aio-libs kayıtları
aio-libs üreticisine ait 4 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-345 Insufficient Verification of Data Authenticity1
- CWE-349 Acceptance of Extraneous Untrusted Data With Trusted Data1
- CWE-384 Session Fixation1
- CWE-613 Insufficient Session Expiration1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
4 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
26İzleyin | CVE-2018-1000519İstismar yok | aio-libs aiohttp-session contains a Session Fixation vulnerability in load_session function for RedisStorage (see: https://github.com/aio-liaio-libs · aiohttp session · CWE-384 | Orta6,5 | — | %1,2 | 26 Haz 2018 |
26İzleyin | CVE-2018-1000814İstismar yok | aio-libs aiohttp-session version 2.6.0 and earlier contains a Other/Unknown vulnerability in EncryptedCookieStorage and NaClCookieStorage thaio-libs · aiohttp session · CWE-613 | Orta6,5 | — | %1,0 | 20 Ara 2018 |
21İzleyin | CVE-2024-27305İstismar yok | SMTP smuggling in aiosmtpdaio-libs · aiosmtpd · CWE-345 | Orta5,3 | — | %0,4 | 12 Mar 2024 |
21İzleyin | CVE-2024-34083İstismar yok | STARTTLS unencrypted commands injectionaio-libs · aiosmtpd · CWE-349 | Orta5,4 | — | %0,2 | 18 May 2024 |
- CVE-2018-100051926İzleyin
aio-libs aiohttp-session contains a Session Fixation vulnerability in load_session function for RedisStorage (see: https://github.com/aio-li
OrtaCVSS 6,5İstismar yokEPSS %1aio-libs · aiohttp session26 Haz 2018
- CVE-2018-100081426İzleyin
aio-libs aiohttp-session version 2.6.0 and earlier contains a Other/Unknown vulnerability in EncryptedCookieStorage and NaClCookieStorage th
OrtaCVSS 6,5İstismar yokEPSS %1aio-libs · aiohttp session20 Ara 2018
- CVE-2024-2730521İzleyin
SMTP smuggling in aiosmtpd
OrtaCVSS 5,3İstismar yokEPSS %0aio-libs · aiosmtpd12 Mar 2024
- CVE-2024-3408321İzleyin
STARTTLS unencrypted commands injection
OrtaCVSS 5,4İstismar yokEPSS %0aio-libs · aiosmtpd18 May 2024