in / usr / local / Wowz

    YüksekCVSS 7,8İstismar yokEPSS %0

    wowza · streaming engine3 Ağu 2020

  • CVE-2019-19454
    30İzleyin

    An arbitrary file download was found in the "Download Log" functionality of Wowza Streaming Engine <= 4.x.x.

    YüksekCVSS 7,5İstismar yokEPSS %2

    wowza · streaming engine18 May 2020

  • CVE-2018-7048
    30İzleyin

    An issue was discovered in Wowza Streaming Engine before 4.7.1.

    YüksekCVSS 7,5İstismar yokEPSS %1

    wowza · streaming engine1 Mar 2018

  • CVE-2021-31540
    28İzleyin

    Wowza Streaming Engine through 4.8.5 (in a default installation) has incorrect file permissions of configuration files in the conf/ director

    YüksekCVSS 7,1İstismar yokEPSS %0

    wowza · streaming engine23 Nis 2021

  • CVE-2021-35492
    27İzleyin

    Wowza Streaming Engine through 4.8.11+5 could allow an authenticated, remote attacker to exhaust filesystem resources via the /enginemanager

    OrtaCVSS 6,5Kavram kanıtıEPSS %3

    wowza · streaming engine5 Eki 2021

  • CVE-2024-52056
    27İzleyin

    Application Delete Path Traversal in Wowza Streaming Engine

    OrtaCVSS 6,9İstismar yokEPSS %1

    wowza · streaming engine21 Kas 2024

  • CVE-2016-20035
    27İzleyin

    Wowza Streaming Engine 4.5.0 CSRF via user edit endpoint

    OrtaCVSS 6,9İstismar yokEPSS %0

    wowza · streaming engine16 Mar 2026

  • CVE-2019-7654
    26İzleyin

    Wowza Streaming Engine 4.8.0 and earlier suffers from multiple CSRF vulnerabilities.

    OrtaCVSS 6,5İstismar yokEPSS %1

    wowza · streaming engine29 Oca 2020

  • CVE-2019-19456
    24İzleyin

    A Reflected XSS was found in the server selection box inside the login page at: enginemanager/loginfailed.html in Wowza Streaming Engine <=

    OrtaCVSS 6,1İstismar yokEPSS %1

    wowza · streaming engine18 May 2020

  • CVE-2018-7049
    24İzleyin

    An issue was discovered in Wowza Streaming Engine before 4.7.1.

    OrtaCVSS 6,1İstismar yokEPSS %1

    wowza · streaming engine1 Mar 2018

  • CVE-2021-31539
    22İzleyin

    Wowza Streaming Engine before 4.8.8.01 (in a default installation) has cleartext passwords stored in the conf/admin.password file.

    OrtaCVSS 5,5İstismar yokEPSS %0

    wowza · streaming engine23 Nis 2021

  • CVE-2017-16922
    21İzleyin

    In com.wowza.wms.timedtext.http.HTTPProviderCaptionFile in Wowza Streaming Engine before 4.7.1, traversal of the directory structure and ret

    OrtaCVSS 5,3İstismar yokEPSS %1

    wowza · streaming engine5 Mar 2018

  • CVE-2019-7655
    21İzleyin

    Wowza Streaming Engine 4.8.0 and earlier from multiple authenticated XSS vulnerabilities via the (1) customList%5B0%5D.value field in engine

    OrtaCVSS 5,4İstismar yokEPSS %1

    wowza · streaming engine29 Oca 2020

  • CVE-2019-19453
    21İzleyin

    Wowza Streaming Engine before 4.8.5 allows XSS (issue 1 of 2).

    OrtaCVSS 5,4İstismar yokEPSS %1

    wowza · streaming engine3 Ağu 2020

  • CVE-2024-52054
    20İzleyin

    Application Creation Path Traversal in Wowza Streaming Engine

    OrtaCVSS 5,1İstismar yokEPSS %1

    wowza · streaming engine21 Kas 2024