Vendors / Mids' Reborn Hero Designer Project Mids' Reborn Hero Designer Project Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 2 CVSS 7.0–8.9
Exploited now Mids' Reborn Hero Designer Project records in CISA KEV No Mids' Reborn Hero Designer Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 35
Mids' Reborn Hero Designer 2.6.0.7 downloads the update manifest, as well as update files, over cleartext HTTP.
CVSS 3.1 HIGH 8.1· Network · No auth · No interaction · EPSS 0.00392 · Published 2020-06-11 · No fix listed CWE-319
Priority LOW 34
Mids' Reborn Hero Designer 2.6.0.7 has an elevation of privilege vulnerability due to default and insecure permissions being set for the installation folder.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00463 · Published 2020-06-11 · No fix listed CWE-427
Open these records in search → All records by CVSS severity
Critical0 High2 Medium0 Low0 No CVSS0