Securifera, Inc.
First CVE: Aug 9, 2023Active for: 3 years
25
CVEs Published
More CVEs Published than 45% of tracked CNAs
25.0
Avg CVEs / Year
More Avg CVEs / Year than 73% of tracked CNAs
8.8
Avg CVSS Score
Higher Avg CVSS Score than 97% of tracked CNAs
0.0%
In CISA KEV
Bottom 1%
Trends Over Time
The number and severity of CVEs published by Securifera, Inc. over time
Volume of CVEsAvg CVSS Base Score
First CVE
Aug 9, 2023
2 years ago
Most Recent CVE
Aug 9, 2023
1,080 days ago
Top CVEs
All CVEs published by Securifera, Inc. as a CNA, regardless of affected vendor or product.
25 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2022-48599HIGH A SQL injection vulnerability exists in the “reporter events type” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL quer | Aug 9, 2023 | 8.8 | 27 | NO | NO |
CVE-2022-48580HIGH A command injection vulnerability exists in the ARP ping device tool feature of the ScienceLogic SL1 that takes unsanitized user controlled input and passes it directly to a shell | Aug 9, 2023 | 8.8 | 25 | NO | NO |
CVE-2022-48604HIGH A SQL injection vulnerability exists in the “logging export” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. Thi | Aug 9, 2023 | 8.8 | 23 | NO | NO |
CVE-2022-48600HIGH A SQL injection vulnerability exists in the “notes view” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This al | Aug 9, 2023 | 8.8 | 23 | NO | NO |
CVE-2022-48586HIGH A SQL injection vulnerability exists in the “json walker” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This a | Aug 9, 2023 | 8.8 | 23 | NO | NO |
CVE-2022-48585HIGH A SQL injection vulnerability exists in the “admin brand portal” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. | Aug 9, 2023 | 8.8 | 23 | NO | NO |
CVE-2022-48584HIGH A command injection vulnerability exists in the download and convert report feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a | Aug 9, 2023 | 8.8 | 23 | NO | NO |
CVE-2022-48581HIGH A command injection vulnerability exists in the “dash export” feature of the ScienceLogic SL1 that takes unsanitized user controlled input and passes it directly to a shell command | Aug 9, 2023 | 8.8 | 23 | NO | NO |
CVE-2022-48603HIGH A SQL injection vulnerability exists in the “message viewer iframe” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL que | Aug 9, 2023 | 8.8 | 22 | NO | NO |
CVE-2022-48602HIGH A SQL injection vulnerability exists in the “message viewer print” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL quer | Aug 9, 2023 | 8.8 | 22 | NO | NO |
CVE Severity & Scoring
Severity distribution of CVEs published by this CNA25 CVEs
100%
Severity distribution among all CVEs352,294 CVEs
45%
40%
11%
High
Attack Vector
Local0 (0.0%)
Network25 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low25 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None25 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low25 (100.0%)
High0 (0.0%)
None0 (0.0%)
Unknown0 (0.0%)
Exploit Exposure
Signals from CVEs in this cna scope (25 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
An overview of all social media posts that mention a CVE ID published by Securifera, Inc. as a CNA.
Media Mentions
Media articles that mention a CVE ID published by Securifera, Inc. as a CNA — matched by CVE ID, not by organization name.