Vendors / statusnet Records 8 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 1
Exploited now statusnet records in CISA KEV No statusnet vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 49
ubuntu-server.js in Status React Native Desktop before v0.57.8_mobile_ui allows Remote Code Execution.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04109 · Published 2019-07-23 · No fix listed
Priority MEDIUM 45
Unspecified vulnerability in statusnet through 2010 due to the way addslashes are used in SQL string escapes..
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01315 · Published 2019-11-20 · No fix listed CWE-20
Priority LOW 35
Multiple SQL injection vulnerabilities in StatusNet 1.0 before 1.0.2 and 1.1.0 allow remote attackers to execute arbitrary SQL commands via vectors related to user lists and "a particular tag format."
CVSS 2.0 HIGH 7.5· Network · No auth · Interaction — · EPSS 0.0113 · Published 2013-10-11 · No fix listed CWE-89
Priority LOW 29
statusnet before 0.9.9 has XSS
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00986 · Published 2019-11-12 · No fix listed CWE-79
Priority LOW 29
Cross-site scripting (XSS) vulnerability in statusnet through 2010 in error message contents.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00921 · Published 2019-11-20 · No fix listed CWE-79
Priority LOW 26
statusnet through 2010 allows attackers to spoof syslog messages via newline injection attacks.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00853 · Published 2020-02-07 · No fix listed CWE-74
Priority LOW 25
It is identified a vulnerability of insufficient authentication in an important specific function of Status PowerBPM.
CVSS 3.1 MEDIUM 5.7· Adjacent network · Low privileges · No interaction · EPSS 0.00252 · Published 2023-06-02 · No fix listed CWE-306
Priority LOW 25
StatusNet 0.9.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by tpl/index.php and certain other fil…
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01229 · Published 2011-09-24 · No fix listed CWE-200
Open these records in search → All records by CVSS severity
2 1 5 0 0
THREATIST.IORead the docs