CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 23/05/2019 |
| CVE-2019-10855 | 高危7.5 | Computrols CBAS 18.0.0 mishandles password hashes. The approach is MD5 with a pw prefix, e.g., if the password is admin, it will calculate the MD5 hash of pwadmin and store it in a MySQL database. | 23/05/2019 |
| CVE-2019-10854 | 高危8.8 | Computrols CBAS 18.0.0 allows Authenticated Command Injection. | 23/05/2019 |
| CVE-2019-10853 | 高危8.1 | Computrols CBAS 18.0.0 allows Authentication Bypass. | 23/05/2019 |
| CVE-2019-10852 | 高危8.8 | Computrols CBAS 18.0.0 allows Authenticated Blind SQL Injection via the id GET parameter, as demonstrated by the index.php?m=servers&a=start_pulling&id= substring. | 23/05/2019 |
| CVE-2019-10851 | 中危6.5 | Computrols CBAS 18.0.0 has hard-coded encryption keys. | 23/05/2019 |