CVE Program partner

directcyber

DirectCyber

API
CVEs, 365 days012 all time, 1 rejected
Quality-median 99%
CVSS by the CNA-share of records
CWE-share of records
Affected versions-not n/a or unspecified
CVSS added by CISA-lower is better
OrganisationDirectCyber
RoleCNA
TypeResearcher, Open Source
Reports tomitre
ScopeIssues in third-party products identified by or reported to DirectCyber, unless covered by the scope of another CNA.
Advisorieshttps://directcyber.com.au/advisory.html

Latest CVEs · RSS

  • CVE-2024-4040 2024-04-22 · CVSS 9.8
    A server side template injection vulnerability in CrushFTP in all versions before 10.7.1 and 11.1.0 on all platforms allows unauthenticated remote attackers to
  • CVE-2024-3772 2024-04-15 · CVSS 5.9
    Regular expression denial of service in Pydanic < 2.4.0, < 1.10.13 allows remote attackers to cause denial of service via a crafted email string.
  • CVE-2024-29844 2024-04-14 · CVSS 9.8
    Default credentials on the Web Interface of Evolution Controller 2.x allows anyone to log in to the server directly to perform administrative functions. Upon in
  • CVE-2024-29843 2024-04-14 · CVSS 7.5
    The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control on MOBILE_GET_USERS_LIST, allowing fo
  • CVE-2024-29842 2024-04-14 · CVSS 7.5
    The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control on DESKTOP_EDIT_USER_GET_ABACARD_FIEL
  • CVE-2024-29841 2024-04-14 · CVSS 7.5
    The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control on DESKTOP_EDIT_USER_GET_KEYS_FIELDS,
  • CVE-2024-29840 2024-04-14 · CVSS 7.5
    The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control on DESKTOP_EDIT_USER_GET_PIN_FIELDS,
  • CVE-2024-29839 2024-04-14 · CVSS 7.5
    The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control on DESKTOP_EDIT_USER_GET_CARD, allowi
  • CVE-2024-29838 2024-04-14 · CVSS 7.5
    The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below does not proper sanitize user input, allowing for an unauthenticated attacker
  • CVE-2024-29837 2024-04-14 · CVSS 8.8
    The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below uses poor session management, allowing for an unauthenticated attacker to acces
  • CVE-2024-29836 2024-04-14 · CVSS 9.8
    The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control, allowing for an unauthenticated atta

All CVE Program partners