İçeriğe atla
Noroxi

zucchetti kayıtları

zucchetti üreticisine ait 22 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 19
  2. 21
  3. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

22 kayıt
  • CVE-2019-18204
    36İzleyin

    Zucchetti InfoBusiness before and including 4.4.1 allows any authenticated user to upload .php files in order to achieve code execution.

    YüksekCVSS 8,8İstismar yokEPSS %1

    zucchetti · infobusiness30 Eki 2019

  • CVE-2021-42369
    35İzleyin

    Imagicle Application Suite (for Cisco UC) before 2021.Summer.2 allows SQL injection.

    YüksekCVSS 8,8İstismar yokEPSS %1

    zucchetti · imagicle uc suite14 Eki 2021

  • CVE-2023-42228
    35İzleyin

    Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Incorrect Access Control.

    YüksekCVSS 8,8İstismar yokEPSS %0

    zucchetti · helpdeskadvanced13 Oca 2025

  • CVE-2019-18206
    35İzleyin

    A cross-site request forgery (CSRF) vulnerability in Zucchetti InfoBusiness before and including 4.4.1 allows arbitrary file upload.

    YüksekCVSS 8,8İstismar yokEPSS %0

    zucchetti · infobusiness30 Eki 2019

  • CVE-2023-42231
    32İzleyin

    Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Incorrect Access Control.

    YüksekCVSS 8,1İstismar yokEPSS %0

    zucchetti · helpdeskadvanced13 Oca 2025

  • CVE-2019-10257
    31İzleyin

    Zucchetti HR Portal through 2019-03-15 allows Directory Traversal.

    YüksekCVSS 7,5İstismar yokEPSS %2

    zucchetti · hr portal19 Haz 2019

  • CVE-2023-42232
    30İzleyin

    Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via the Navigator/Index function.

    YüksekCVSS 7,5İstismar yokEPSS %0

    zucchetti · helpdeskadvanced13 Oca 2025

  • CVE-2023-42226
    30İzleyin

    Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via Email/SaveAttachment function.

    YüksekCVSS 7,5İstismar yokEPSS %0

    zucchetti · helpdeskadvanced13 Oca 2025

  • CVE-2023-42225
    30İzleyin

    Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via the Attachment/DownloadTempFile function.

    YüksekCVSS 7,5İstismar yokEPSS %0

    zucchetti · helpdeskadvanced13 Oca 2025

  • CVE-2023-42227
    30İzleyin

    Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via the WSCView/Save function.

    YüksekCVSS 7,5İstismar yokEPSS %0

    zucchetti · helpdeskadvanced13 Oca 2025

  • CVE-2024-51321
    30İzleyin

    In Zucchetti Ad Hoc Infinity 2.4, an improper check on the m_cURL parameter allows an attacker to redirect the victim to an attacker-control

    YüksekCVSS 7,6İstismar yokEPSS %0

    zucchetti · ad hoc infinity11 Mar 2025

  • CVE-2024-51319
    29İzleyin

    A local file include vulnerability in the /servlet/Report of Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remot

    YüksekCVSS 7,3İstismar yokEPSS %0

    zucchetti · ad hoc infinity11 Mar 2025

  • CVE-2023-42229
    26İzleyin

    Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal.

    OrtaCVSS 6,5İstismar yokEPSS %0

    zucchetti · helpdeskadvanced13 Oca 2025

  • CVE-2019-18205
    24İzleyin

    Multiple Reflected Cross-site Scripting (XSS) vulnerabilities exist in Zucchetti InfoBusiness before and including 4.4.1.

    OrtaCVSS 6,1İstismar yokEPSS %0

    zucchetti · infobusiness30 Eki 2019

  • CVE-2023-42230
    24İzleyin

    Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Cross Site Scripting (XSS) via the WSCView/Save function.

    OrtaCVSS 6,1İstismar yokEPSS %0

    zucchetti · helpdeskadvanced13 Oca 2025

  • CVE-2025-52180
    24İzleyin

    Cross-site scripting (XSS) vulnerability in Zucchetti Ad Hoc Infinity 4.2 and earlier allows remote unauthenticated attackers to inject arbi

    OrtaCVSS 6,1İstismar yokEPSS %0

    zucchetti · ad hoc infinity30 Eki 2025

  • CVE-2023-42233
    24İzleyin

    Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Cross Site Scripting (XSS) via the Filter/FilterEditor function.

    OrtaCVSS 6,1İstismar yokEPSS %0

    zucchetti · helpdeskadvanced13 Oca 2025

  • CVE-2025-61431
    24İzleyin

    A reflected cross-site scripted (XSS) vulnerability in the /jsp/gsfr_feditorHTML.jsp endpoint of Zucchetti ZMaintenance Infinity and Infinit

    OrtaCVSS 6,1İstismar yokEPSS %0

    zucchetti · infinity zmaintenance4 Kas 2025

  • CVE-2019-18207
    21İzleyin

    In Zucchetti InfoBusiness before and including 4.4.1, an authenticated user can inject client-side code due to improper validation of the Ti

    OrtaCVSS 5,4İstismar yokEPSS %0

    zucchetti · infobusiness30 Eki 2019

  • CVE-2024-51322
    21İzleyin

    Cross Site Scripting vulnerability in Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remote Code Execution via th

    OrtaCVSS 5,4İstismar yokEPSS %0

    zucchetti · ad hoc infinity11 Mar 2025

  • CVE-2024-51320
    21İzleyin

    Cross Site Scripting vulnerability in Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remote Code Execution via th

    OrtaCVSS 5,4İstismar yokEPSS %0

    zucchetti · ad hoc infinity11 Mar 2025

  • CVE-2023-42234
    21İzleyin

    Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Cross Site Request Forgery (CSRF) via the WSCView function.

    OrtaCVSS 5,4İstismar yokEPSS %0

    zucchetti · helpdeskadvanced13 Oca 2025