zmanda kayıtları
zmanda üreticisine ait 7 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %71,4
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')2
- CWE-88 Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')2
- CWE-20 Improper Input Validation1
- CWE-264 Permissions, Privileges, and Access Controls1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
7 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
41Planlayın | CVE-2009-3102İstismar yok | The doHotCopy subroutine in socket-server.pl in Zmanda Recovery Manager (ZRM) for MySQL 2.x before 2.1.1 allows remote attackers to execute zmanda · zrm for my sql · CWE-20 | Kritik10,0 | — | %3,3 | 8 Eyl 2009 |
35İzleyin | CVE-2019-19469İstismar yok | In Zmanda Management Console 3.3.9, ZMC_Admin_Advanced?form=adminTasks&action=Apply&command= allows CSRF, as demonstrated by command injectizmanda · amanda · CWE-78 | Yüksek8,8 | — | %0,6 | 1 Ara 2019 |
31İzleyin | CVE-2016-10729İstismar yok | An issue was discovered in Amanda 3.3.1.zmanda · amanda · CWE-77 | Yüksek7,8 | — | %1,3 | 24 Eki 2018 |
31İzleyin | CVE-2016-10730İstismar yok | An issue was discovered in Amanda 3.3.1.zmanda · amanda · CWE-264 | Yüksek7,8 | — | %0,6 | 24 Eki 2018 |
31İzleyin | CVE-2023-30577İstismar yok | AMANDA (Advanced Maryland Automatic Network Disk Archiver) before tag-community-3.5.4 mishandles argument checking for runtar.c, a differentzmanda · amanda · CWE-88 | Yüksek7,8 | — | %0,5 | 26 Tem 2023 |
26İzleyin | CVE-2022-37705Kavram kanıtı | A privilege escalation flaw was found in Amanda 3.5.1 in which the backup user can acquire root privileges.zmanda · amanda · CWE-88 | Orta6,7 | — | %1,3 | 15 Nis 2023 |
26İzleyin | CVE-2022-37704Kavram kanıtı | Amanda 3.5.1 allows privilege escalation from the regular user backup to root.zmanda · amanda · CWE-77 | Orta6,7 | — | %0,5 | 15 Nis 2023 |
- CVE-2009-310241Planlayın
The doHotCopy subroutine in socket-server.pl in Zmanda Recovery Manager (ZRM) for MySQL 2.x before 2.1.1 allows remote attackers to execute
KritikCVSS 10,0İstismar yokEPSS %3zmanda · zrm for my sql8 Eyl 2009
- CVE-2019-1946935İzleyin
In Zmanda Management Console 3.3.9, ZMC_Admin_Advanced?form=adminTasks&action=Apply&command= allows CSRF, as demonstrated by command injecti
YüksekCVSS 8,8İstismar yokEPSS %1zmanda · amanda1 Ara 2019
- CVE-2016-1072931İzleyin
An issue was discovered in Amanda 3.3.1.
YüksekCVSS 7,8İstismar yokEPSS %1zmanda · amanda24 Eki 2018
- CVE-2016-1073031İzleyin
An issue was discovered in Amanda 3.3.1.
YüksekCVSS 7,8İstismar yokEPSS %1zmanda · amanda24 Eki 2018
- CVE-2023-3057731İzleyin
AMANDA (Advanced Maryland Automatic Network Disk Archiver) before tag-community-3.5.4 mishandles argument checking for runtar.c, a different
YüksekCVSS 7,8İstismar yokEPSS %0zmanda · amanda26 Tem 2023
- CVE-2022-3770526İzleyin
A privilege escalation flaw was found in Amanda 3.5.1 in which the backup user can acquire root privileges.
OrtaCVSS 6,7Kavram kanıtıEPSS %1zmanda · amanda15 Nis 2023
- CVE-2022-3770426İzleyin
Amanda 3.5.1 allows privilege escalation from the regular user backup to root.
OrtaCVSS 6,7Kavram kanıtıEPSS %1zmanda · amanda15 Nis 2023