puma kayıtları
puma üreticisine ait 13 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %92,3
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')6
- CWE-113 Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')2
- CWE-295 Improper Certificate Validation1
- CWE-639 Authorization Bypass Through User-Controlled Key1
- CWE-770 Allocation of Resources Without Limits or Throttling1
- CWE-400 Uncontrolled Resource Consumption1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
13 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2023-40175İstismar yok | Inconsistent Interpretation of HTTP Requests in pumapuma · puma · CWE-444 | Kritik9,8 | — | %0,8 | 18 Ağu 2023 |
31İzleyin | CVE-2020-11076Kavram kanıtı | HTTP Smuggling via Transfer-Encoding Header in Pumapuma · puma · CWE-444 | Yüksek7,5 | — | %4,1 | 22 May 2020 |
31İzleyin | CVE-2020-11077İstismar yok | HTTP Smuggling via Transfer-Encoding Header in Pumapuma · puma · CWE-444 | Yüksek7,5 | — | %2,8 | 22 May 2020 |
31İzleyin | CVE-2020-5247İstismar yok | HTTP Response Splitting in Pumapuma · puma · CWE-113 | Yüksek7,5 | — | %2,5 | 28 Şub 2020 |
31İzleyin | CVE-2022-24790İstismar yok | HTTP Request Smuggling in pumapuma · puma · CWE-444 | Yüksek7,5 | — | %2,2 | 30 Mar 2022 |
31İzleyin | CVE-2019-16770İstismar yok | Potential DOS attack in Pumapuma · puma · CWE-770 | Yüksek7,5 | — | %2,0 | 5 Ara 2019 |
30İzleyin | CVE-2021-29509İstismar yok | Keepalive Connections Causing Denial Of Service in pumapuma · puma · CWE-400 | Yüksek7,5 | — | %1,6 | 11 May 2021 |
30İzleyin | CVE-2024-21647İstismar yok | HTTP Request/Response Smuggling in pumapuma · puma · CWE-444 | Yüksek7,5 | — | %1,0 | 8 Oca 2024 |
26İzleyin | CVE-2020-5249İstismar yok | HTTP Response Splitting (Early Hints) in Pumapuma · puma · CWE-113 | Orta6,5 | — | %1,6 | 2 Mar 2020 |
24İzleyin | CVE-2022-23634İstismar yok | Information Exposure when using Puma with Railspuma · puma · CWE-200 | Orta5,9 | — | %2,1 | 11 Şub 2022 |
23İzleyin | CVE-2017-8943İstismar yok | The PUMA PUMATRAC app 3.0.2 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof spuma · pumatrac · CWE-295 | Orta5,9 | — | %0,6 | 15 May 2017 |
21İzleyin | CVE-2024-45614Kavram kanıtı | Header normalization allows for client to clobber proxy set headers in Pumapuma · puma · CWE-639 | Orta5,4 | — | %0,6 | 19 Eyl 2024 |
14İzleyin | CVE-2021-41136İstismar yok | Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in pumapuma · puma · CWE-444 | Düşük3,7 | — | %1,2 | 12 Eki 2021 |
- CVE-2023-4017539İzleyin
Inconsistent Interpretation of HTTP Requests in puma
KritikCVSS 9,8İstismar yokEPSS %1puma · puma18 Ağu 2023
- CVE-2020-1107631İzleyin
HTTP Smuggling via Transfer-Encoding Header in Puma
YüksekCVSS 7,5Kavram kanıtıEPSS %4puma · puma22 May 2020
- CVE-2020-1107731İzleyin
HTTP Smuggling via Transfer-Encoding Header in Puma
YüksekCVSS 7,5İstismar yokEPSS %3puma · puma22 May 2020
- CVE-2020-524731İzleyin
HTTP Response Splitting in Puma
YüksekCVSS 7,5İstismar yokEPSS %3puma · puma28 Şub 2020
- CVE-2022-2479031İzleyin
HTTP Request Smuggling in puma
YüksekCVSS 7,5İstismar yokEPSS %2puma · puma30 Mar 2022
- CVE-2019-1677031İzleyin
Potential DOS attack in Puma
YüksekCVSS 7,5İstismar yokEPSS %2puma · puma5 Ara 2019
- CVE-2021-2950930İzleyin
Keepalive Connections Causing Denial Of Service in puma
YüksekCVSS 7,5İstismar yokEPSS %2puma · puma11 May 2021
- CVE-2024-2164730İzleyin
HTTP Request/Response Smuggling in puma
YüksekCVSS 7,5İstismar yokEPSS %1puma · puma8 Oca 2024
- CVE-2020-524926İzleyin
HTTP Response Splitting (Early Hints) in Puma
OrtaCVSS 6,5İstismar yokEPSS %2puma · puma2 Mar 2020
- CVE-2022-2363424İzleyin
Information Exposure when using Puma with Rails
OrtaCVSS 5,9İstismar yokEPSS %2puma · puma11 Şub 2022
- CVE-2017-894323İzleyin
The PUMA PUMATRAC app 3.0.2 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof s
OrtaCVSS 5,9İstismar yokEPSS %1puma · pumatrac15 May 2017
- CVE-2024-4561421İzleyin
Header normalization allows for client to clobber proxy set headers in Puma
OrtaCVSS 5,4Kavram kanıtıEPSS %1puma · puma19 Eyl 2024
- CVE-2021-4113614İzleyin
Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in puma
DüşükCVSS 3,7İstismar yokEPSS %1puma · puma12 Eki 2021