Vulnerability index

Browse CVEs

6 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

Tabit CRITICAL 9.8

CVE-2022-34773

Tabit - HTTP Method manipulation. https://bridge.tabit.cloud/configuration/addresses-query - can be POST-ed to add addresses to the DB. This is an ex…

Fix: 3.27.0+

Fix from $2,300 2022-08-22

Tabit HIGH 8.8

CVE-2022-34772

Tabit - password enumeration. Description: Tabit - password enumeration. The passwords for the Tabit system is a 4 digit OTP. One can resend OTP and …

Fix: 3.27.0+

Fix from $1,950 2022-08-22

Tabit HIGH 7.5

CVE-2022-34770

Tabit - sensitive information disclosure. Several APIs on the web system display, without authorization, sensitive information such as health stateme…

Fix: 3.27.0+

Fix from $1,950 2022-08-22

Tabit HIGH 7.5

CVE-2022-34775

Tabit - Excessive data exposure. Another endpoint mapped by the tiny url, was one for reservation cancellation, containing the MongoDB ID of the rese…

Fix: 3.27.0+

Fix from $1,950 2022-08-22

Tabit HIGH 7.5

CVE-2022-34776

Tabit - giftcard stealth. Several APIs on the web system display, without authorization, sensitive information such as health statements, previous bi…

Fix: 3.27.0+

Fix from $1,950 2022-08-22

Tabit MEDIUM 5.3

CVE-2022-34774

Tabit - Arbitrary account modification. One of the endpoints mapped by the tiny URL, was a page where an adversary can modify personal details, such …

Fix: 3.27.0+

Fix from $1,600 2022-08-22