livebook kayıtları
livebook üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2
- CWE-23 Relative Path Traversal1
- CWE-346 Origin Validation Error1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-636 Not Failing Securely ('Failing Open')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2023-35174İstismar yok | Livebook Desktop's protocol handler can be exploited to execute arbitrary command on Windowslivebook · livebook · CWE-78 | Kritik9,8 | — | %1,0 | 22 Haz 2023 |
34İzleyin | CVE-2026-66298İstismar yok | JS-view sandboxed output can synthesize keyboard events to trigger unconfirmed global shortcutslivebook · livebook · CWE-346 | Yüksek8,6 | — | %0,3 | 5 Ağu 2026 |
30İzleyin | CVE-2026-68746İstismar yok | Livebook Teams identity check fails open when the deployment group is unresolvable, allowing unauthenticated accesslivebook · livebook · CWE-636 | Yüksek7,7 | — | %0,8 | 5 Ağu 2026 |
28İzleyin | CVE-2026-66881İstismar yok | Path traversal in imported file_entries name allows arbitrary file write via URL-type entry downloadlivebook · livebook · CWE-23 | Yüksek7,0 | — | %0,6 | 5 Ağu 2026 |
27İzleyin | CVE-2026-66885İstismar yok | Livebook Teams identity callback lacks state binding, allowing login CSRFlivebook · livebook · CWE-352 | Orta6,8 | — | %0,2 | 5 Ağu 2026 |
21İzleyin | CVE-2026-66297İstismar yok | Unescaped deployment environment variables in generated setup commandslivebook · livebook · CWE-78 | Orta5,0 | — | %2,4 | 5 Ağu 2026 |
- CVE-2023-3517439İzleyin
Livebook Desktop's protocol handler can be exploited to execute arbitrary command on Windows
KritikCVSS 9,8İstismar yokEPSS %1livebook · livebook22 Haz 2023
- CVE-2026-6629834İzleyin
JS-view sandboxed output can synthesize keyboard events to trigger unconfirmed global shortcuts
YüksekCVSS 8,6İstismar yokEPSS %0livebook · livebook5 Ağu 2026
- CVE-2026-6874630İzleyin
Livebook Teams identity check fails open when the deployment group is unresolvable, allowing unauthenticated access
YüksekCVSS 7,7İstismar yokEPSS %1livebook · livebook5 Ağu 2026
- CVE-2026-6688128İzleyin
Path traversal in imported file_entries name allows arbitrary file write via URL-type entry download
YüksekCVSS 7,0İstismar yokEPSS %1livebook · livebook5 Ağu 2026
- CVE-2026-6688527İzleyin
Livebook Teams identity callback lacks state binding, allowing login CSRF
OrtaCVSS 6,8İstismar yokEPSS %0livebook · livebook5 Ağu 2026
- CVE-2026-6629721İzleyin
Unescaped deployment environment variables in generated setup commands
OrtaCVSS 5,0İstismar yokEPSS %2livebook · livebook5 Ağu 2026