영향받는 버전 라인
알려진 취약점
| CVE | 제목 | 영향 버전 | CVSS | 악용 | EPSS | 공개일 |
|---|---|---|---|---|---|---|
| CVE-2023-53931 | Revive Adserver 5.4.1 Cross-Site Scripting via Banner Advanced Settings | = 5.4.1 | 5.1 | — | 2025-12-18 | |
| CVE-2021-22889 | Revive Adserver before v5.2.0 is vulnerable to a reflected XSS vulnerability in the `statsBreakdown` parameter... | * | — | — | 2021-03-26 | |
| CVE-2021-22888 | Revive Adserver before v5.2.0 is vulnerable to a reflected XSS vulnerability in the `status` parameter of camp... | * | — | — | 2021-03-26 | |
| CVE-2021-22875 | Revive Adserver before 5.1.1 is vulnerable to a reflected XSS vulnerability in stats.php via the `setPerPage`... | * | — | — | 2021-01-29 | |
| CVE-2021-22874 | Revive Adserver before 5.1.1 is vulnerable to a reflected XSS vulnerability in userlog-index.php via the `peri... | * | — | — | 2021-01-29 | |
| CVE-2021-22871 | Revive Adserver before 5.1.0 permits any user with a manager account to store possibly malicious content in th... | * | — | — | 2021-01-22 | |
| CVE-2021-22872 | Revive Adserver before 5.1.0 is vulnerable to a reflected cross-site scripting (XSS) vulnerability via the pub... | * | — | — | 2021-01-22 | |
| CVE-2021-22873 | Revive Adserver before 5.1.0 is vulnerable to open redirects via the `dest`, `oadest`, and/or `ct0` parameters... | * | — | — | 2021-01-22 | |
| CVE-2016-9128 | Revive Adserver before 3.2.3 suffers from reflected XSS. The affiliate-preview.php script in www/admin is vuln... | * | — | — | 2017-03-28 | |
| CVE-2016-9129 | Revive Adserver before 3.2.3 suffers from Information Exposure Through Discrepancy. It is possible to check wh... | * | — | — | 2017-03-28 | |
| CVE-2016-9472 | Revive Adserver before 3.2.5 and 4.0.0 suffers from Reflected XSS. The Revive Adserver web installer scripts w... | * | — | — | 2017-03-28 | |
| CVE-2016-9457 | Revive Adserver before 3.2.3 suffers from Reflected XSS. `www/admin/stats.php` is vulnerable to reflected XSS... | * | — | — | 2017-03-28 | |
| CVE-2016-9130 | Revive Adserver before 3.2.3 suffers from Persistent XSS. A vector for persistent XSS attacks via the Revive A... | * | — | — | 2017-03-28 | |
| CVE-2016-9124 | Revive Adserver before 3.2.3 suffers from Improper Restriction of Excessive Authentication Attempts. The login... | * | — | — | 2017-03-28 | |
| CVE-2016-9470 | Revive Adserver before 3.2.5 and 4.0.0 suffers from Reflected File Download. `www/delivery/asyncspc.php` was v... | * | — | — | 2017-03-28 | |
| CVE-2016-9127 | Revive Adserver before 3.2.3 suffers from Cross-Site Request Forgery (CSRF). The password recovery form in Rev... | * | — | — | 2017-03-28 | |
| CVE-2016-9471 | Revive Adserver before 3.2.5 and 4.0.0 suffers from Special Element Injection. Usernames weren't properly sani... | * | — | — | 2017-03-28 | |
| CVE-2016-9455 | Revive Adserver before 3.2.3 suffers from Cross-Site Request Forgery (CSRF). A number of scripts in Revive Ads... | * | — | — | 2017-03-28 | |
| CVE-2016-9125 | Revive Adserver before 3.2.3 suffers from session fixation, by allowing arbitrary session identifiers to be fo... | * | — | — | 2017-03-28 | |
| CVE-2016-9456 | Revive Adserver before 3.2.3 suffers from Cross-Site Request Forgery (CSRF). The Revive Adserver team conducte... | * | — | — | 2017-03-28 | |
| CVE-2016-9126 | Revive Adserver before 3.2.3 suffers from persistent XSS. Usernames are not properly escaped when displayed in... | * | — | — | 2017-03-28 | |
| CVE-2016-9454 | Revive Adserver before 3.2.3 suffers from Persistent XSS. A vector for persistent XSS attacks via the Revive A... | * | — | — | 2017-03-28 | |
| CVE-2015-7368 | Revive Adserver before 3.2.2 does not send the appropriate Cache-Control HTTP headers in responses for admin U... | * | — | — | 2015-10-15 | |
| CVE-2015-7364 | The HTML_Quickform library, as used in Revive Adserver before 3.2.2, allows remote attackers to bypass the CSR... | * | — | — | 2015-10-15 | |
| CVE-2015-7372 | Directory traversal vulnerability in delivery-dev/al.php in Revive Adserver before 3.2.2 allows remote attacke... | * | — | — | 2015-10-15 | |
| CVE-2014-8793 | Cross-site scripting (XSS) vulnerability in lib/max/Admin/UI/Field/PublisherIdField.php in Revive Adserver bef... | * | — | — | 2014-12-20 |
내 서버의 버전을 직접 추적하세요
InfraGuard 는 모든 서버에 설치된 소프트웨어 버전을 수집하고, 알려진 취약점이 있는 버전을 알려 줍니다. 자체 호스팅이라 데이터가 내 네트워크를 벗어나지 않습니다.
데이터: CVE List(CVE® Program), NVD, CISA KEV, FIRST EPSS(EPSS 는 https://www.first.org/epss 참고), endoflife.date. 소프트웨어 목록: awesome-selfhosted(CC BY-SA 3.0).