sailsjs kayıtları
sailsjs üreticisine ait 5 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %60
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')1
- CWE-20 Improper Input Validation1
- CWE-248 Uncaught Exception1
- CWE-284 Improper Access Control1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
5 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2022-27262İstismar yok | An arbitrary file upload vulnerability in the file upload module of Skipper v0.9.1 allows attackers to execute arbitrary code via a crafted sailsjs · skipper · CWE-434 | Kritik9,8 | — | %2,1 | 12 Nis 2022 |
40Planlayın | CVE-2021-44908İstismar yok | SailsJS Sails.js <=1.4.0 is vulnerable to Prototype Pollution via controller/load-action-modules.js, function loadActionModules().sailsjs · sails · CWE-1321 | Kritik9,8 | — | %1,8 | 17 Mar 2022 |
31İzleyin | CVE-2018-21036İstismar yok | Sails.js before v1.0.0-46 allows attackers to cause a denial of service with a single request because there is no error handler in sails-hoosailsjs · sails · CWE-20 | Yüksek7,5 | — | %1,8 | 21 Tem 2020 |
30İzleyin | CVE-2023-38504İstismar yok | Sails DoS vulnerability for apps with sockets enabledsailsjs · sails · CWE-248 | Yüksek7,5 | — | %0,9 | 27 Tem 2023 |
17İzleyin | CVE-2016-10549İstismar yok | Sails is an MVC style framework for building realtime web applications.sailsjs · sails · CWE-284 | Orta4,4 | — | %0,6 | 31 May 2018 |
- CVE-2022-2726240Planlayın
An arbitrary file upload vulnerability in the file upload module of Skipper v0.9.1 allows attackers to execute arbitrary code via a crafted
KritikCVSS 9,8İstismar yokEPSS %2sailsjs · skipper12 Nis 2022
- CVE-2021-4490840Planlayın
SailsJS Sails.js <=1.4.0 is vulnerable to Prototype Pollution via controller/load-action-modules.js, function loadActionModules().
KritikCVSS 9,8İstismar yokEPSS %2sailsjs · sails17 Mar 2022
- CVE-2018-2103631İzleyin
Sails.js before v1.0.0-46 allows attackers to cause a denial of service with a single request because there is no error handler in sails-hoo
YüksekCVSS 7,5İstismar yokEPSS %2sailsjs · sails21 Tem 2020
- CVE-2023-3850430İzleyin
Sails DoS vulnerability for apps with sockets enabled
YüksekCVSS 7,5İstismar yokEPSS %1sailsjs · sails27 Tem 2023
- CVE-2016-1054917İzleyin
Sails is an MVC style framework for building realtime web applications.
OrtaCVSS 4,4İstismar yokEPSS %1sailsjs · sails31 May 2018