Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Cnesty Clear all filters
TI-2020-06376 CVE-2020-7871 · GHSA-8c7q-25p6-v622

Improper input validation in Cnesty Helpcom

Priority MEDIUM 44

A vulnerability of Helpcom could allow an unauthenticated attacker to execute arbitrary command.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00864 Published 2021-06-29 Fixed in 10.0(2020.11) CWE-20
TI-2020-06362 CVE-2020-7856 · GHSA-w9pp-r77p-j4p3

Improper authentication in Cnesty Helpcom

Priority MEDIUM 44

A vulnerability of Helpcom could allow an unauthenticated attacker to execute arbitrary command.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00854 Published 2021-04-20 No fix listed CWE-287
TI-2020-06354 CVE-2020-7846 · GHSA-wvm5-q52j-8r24

Hard-coded credentials in Cnesty Helpcom

Priority MEDIUM 40

Helpcom before v10.0 contains a file download and execution vulnerability caused by storing hardcoded cryptographic key.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01064 Published 2021-02-24 Fixed in 10.0 CWE-321