alpine project kayıtları
alpine project üreticisine ait 5 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-287 Improper Authentication1
- CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition1
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')1
- CWE-863 Incorrect Authorization1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
5 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
31İzleyin | CVE-2020-14929İstismar yok | Alpine before 2.23 silently proceeds to use an insecure connection after a /tls is sent in certain circumstances involving PREAUTH, which isalpine project · alpine | Yüksek7,5 | — | %1,8 | 19 Haz 2020 |
30İzleyin | CVE-2022-23553İstismar yok | URL access filters bypass in Alpinealpine project · alpine · CWE-863 | Yüksek7,5 | — | %0,8 | 28 Ara 2022 |
23İzleyin | CVE-2021-38370İstismar yok | In Alpine before 2.25, untagged responses from an IMAP server are accepted before STARTTLS.alpine project · alpine · CWE-77 | Orta5,9 | — | %1,6 | 10 Ağu 2021 |
23İzleyin | CVE-2021-46853İstismar yok | Alpine before 2.25 allows remote attackers to cause a denial of service (application crash) when LIST or LSUB is sent before STARTTLS.alpine project · alpine · CWE-367 | Orta5,9 | — | %0,9 | 3 Kas 2022 |
21İzleyin | CVE-2022-23554İstismar yok | Authentication bypass in Alpinealpine project · alpine · CWE-287 | Orta5,4 | — | %0,7 | 28 Ara 2022 |
- CVE-2020-1492931İzleyin
Alpine before 2.23 silently proceeds to use an insecure connection after a /tls is sent in certain circumstances involving PREAUTH, which is
YüksekCVSS 7,5İstismar yokEPSS %2alpine project · alpine19 Haz 2020
- CVE-2022-2355330İzleyin
URL access filters bypass in Alpine
YüksekCVSS 7,5İstismar yokEPSS %1alpine project · alpine28 Ara 2022
- CVE-2021-3837023İzleyin
In Alpine before 2.25, untagged responses from an IMAP server are accepted before STARTTLS.
OrtaCVSS 5,9İstismar yokEPSS %2alpine project · alpine10 Ağu 2021
- CVE-2021-4685323İzleyin
Alpine before 2.25 allows remote attackers to cause a denial of service (application crash) when LIST or LSUB is sent before STARTTLS.
OrtaCVSS 5,9İstismar yokEPSS %1alpine project · alpine3 Kas 2022
- CVE-2022-2355421İzleyin
Authentication bypass in Alpine
OrtaCVSS 5,4İstismar yokEPSS %1alpine project · alpine28 Ara 2022