CA
Vendor
Canto
9
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-4936 | CA Canto Canto | 9.8 | Jun 14 | Canto <= 3.0.8 - Unauthenticated Remote File Inclusion |
| CVE-2024-25096 | CA Canto Canto | 9.8 | Apr 3 | WordPress canto plugin <= 3.0.7 - Unauth. Remote Code Execution (RCE) vulnerability |
| CVE-2023-3452 | CA Canto Canto | 9.8 | Aug 12 | The Canto plugin for WordPress is vulnerable to Remote File Inclusion in versions up to, and including, 3.0.4 via the 'wp_abspath' parameter |
| CVE-2022-40305 | CA Canto Canto | 9.8 | Sep 9 | A Server-Side Request Forgery issue in Canto Cumulus through 11.1.3 allows attackers to enumerate the internal network, overload network resources, and possibly have unspecified… |
| CVE-2020-28978 | CA Canto Canto | 5.3 | Nov 30 | The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability |
| CVE-2020-28977 | CA Canto Canto | 5.3 | Nov 30 | The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability |
| CVE-2020-28976 | CA Canto Canto | 5.3 | Nov 30 | The Canto plugin 1.3.0 for WordPress contains a blind SSRF vulnerability |
| CVE-2020-24063 | CA Canto Canto | 7.2 | Nov 10 | The Canto plugin 1.3.0 for WordPress allows includes/lib/download.php?subdomain= SSRF |
| CVE-2013-7416 | CC Canto Curses Canto | – | Dec 3 | canto_curses/guibase.py in Canto Curses before 0.9.0 allows remote feed servers to execute arbitrary commands via shell metacharacters in a URL in a feed |