CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 23/05/2019 |
| CVE-2019-10855 | HIGH7.5 | Computrols CBAS 18.0.0 mishandles password hashes. The approach is MD5 with a pw prefix, e.g., if the password is admin, it will calculate the MD5 hash of pwadmin and store it in a MySQL database. | 23/05/2019 |
| CVE-2019-10854 | HIGH8.8 | Computrols CBAS 18.0.0 allows Authenticated Command Injection. | 23/05/2019 |
| CVE-2019-10853 | HIGH8.1 | Computrols CBAS 18.0.0 allows Authentication Bypass. | 23/05/2019 |
| CVE-2019-10852 | HIGH8.8 | Computrols CBAS 18.0.0 allows Authenticated Blind SQL Injection via the id GET parameter, as demonstrated by the index.php?m=servers&a=start_pulling&id= substring. | 23/05/2019 |
| CVE-2019-10851 | MEDIUM6.5 | Computrols CBAS 18.0.0 has hard-coded encryption keys. | 23/05/2019 |