Squaredup

Every one of the 9 is a mark on the map. Named now: 1 to 9, most at risk first.

1. An SSRF issue was discovered in SquaredUp for SCOM 5.2.1.6654.CVE-2021-40091Squaredup · 1.1% likely

   CWE-918

2. An issue was discovered in SquaredUp for SCOM 5.2.1.6654. The Download Log feature in System / Maintenance was susceptible to a local file inclusion vulnerability (when processing…CVE-2021-40095Squaredup · 1.0% likely
3. A username enumeration issue was discovered in SquaredUp before version 4.6.0. The login functionality was implemented in a way that would enable a malicious user to guess valid u…CVE-2020-9389Squaredup · 0.9% likely

   CWE-203

4. SquaredUp allowed Stored XSS before version 4.6.0. A user was able to create a dashboard that executed malicious content in iframe or by uploading an SVG that contained a script.CVE-2020-9390Squaredup · 0.9% likely

   CWE-79

5. A cross-site scripting (XSS) vulnerability in integration configuration in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script or HTML via modific…CVE-2021-40096Squaredup · 0.8% likely

   CWE-79

6. CSRF protection was not present in SquaredUp before version 4.6.0. A CSRF attack could have been possible by an administrator executing arbitrary code in a HTML dashboard tile via…CVE-2020-9388Squaredup · 0.8% likely

   CWE-352

7. A cross-site scripting (XSS) vulnerability in integration configuration in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script or HTML via dashboa…CVE-2021-40093Squaredup · 0.6% likely

   CWE-79

8. A cross-site scripting (XSS) vulnerability in Image Tile in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script or HTML via an SVG file.CVE-2021-40092Squaredup · 0.6% likely

   CWE-79

9. A DOM-based XSS vulnerability affects SquaredUp for SCOM 5.2.1.6654. If successfully exploited, this vulnerability may allow attackers to inject malicious code into a user's devic…CVE-2021-40094Squaredup · 0.5% likely

   CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.