datagear kayıtları
datagear üreticisine ait 9 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %44,4
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')2
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-502 Deserialization of Untrusted Data1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
- CWE-917 Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
9 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2024-37759Kavram kanıtı | DataGear v5.0.0 and earlier was discovered to contain a SpEL (Spring Expression Language) expression injection vulnerability via the Data Vidatagear · datagear · CWE-74 | Kritik9,8 | — | %2,8 | 24 Haz 2024 |
39İzleyin | CVE-2023-1571İstismar yok | DataGear pagingQueryData sql injectiondatagear · datagear · CWE-89 | Kritik9,8 | — | %0,9 | 22 Mar 2023 |
36İzleyin | CVE-2025-65792İstismar yok | DataGear v5.5.0 is vulnerable to Arbitrary File Deletion.datagear · datagear · CWE-22 | Kritik9,1 | — | %0,5 | 10 Ara 2025 |
24İzleyin | CVE-2023-1573İstismar yok | DataGear Graph Dataset cross site scriptingdatagear · datagear · CWE-79 | Orta6,1 | — | %0,6 | 22 Mar 2023 |
21İzleyin | CVE-2023-2042İstismar yok | DataGear JDBC Server deserializationdatagear · datagear · CWE-502 | Orta5,3 | — | %1,1 | 14 Nis 2023 |
21İzleyin | CVE-2023-7299İstismar yok | DataGear resolveSql sql injectiondatagear · datagear · CWE-74 | Orta5,3 | — | %0,6 | 23 Kas 2024 |
21İzleyin | CVE-2024-7552İstismar yok | DataGear Data Schema Page ConversionSqlParamValueMapper.java evaluateVariableExpression expression language injectiondatagear · datagear · CWE-917 | Orta5,3 | — | %0,6 | 6 Ağu 2024 |
21İzleyin | CVE-2023-1572İstismar yok | DataGear Plugin cross site scriptingdatagear · datagear · CWE-79 | Orta5,4 | — | %0,5 | 22 Mar 2023 |
19İzleyin | CVE-2023-1772İstismar yok | DataGear Diagram Type cross site scriptingdatagear · datagear · CWE-79 | Orta4,8 | — | %0,6 | 31 Mar 2023 |
- CVE-2024-3775940Planlayın
DataGear v5.0.0 and earlier was discovered to contain a SpEL (Spring Expression Language) expression injection vulnerability via the Data Vi
KritikCVSS 9,8Kavram kanıtıEPSS %3datagear · datagear24 Haz 2024
- CVE-2023-157139İzleyin
DataGear pagingQueryData sql injection
KritikCVSS 9,8İstismar yokEPSS %1datagear · datagear22 Mar 2023
- CVE-2025-6579236İzleyin
DataGear v5.5.0 is vulnerable to Arbitrary File Deletion.
KritikCVSS 9,1İstismar yokEPSS %1datagear · datagear10 Ara 2025
- CVE-2023-157324İzleyin
DataGear Graph Dataset cross site scripting
OrtaCVSS 6,1İstismar yokEPSS %1datagear · datagear22 Mar 2023
- CVE-2023-204221İzleyin
DataGear JDBC Server deserialization
OrtaCVSS 5,3İstismar yokEPSS %1datagear · datagear14 Nis 2023
- CVE-2023-729921İzleyin
DataGear resolveSql sql injection
OrtaCVSS 5,3İstismar yokEPSS %1datagear · datagear23 Kas 2024
- CVE-2024-755221İzleyin
DataGear Data Schema Page ConversionSqlParamValueMapper.java evaluateVariableExpression expression language injection
OrtaCVSS 5,3İstismar yokEPSS %1datagear · datagear6 Ağu 2024
- CVE-2023-157221İzleyin
DataGear Plugin cross site scripting
OrtaCVSS 5,4İstismar yokEPSS %1datagear · datagear22 Mar 2023
- CVE-2023-177219İzleyin
DataGear Diagram Type cross site scripting
OrtaCVSS 4,8İstismar yokEPSS %1datagear · datagear31 Mar 2023