CERN kayıtları

cern üreticisine ait 20 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 0
Düzeltme kaydı olan: %95
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

20 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
37İzleyin	CVE-2026-29080İstismar yok	Rucio SQL Injection in FilterEngine Oracle JSON Path via DID Search APIcern · rucio · CWE-89 RCE SQL enjeksiyonu	Kritik9,4	—	%0,5	6 May 2026
36İzleyin	CVE-2017-1000203İstismar yok	ROOT version 6.9.03 and below is vulnerable to an authenticated shell metacharacter injection in the rootd daemon resulting in remote code ecern · root · CWE-78 RCE Komut enjeksiyonu	Yüksek8,8	—	%3,9	17 Kas 2017
36İzleyin	CVE-2026-29090İstismar yok	Rucio SQL injection in postgres_meta DID search path compromises PostgreSQL metadata databasecern · rucio · CWE-89 RCE SQL enjeksiyonu	Kritik9,0	—	%0,5	6 May 2026
30İzleyin	CVE-2021-30185İstismar yok	CERN Indico before 2.3.4 can use an attacker-supplied Host header in a password reset link.cern · indico Kimlik doğrulamasız	Yüksek7,5	—	%1,0	7 Nis 2021
30İzleyin	CVE-2026-33046İstismar yok	Indico discloses local files resulting in Remote Code Execution through LaTeX injectioncern · indico · CWE-22 RCE Yol geçişi	Yüksek7,7	—	%1,0	23 Mar 2026
30İzleyin	CVE-2024-50633Kavram kanıtı	A Broken Object Level Authorization (BOLA) vulnerability in Indico through 3.3.5 allows attackers to read information by sending a crafted Pcern · indico · CWE-201 Kimlik doğrulamasız	Yüksek7,5	—	%0,6	16 Oca 2025
27İzleyin	CVE-2026-25738İstismar yok	Indico has Server-Side Request Forgery (SSRF) in multiple placescern · indico · CWE-367 Kimlik doğrulamasız Kimlik doğrulama atlatma SSRF	Orta6,9	—	%0,3	19 Şub 2026
26İzleyin	CVE-2026-28352İstismar yok	Indico missing access check in event series management APIcern · indico · CWE-306 Kimlik doğrulamasız Kimlik doğrulama atlatma	Orta6,5	—	%0,4	27 Şub 2026
24İzleyin	CVE-2024-45399İstismar yok	Indico has a Cross-Site-Scripting during account creationcern · indico · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,4	4 Eyl 2024
24İzleyin	CVE-2026-25136İstismar yok	Rucio WebUI has a Reflected Cross-site Scripting Vulnerabilitycern · rucio · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,3	25 Şub 2026
21İzleyin	CVE-2025-53640Kavram kanıtı	Indico vulnerable to user enumeration via API endpointcern · indico · CWE-200 Bilgi sızıntısı	Orta5,3	—	%0,6	14 Tem 2025
21İzleyin	CVE-2023-37901İstismar yok	Cross-Site-Scripting via confirmation promptscern · indico · CWE-79 XSS	Orta5,4	—	%0,5	21 Tem 2023
21İzleyin	CVE-2026-25733İstismar yok	Rucio WebUI Vulnerable to Stored Cross-site Scripting (XSS) through Custom Rule Functioncern · rucio · CWE-79 XSS	Orta5,4	—	%0,4	25 Şub 2026
21İzleyin	CVE-2026-25138İstismar yok	Rucio WebUI has Username Enumeration via Login Error Messagecern · rucio · CWE-204 Kimlik doğrulamasız	Orta5,3	—	%0,3	25 Şub 2026
21İzleyin	CVE-2026-25739İstismar yok	Indico affected by Cross-Site-Scripting via material uploadscern · indico · CWE-79 XSS	Orta5,4	—	%0,3	19 Şub 2026
21İzleyin	CVE-2025-59035İstismar yok	Indico vulnerable to Cross-Site Scripting via LaTeX math codecern · indico · CWE-79 XSS	Orta5,4	—	%0,2	10 Eyl 2025
19İzleyin	CVE-2026-25735İstismar yok	Rucio WebUI has a Stored Cross-site Scripting (XSS) vulnerability its Identity Namecern · rucio · CWE-79 XSS	Orta4,8	—	%0,5	25 Şub 2026
19İzleyin	CVE-2026-25736İstismar yok	Rucio WebUI has a Stored Cross-site Scripting (XSS) Vulnerability in its Custom RSE Attributecern · rucio · CWE-79 XSS	Orta4,8	—	%0,5	25 Şub 2026
19İzleyin	CVE-2026-25734İstismar yok	Rucio WebUI has Stored Cross-site Scripting (XSS) in RSE Metadatacern · rucio · CWE-79 XSS	Orta4,8	—	%0,5	25 Şub 2026
17İzleyin	CVE-2025-59034İstismar yok	Indico may disclose unauthorized user details access via legacy APIcern · indico · CWE-639 Erişim denetimi (IDOR)	Orta4,3	—	%0,3	10 Eyl 2025

