Ss-proj

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 12
    Known Exploited: 0
    0
    Critical Level Threats
    2
    High Level Threats
    10
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2024-46898

    SHIRASAGI prior to v1.19.1 processes URLs in HTTP requests improperly, resulting in a path traversal vulnerability. If this vulnerability is exploited, arbitrary files on the server may be retrieved when processing crafted HTTP requests.

    Last Modified: Oct 23, 2024
    Published: Oct 15, 2024

    CVE-2023-41889

    Late-Unicode normalization vulnerability in SHIRASAGI

    Last Modified: Nov 21, 2024
    Published: Sep 15, 2023

    CVE-2023-38569

    Stored cross-site scripting vulnerability in SHIRASAGI prior to v1.18.0 allows a remote authenticated attacker to execute an arbitrary script on the web browser of the user who is logging in to the product.

    Last Modified: Nov 21, 2024
    Published: Sep 05, 2023

    CVE-2023-36492

    Reflected cross-site scripting vulnerability in SHIRASAGI prior to v1.18.0 allows a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is logging in to the product.

    Last Modified: Nov 21, 2024
    Published: Sep 05, 2023

    CVE-2023-39448

    Path traversal vulnerability in SHIRASAGI prior to v1.18.0 allows a remote authenticated attacker to alter or create arbitrary files on the server, resulting in arbitrary code execution.

    Last Modified: Nov 21, 2024
    Published: Sep 05, 2023
    Items Per Page