Login Request a demo
MK
Product
Mk-auth
by Mk-auth · last CVE Mar 28, 2023
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 3High 2Medium 4Low 0
Severity
All severities9Critical3High2Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Mk-auth to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-14072
9.8
3%
Jun 29
An issue was discovered in MK-AUTH 19.01
Affected: 19.01
CVE-2020-14070
9.8
2%
Jun 29
An issue was discovered in MK-AUTH 19.01
Affected: 19.01
CVE-2020-14068
9.8
1%
Jun 29
An issue was discovered in MK-AUTH 19.01
Affected: 19.01
CVE-2023-27246
8.8
1%
Mar 28
An arbitrary file upload vulnerability in the Virtual Disk of MK-Auth 23.01K4.9 allows attackers to execute arbitrary code via uploading a crafted .htaccess file
Affected: through 23.01k4.9
CVE-2021-21495
8.8
1%
Jan 4
MK-AUTH through 19.01 K4.9 allows CSRF for password changes via the central/executar_central.php?acao=altsenha_princ URI
Affected: through 19.01
CVE-2020-14069
6.8
0%
Jun 29
An issue was discovered in MK-AUTH 19.01
Affected: 19.01
CVE-2020-14071
6.1
1%
Jun 29
An issue was discovered in MK-AUTH 19.01
Affected: 19.01
CVE-2021-21494
4.8
1%
Jan 4
MK-AUTH through 19.01 K4.9 allows XSS via the admin/logs_ajax.php tipo parameter
Affected: through 19.01
CVE-2021-3005
4.3
1%
Jan 3
MK-AUTH through 19.01 K4.9 allows remote attackers to obtain sensitive information (e.g., a CPF number) via a modified titulo (aka invoice number) value to the central/recibo.php…
Affected: through 19.01
Showing 9