CVE-2026-29080
37İzleyin
Rucio SQL Injection in FilterEngine Oracle JSON Path via DID Search API
KritikCVSS 9,4İstismar yokEPSS %1
- RCE
- SQL enjeksiyonu
cern · rucio6 May 2026
CVE-2017-1000203
36İzleyin
ROOT version 6.9.03 and below is vulnerable to an authenticated shell metacharacter injection in the rootd daemon resulting in remote code e
YüksekCVSS 8,8İstismar yokEPSS %4
- RCE
- Komut enjeksiyonu
cern · root17 Kas 2017
CVE-2026-29090
36İzleyin
Rucio SQL injection in postgres_meta DID search path compromises PostgreSQL metadata database
KritikCVSS 9,0İstismar yokEPSS %1
- RCE
- SQL enjeksiyonu
cern · rucio6 May 2026
CVE-2021-30185
30İzleyin
CERN Indico before 2.3.4 can use an attacker-supplied Host header in a password reset link.
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
cern · indico7 Nis 2021
CVE-2026-33046
30İzleyin
Indico discloses local files resulting in Remote Code Execution through LaTeX injection
YüksekCVSS 7,7İstismar yokEPSS %1
- RCE
- Yol geçişi
cern · indico23 Mar 2026
CVE-2024-50633
30İzleyin
A Broken Object Level Authorization (BOLA) vulnerability in Indico through 3.3.5 allows attackers to read information by sending a crafted P
YüksekCVSS 7,5Kavram kanıtıEPSS %1
- Kimlik doğrulamasız
cern · indico16 Oca 2025
CVE-2026-25738
27İzleyin
Indico has Server-Side Request Forgery (SSRF) in multiple places
OrtaCVSS 6,9İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
- SSRF
cern · indico19 Şub 2026
CVE-2026-28352
26İzleyin
Indico missing access check in event series management API
OrtaCVSS 6,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
cern · indico27 Şub 2026
CVE-2024-45399
24İzleyin
Indico has a Cross-Site-Scripting during account creation
OrtaCVSS 6,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
cern · indico4 Eyl 2024
CVE-2026-25136
24İzleyin
Rucio WebUI has a Reflected Cross-site Scripting Vulnerability
OrtaCVSS 6,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
cern · rucio25 Şub 2026
CVE-2025-53640
21İzleyin
Indico vulnerable to user enumeration via API endpoint
OrtaCVSS 5,3Kavram kanıtıEPSS %1
- Bilgi sızıntısı
cern · indico14 Tem 2025
CVE-2023-37901
21İzleyin
Cross-Site-Scripting via confirmation prompts
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
cern · indico21 Tem 2023
CVE-2026-25733
21İzleyin
Rucio WebUI Vulnerable to Stored Cross-site Scripting (XSS) through Custom Rule Function
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
cern · rucio25 Şub 2026
CVE-2026-25138
21İzleyin
Rucio WebUI has Username Enumeration via Login Error Message
OrtaCVSS 5,3İstismar yokEPSS %0
- Kimlik doğrulamasız
cern · rucio25 Şub 2026
CVE-2026-25739
21İzleyin
Indico affected by Cross-Site-Scripting via material uploads
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
cern · indico19 Şub 2026
CVE-2025-59035
21İzleyin
Indico vulnerable to Cross-Site Scripting via LaTeX math code
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
cern · indico10 Eyl 2025
CVE-2026-25735
19İzleyin
Rucio WebUI has a Stored Cross-site Scripting (XSS) vulnerability its Identity Name
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
cern · rucio25 Şub 2026
CVE-2026-25736
19İzleyin
Rucio WebUI has a Stored Cross-site Scripting (XSS) Vulnerability in its Custom RSE Attribute
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
cern · rucio25 Şub 2026
CVE-2026-25734
19İzleyin
Rucio WebUI has Stored Cross-site Scripting (XSS) in RSE Metadata
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
cern · rucio25 Şub 2026
CVE-2025-59034
17İzleyin
Indico may disclose unauthorized user details access via legacy API
OrtaCVSS 4,3İstismar yokEPSS %0
- Erişim denetimi (IDOR)
cern · indico10 Eyl 2025