Skip to main content

Status

4 CVEs product

Monthly

CVE-2023-25780 Jun 02, 11:15 MEDIUM This Month

It is identified a vulnerability of insufficient authentication in an important specific function of Status PowerBPM. Rated medium severity (CVSS 5.7), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Status Powerbpm
NVD
CVSS 3.1
5.7
EPSS
0.3%
CVE-2019-12164 Jul 23, 23:15 CRITICAL PATCH Act Now

ubuntu-server.js in Status React Native Desktop before v0.57.8_mobile_ui allows Remote Code Execution. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Ubuntu Status React Native Desktop
NVD GitHub
CVSS 3.0
9.8
EPSS
4.1%
CVE-2013-4137 Oct 11, 22:55 HIGH PATCH This Week

Multiple SQL injection vulnerabilities in StatusNet 1.0 before 1.0.2 and 1.1.0 allow remote attackers to execute arbitrary SQL commands via vectors related to user lists and "a particular tag format.". Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity.

SQLi Statusnet Status
NVD
CVSS 2.0
7.5
EPSS
0.4%
CVE-2012-2980 Aug 21, 10:46 HIGH This Week

The Samsung and HTC onTouchEvent method implementation for Android on the T-Mobile myTouch 3G Slide, HTC Merge, Sprint EVO Shift 4G, HTC ChaCha, AT&T Status, HTC Desire Z, T-Mobile G2, T-Mobile. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable. No vendor patch available.

Authentication Bypass Google Samsung Merge Status +11
NVD
CVSS 2.0
7.1
EPSS
3.2%
EPSS 0% CVSS 5.7
MEDIUM This Month

It is identified a vulnerability of insufficient authentication in an important specific function of Status PowerBPM. Rated medium severity (CVSS 5.7), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Status Powerbpm
NVD
EPSS 4% CVSS 9.8
CRITICAL PATCH Act Now

ubuntu-server.js in Status React Native Desktop before v0.57.8_mobile_ui allows Remote Code Execution. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Ubuntu Status +1
NVD GitHub
EPSS 0% CVSS 7.5
HIGH PATCH This Week

Multiple SQL injection vulnerabilities in StatusNet 1.0 before 1.0.2 and 1.1.0 allow remote attackers to execute arbitrary SQL commands via vectors related to user lists and "a particular tag format.". Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity.

SQLi Statusnet Status
NVD
EPSS 3% CVSS 7.1
HIGH This Week

The Samsung and HTC onTouchEvent method implementation for Android on the T-Mobile myTouch 3G Slide, HTC Merge, Sprint EVO Shift 4G, HTC ChaCha, AT&T Status, HTC Desire Z, T-Mobile G2, T-Mobile. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable. No vendor patch available.

Authentication Bypass Google Samsung +13
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy