CWE-1395 · 91 kayıt
Dependency on Vulnerable Third-Party Component
Bu sınıftaki CVE’ler
91 kayıt
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
44Planlayın | CVE-2024-5246Kavram kanıtı | NETGEAR ProSAFE Network Management System Tomcat Remote Code Execution Vulnerabilitynetgear · prosafe network management software 300 · CWE-1395 | Yüksek8,8 | — | %31,3 | 23 May 2024 |
40Planlayın | CVE-2025-15638İstismar yok | Net::Dropbear versions before 0.14 for Perl contains a vulnerable version of libtomcryptatrodo · net::dropbear · CWE-1395 | Kritik10,0 | — | %0,5 | 21 Nis 2026 |
40Planlayın | CVE-2025-12219İstismar yok | Vulnerable Components in Azure Access OSazure-access · blu-ic2 firmware · CWE-1395 | Kritik10,0 | — | %0,3 | 25 Eki 2025 |
40Planlayın | CVE-2025-12220İstismar yok | Busybox 1.31.1 - Multiple Known Vulnerabilitiesazure-access · blu-ic2 firmware · CWE-1395 | Kritik10,0 | — | %0,3 | 25 Eki 2025 |
40Planlayın | GHSA-gv8r-9rw9-9697İstismar yok | Traefik affected by TLS ClientAuth Bypass on HTTP/3Go · github.com/traefik/traefik · CWE-1395 | Kritik10,0 | — | — | 20 Şub 2026 |
39İzleyin | CVE-2024-11948İstismar yok | GFI Archiver Telerik Web UI Remote Code Execution Vulnerabilitygfi · archiver · CWE-1395 | Kritik9,8 | — | %1,4 | 11 Ara 2024 |
39İzleyin | CVE-2026-4176İstismar yok | Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Zlibperl · perl · CWE-1395 | Kritik9,8 | — | %0,8 | 29 Mar 2026 |
39İzleyin | CVE-2026-3257İstismar yok | UnQLite versions through 0.06 for Perl uses a potentially insecure version of the UnQLite librarytokuhirom · unqlite · CWE-1395 | Kritik9,8 | — | %0,6 | 4 Mar 2026 |
39İzleyin | CVE-2026-58586İstismar yok | Image::WebP versions before 0.3.0 for Perl bundle a vulnerable version of libwebpzapad · image::webp · CWE-1395 | Kritik9,8 | — | %0,6 | 24 Tem 2026 |
39İzleyin | CVE-2020-36846İstismar yok | IO::Compress::Brotli versions prior to 0.007 for Perl have an integer overflow in the bundled Brotli C librarytimlegge · io::compress::brotli · CWE-1395 | Kritik9,8 | — | %0,6 | 29 May 2025 |
39İzleyin | CVE-2025-40914İstismar yok | Perl CryptX before version 0.087 contains a dependency that may be susceptible to an integer overflowmik · cryptx · CWE-1395 | Kritik9,8 | — | %0,5 | 11 Haz 2025 |
39İzleyin | CVE-2025-40912İstismar yok | CryptX for Perl before version 0.065 contains a dependency that may be susceptible to malformed unicodemik · cryptx · CWE-1395 | Kritik9,8 | — | %0,4 | 11 Haz 2025 |
39İzleyin | CVE-2022-4976İstismar yok | Archive::Unzip::Burst from 0.01 through 0.09 for Perl contains a bundled InfoZip library that is affected by several vulnerabilitiesetj · archive::unzip::burst · CWE-1395 | Kritik9,8 | — | %0,4 | 11 Haz 2025 |
39İzleyin | CVE-2025-59851İstismar yok | HCL DFXAnalytics is affected by an Insecure Security Header configuration vulnerabilityhcltech · dfxanalytics · CWE-1395 | Kritik9,8 | — | %0,2 | 6 May 2026 |
39İzleyin | CVE-2025-31973İstismar yok | HCL BigFix Service Management (SM) is susceptible to a Configuration – 'Insecure Use of Base Image Version'hcltech · bigfix service management · CWE-1395 | Kritik9,8 | — | %0,1 | 20 May 2026 |
39İzleyin | GHSA-ggpf-24jw-3fcwİstismar yok | CVE-2025-24357 Malicious model remote code execution fix bypass with PyTorch < 2.6.0PyPI · vllm · CWE-1395 | Kritik9,8 | — | — | 23 Nis 2025 |
39İzleyin | GHSA-2gh6-wc3m-g37fİstismar yok | hermes-management is vulnerable to RCE due to Apache commons-jxpathMaven · pl.allegro.tech.hermes:hermes-management · CWE-1395 | Kritik9,8 | — | — | 17 Eyl 2024 |
39İzleyin | GHSA-x9p2-77v6-6vhfİstismar yok | FrankenPHP has delayed propagation of security fixes in upstream base imagesGo · github.com/dunglas/frankenphp · CWE-1395 | Kritik9,8 | — | — | 5 Şub 2026 |
39İzleyin | GHSA-q5fm-55c2-v6j9İstismar yok | Fiona affected by CVE-2023-45853 related to MiniZip madler-zlibPyPI · fiona · CWE-1395 | Kritik9,8 | — | — | 16 Tem 2024 |
38İzleyin | GHSA-2xp9-vwfh-vxw4İstismar yok | Next.js: Unauthenticated Remote Code Execution in Image Optimization API when AVIF files are usednpm · next · CWE-1395 | Kritik9,5 | — | — | 8 Eyl 2026 |
38İzleyin | GHSA-3hfp-gqgh-xc5gİstismar yok | Axios supply chain attack - dependency in @lightdash/cli may resolve to compromised axios versionsnpm · @lightdash/cli · CWE-1395 | Kritik9,6 | — | — | 2 Nis 2026 |
38İzleyin | GHSA-5j8p-438x-rgg5İstismar yok | SAML PHP Toolkit Vulnerability on xmlseclibs CVE-2025-66475 Packagist · onelogin/php-saml · CWE-1395 | Kritik9,5 | — | — | 9 Ara 2025 |
38İzleyin | GHSA-c42h-56wx-h85qİstismar yok | laravel-auth0 SDK Deserialization of Untrusted Data vulnerabilityPackagist · auth0/login · CWE-1395 | Kritik9,5 | — | — | 6 Haz 2025 |
38İzleyin | GHSA-h2rp-8vpx-q9r4İstismar yok | cheqd-node Security patch for upstream vulnerabilities in IBC-Go (ISA-2025-001) and Cosmos SDK (ISA-2025-002)Go · github.com/cheqd/cheqd-node · CWE-1395 | Kritik9,5 | — | — | 13 Mar 2025 |
38İzleyin | GHSA-h8w2-rv57-vc6fİstismar yok | splunk-otel-javaagent: Unsafe deserialization in RMI instrumentation may lead to Remote Code ExecutionMaven · com.splunk:splunk-otel-javaagent · CWE-1395 | Kritik9,5 | — | — | 26 Mar 2026 |
- CVE-2024-524644Planlayın
NETGEAR ProSAFE Network Management System Tomcat Remote Code Execution Vulnerability
YüksekCVSS 8,8Kavram kanıtıEPSS %31netgear · prosafe network management software 30023 May 2024
- CVE-2025-1563840Planlayın
Net::Dropbear versions before 0.14 for Perl contains a vulnerable version of libtomcrypt
KritikCVSS 10,0İstismar yokEPSS %0atrodo · net::dropbear21 Nis 2026
- CVE-2025-1221940Planlayın
Vulnerable Components in Azure Access OS
KritikCVSS 10,0İstismar yokEPSS %0azure-access · blu-ic2 firmware25 Eki 2025
- CVE-2025-1222040Planlayın
Busybox 1.31.1 - Multiple Known Vulnerabilities
KritikCVSS 10,0İstismar yokEPSS %0azure-access · blu-ic2 firmware25 Eki 2025
- GHSA-gv8r-9rw9-969740Planlayın
Traefik affected by TLS ClientAuth Bypass on HTTP/3
KritikCVSS 10,0İstismar yokGo · github.com/traefik/traefik20 Şub 2026
- CVE-2024-1194839İzleyin
GFI Archiver Telerik Web UI Remote Code Execution Vulnerability
KritikCVSS 9,8İstismar yokEPSS %1gfi · archiver11 Ara 2024
- CVE-2026-417639İzleyin
Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Zlib
KritikCVSS 9,8İstismar yokEPSS %0perl · perl29 Mar 2026
- CVE-2026-325739İzleyin
UnQLite versions through 0.06 for Perl uses a potentially insecure version of the UnQLite library
KritikCVSS 9,8İstismar yokEPSS %0tokuhirom · unqlite4 Mar 2026
- CVE-2026-5858639İzleyin
Image::WebP versions before 0.3.0 for Perl bundle a vulnerable version of libwebp
KritikCVSS 9,8İstismar yokEPSS %0zapad · image::webp24 Tem 2026
- CVE-2020-3684639İzleyin
IO::Compress::Brotli versions prior to 0.007 for Perl have an integer overflow in the bundled Brotli C library
KritikCVSS 9,8İstismar yokEPSS %0timlegge · io::compress::brotli29 May 2025
- CVE-2025-4091439İzleyin
Perl CryptX before version 0.087 contains a dependency that may be susceptible to an integer overflow
KritikCVSS 9,8İstismar yokEPSS %0mik · cryptx11 Haz 2025
- CVE-2025-4091239İzleyin
CryptX for Perl before version 0.065 contains a dependency that may be susceptible to malformed unicode
KritikCVSS 9,8İstismar yokEPSS %0mik · cryptx11 Haz 2025
- CVE-2022-497639İzleyin
Archive::Unzip::Burst from 0.01 through 0.09 for Perl contains a bundled InfoZip library that is affected by several vulnerabilities
KritikCVSS 9,8İstismar yokEPSS %0etj · archive::unzip::burst11 Haz 2025
- CVE-2025-5985139İzleyin
HCL DFXAnalytics is affected by an Insecure Security Header configuration vulnerability
KritikCVSS 9,8İstismar yokEPSS %0hcltech · dfxanalytics6 May 2026
- CVE-2025-3197339İzleyin
HCL BigFix Service Management (SM) is susceptible to a Configuration – 'Insecure Use of Base Image Version'
KritikCVSS 9,8İstismar yokEPSS %0hcltech · bigfix service management20 May 2026
- GHSA-ggpf-24jw-3fcw39İzleyin
CVE-2025-24357 Malicious model remote code execution fix bypass with PyTorch < 2.6.0
KritikCVSS 9,8İstismar yokPyPI · vllm23 Nis 2025
- GHSA-2gh6-wc3m-g37f39İzleyin
hermes-management is vulnerable to RCE due to Apache commons-jxpath
KritikCVSS 9,8İstismar yokMaven · pl.allegro.tech.hermes:hermes-management17 Eyl 2024
- GHSA-x9p2-77v6-6vhf39İzleyin
FrankenPHP has delayed propagation of security fixes in upstream base images
KritikCVSS 9,8İstismar yokGo · github.com/dunglas/frankenphp5 Şub 2026
- GHSA-q5fm-55c2-v6j939İzleyin
Fiona affected by CVE-2023-45853 related to MiniZip madler-zlib
KritikCVSS 9,8İstismar yokPyPI · fiona16 Tem 2024
- GHSA-2xp9-vwfh-vxw438İzleyin
Next.js: Unauthenticated Remote Code Execution in Image Optimization API when AVIF files are used
KritikCVSS 9,5İstismar yoknpm · next8 Eyl 2026
- GHSA-3hfp-gqgh-xc5g38İzleyin
Axios supply chain attack - dependency in @lightdash/cli may resolve to compromised axios versions
KritikCVSS 9,6İstismar yoknpm · @lightdash/cli2 Nis 2026
- GHSA-5j8p-438x-rgg538İzleyin
SAML PHP Toolkit Vulnerability on xmlseclibs CVE-2025-66475
KritikCVSS 9,5İstismar yokPackagist · onelogin/php-saml9 Ara 2025
- GHSA-c42h-56wx-h85q38İzleyin
laravel-auth0 SDK Deserialization of Untrusted Data vulnerability
KritikCVSS 9,5İstismar yokPackagist · auth0/login6 Haz 2025
- GHSA-h2rp-8vpx-q9r438İzleyin
cheqd-node Security patch for upstream vulnerabilities in IBC-Go (ISA-2025-001) and Cosmos SDK (ISA-2025-002)
KritikCVSS 9,5İstismar yokGo · github.com/cheqd/cheqd-node13 Mar 2025
- GHSA-h8w2-rv57-vc6f38İzleyin
splunk-otel-javaagent: Unsafe deserialization in RMI instrumentation may lead to Remote Code Execution
KritikCVSS 9,5İstismar yokMaven · com.splunk:splunk-otel-javaagent26 Mar 2026