Vulnerabilities

TI-2023-21189 CVE-2023-40361 · GHSA-h2q7-whv7-5m3x

SECUDOS Qiata (DOMOS OS) 4.13 has Insecure Permissions for the previewRm.sh daily cronjob.

HIGH 69

SECUDOS Qiata (DOMOS OS) 4.13 has Insecure Permissions for the previewRm.sh daily cronjob.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00292 Published 2023-10-20 No fix listed CWE-732

TI-2020-11165 CVE-2020-14294 · GHSA-rrg8-mgx4-vjw8

An issue was discovered in Secudos Qiata FTA 1.70.19.

LOW 30

An issue was discovered in Secudos Qiata FTA 1.70.19.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01235 Published 2020-10-02 No fix listed CWE-79

TI-2020-11164 CVE-2020-14293 · GHSA-fmjp-4h8h-4q4c

conf_datetime in Secudos DOMOS 5.8 allows remote attackers to execute arbitrary commands…

MEDIUM 41

conf_datetime in Secudos DOMOS 5.8 allows remote attackers to execute arbitrary commands as root via shell metacharacters in the zone field (obtained from the web interface).

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.05261 Published 2020-10-02 No fix listed CWE-78

TI-2019-13503 CVE-2019-18664 · GHSA-pvh4-gjhh-928v

The Log module in SECUDOS DOMOS before 5.6 allows XSS.

LOW 25

The Log module in SECUDOS DOMOS before 5.6 allows XSS.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00575 Published 2019-11-02 No fix listed CWE-79

TI-2019-13504 CVE-2019-18665 · GHSA-qw3w-r9fv-chx3

The Log module in SECUDOS DOMOS before 5.6 allows local file inclusion.

MEDIUM 49

The Log module in SECUDOS DOMOS before 5.6 allows local file inclusion.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.14855 Published 2019-11-02 No fix listed CWE-22

Vulnerabilities

Filters

SECUDOS Qiata (DOMOS OS) 4.13 has Insecure Permissions for the previewRm.sh daily cronjob.

An issue was discovered in Secudos Qiata FTA 1.70.19.

conf_datetime in Secudos DOMOS 5.8 allows remote attackers to execute arbitrary commands…

The Log module in SECUDOS DOMOS before 5.6 allows XSS.

The Log module in SECUDOS DOMOS before 5.6 allows local file inclusion.