Scrutisweb
Approved changes feed: RSS · Atom
cpe:2.3:a:iagona:scrutisweb:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Iagona (08c19b15-651a-569d-9707-dc45817523f7) |
|---|---|
| Product | Scrutisweb (cc0c2d66-306e-5ba1-bb9b-d7fc427d443c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-38257 |
vulnerable | 2026-06-08 06:08:17.497168 |
CVE-2023-38257
HIGH (7.5)
Iagona ScrutisWeb versions 2.1.37 and prior are vulnerable to an insecure direct object reference vulnerability that could allow an unauthenticated user to view profile information, including user login names and encrypted passwords.
Published: 2023-07-18T17:17:29.939Z
Updated: 2024-10-28T15:29:08.494Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-35763 |
vulnerable | 2026-06-08 06:06:27.545197 |
Iagona ScrutisWeb Use of Hard-coded Cryptographic Key
MEDIUM (5.5)
Iagona ScrutisWeb versions 2.1.37 and prior are vulnerable to a cryptographic vulnerability that could allow an unauthenticated user to decrypt encrypted passwords into plaintext.
Published: 2023-07-18T17:23:43.966Z
Updated: 2024-10-21T15:56:28.486Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-35189 |
vulnerable | 2026-06-08 06:06:26.793638 |
Iagona ScrutisWeb Unrestricted Upload of File with Dangerous Type
CRITICAL (10)
Iagona ScrutisWeb versions 2.1.37 and prior are vulnerable to a remote
code execution vulnerability that could allow an unauthenticated user to
upload a malicious payload and execute it.
Published: 2023-07-18T17:12:24.681Z
Updated: 2024-10-28T15:30:01.043Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-33871 |
vulnerable | 2026-06-08 06:06:23.647971 |
Iagona ScrutisWeb Absolute Path Traversal
HIGH (7.5)
Iagona ScrutisWeb versions 2.1.37 and prior are vulnerable to a directory traversal vulnerability that could allow an unauthenticated user to directly access any file outside the webroot.
Published: 2023-07-18T17:21:16.587Z
Updated: 2024-10-28T15:18:50.755Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.