Xerosecurity

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Xerosecurity records in CISA KEV

No Xerosecurity vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Sn1per 2 records MEDIUM

Records

2 records

TI-2021-16655 CVE-2021-39274 · GHSA-77g9-3552-f5x8

In XeroSecurity Sn1per 9.0 (free version), insecure directory permissions (0777) are set…

MEDIUM 48

In XeroSecurity Sn1per 9.0 (free version), insecure directory permissions (0777) are set during installation, allowing an unprivileged user to modify the main application and the application configuration file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03123 Published 2021-08-19 No fix listed CWE-276

TI-2021-16654 CVE-2021-39273 · GHSA-6h4h-9xp4-x824

In XeroSecurity Sn1per 9.0 (free version), insecure permissions (0777) are set upon…

MEDIUM 43

In XeroSecurity Sn1per 9.0 (free version), insecure permissions (0777) are set upon application execution, allowing an unprivileged user to modify the application, modules, and configuration files.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02671 Published 2021-08-19 No fix listed CWE-276

Open these records in search →

Critical	1
High	1
Medium	0
Low	0
No CVSS	0