superagi kayıtları
superagi üreticisine ait 13 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3
- CWE-94 Improper Control of Generation of Code ('Code Injection')2
- CWE-304 Missing Critical Step in Authentication1
- CWE-359 Exposure of Private Personal Information to an Unauthorized Actor1
- CWE-1230 Exposure of Sensitive Information Through Metadata1
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
13 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2024-21552İstismar yok | All versions of `SuperAGI` are vulnerable to Arbitrary Code Execution due to unsafe use of the ‘eval’ function.CWE-94 | Kritik9,8 | — | %0,6 | 22 Tem 2024 |
35İzleyin | CVE-2024-9415İstismar yok | Path Traversal in transformeroptimus/superagisuperagi · superagi · CWE-22 | Yüksek8,8 | — | %1,5 | 20 Mar 2025 |
35İzleyin | CVE-2024-9439İstismar yok | Remote Code Execution in transformeroptimus/superagisuperagi · superagi · CWE-94 | Yüksek8,8 | — | %1,2 | 20 Mar 2025 |
35İzleyin | CVE-2024-12048İstismar yok | IDOR Vulnerability in transformeroptimus/superagisuperagi · superagi · CWE-304 | Yüksek8,8 | — | %0,7 | 20 Mar 2025 |
35İzleyin | CVE-2024-9431İstismar yok | Improper Privilege Management in transformeroptimus/superagisuperagi · superagi · CWE-620 | Yüksek8,8 | — | %0,6 | 20 Mar 2025 |
30İzleyin | CVE-2024-9437İstismar yok | Unauthenticated Denial of Service in transformeroptimus/superagisuperagi · superagi · CWE-770 | Yüksek7,5 | — | %0,8 | 20 Mar 2025 |
30İzleyin | CVE-2024-10267İstismar yok | Information Disclosure in transformeroptimus/superagisuperagi · superagi · CWE-359 | Yüksek7,5 | — | %0,6 | 20 Mar 2025 |
30İzleyin | CVE-2023-48055İstismar yok | SuperAGI v0.0.13 was discovered to use a hardcoded key for encryption operations.superagi · superagi · CWE-798 | Yüksek7,5 | — | %0,4 | 16 Kas 2023 |
26İzleyin | CVE-2024-9447İstismar yok | Exposure of Sensitive Information in transformeroptimus/superagisuperagi · superagi · CWE-1230 | Orta6,5 | — | %0,6 | 20 Mar 2025 |
26İzleyin | CVE-2024-9418İstismar yok | Insufficiently Protected Credentials in transformeroptimus/superagisuperagi · superagi · CWE-256 | Orta6,5 | — | %0,6 | 20 Mar 2025 |
26İzleyin | CVE-2025-51472İstismar yok | Code Injection in AgentTemplate.eval_agent_config in TransformerOptimus SuperAGI 0.0.14 allows remote attackers to execute arbitrary Python superagi · superagi · CWE-77 | Orta6,5 | — | %0,4 | 22 Tem 2025 |
20İzleyin | CVE-2025-51475İstismar yok | Arbitrary File Overwrite (AFO) in superagi.controllers.resources.upload in TransformerOptimus SuperAGI 0.0.14 allows remote attackers to ovesuperagi · superagi · CWE-22 | Orta5,0 | — | %0,8 | 22 Tem 2025 |
8İzleyin | CVE-2025-6280İstismar yok | TransformerOptimus SuperAGI EmailToolKit read_email.py download_attachment path traversalsuperagi · superagi · CWE-22 | Düşük2,0 | — | %0,7 | 19 Haz 2025 |
- CVE-2024-2155239İzleyin
All versions of `SuperAGI` are vulnerable to Arbitrary Code Execution due to unsafe use of the ‘eval’ function.
KritikCVSS 9,8İstismar yokEPSS %122 Tem 2024
- CVE-2024-941535İzleyin
Path Traversal in transformeroptimus/superagi
YüksekCVSS 8,8İstismar yokEPSS %1superagi · superagi20 Mar 2025
- CVE-2024-943935İzleyin
Remote Code Execution in transformeroptimus/superagi
YüksekCVSS 8,8İstismar yokEPSS %1superagi · superagi20 Mar 2025
- CVE-2024-1204835İzleyin
IDOR Vulnerability in transformeroptimus/superagi
YüksekCVSS 8,8İstismar yokEPSS %1superagi · superagi20 Mar 2025
- CVE-2024-943135İzleyin
Improper Privilege Management in transformeroptimus/superagi
YüksekCVSS 8,8İstismar yokEPSS %1superagi · superagi20 Mar 2025
- CVE-2024-943730İzleyin
Unauthenticated Denial of Service in transformeroptimus/superagi
YüksekCVSS 7,5İstismar yokEPSS %1superagi · superagi20 Mar 2025
- CVE-2024-1026730İzleyin
Information Disclosure in transformeroptimus/superagi
YüksekCVSS 7,5İstismar yokEPSS %1superagi · superagi20 Mar 2025
- CVE-2023-4805530İzleyin
SuperAGI v0.0.13 was discovered to use a hardcoded key for encryption operations.
YüksekCVSS 7,5İstismar yokEPSS %0superagi · superagi16 Kas 2023
- CVE-2024-944726İzleyin
Exposure of Sensitive Information in transformeroptimus/superagi
OrtaCVSS 6,5İstismar yokEPSS %1superagi · superagi20 Mar 2025
- CVE-2024-941826İzleyin
Insufficiently Protected Credentials in transformeroptimus/superagi
OrtaCVSS 6,5İstismar yokEPSS %1superagi · superagi20 Mar 2025
- CVE-2025-5147226İzleyin
Code Injection in AgentTemplate.eval_agent_config in TransformerOptimus SuperAGI 0.0.14 allows remote attackers to execute arbitrary Python
OrtaCVSS 6,5İstismar yokEPSS %0superagi · superagi22 Tem 2025
- CVE-2025-5147520İzleyin
Arbitrary File Overwrite (AFO) in superagi.controllers.resources.upload in TransformerOptimus SuperAGI 0.0.14 allows remote attackers to ove
OrtaCVSS 5,0İstismar yokEPSS %1superagi · superagi22 Tem 2025
- CVE-2025-62808İzleyin
TransformerOptimus SuperAGI EmailToolKit read_email.py download_attachment path traversal
DüşükCVSS 2,0İstismar yokEPSS %1superagi · superagi19 Haz 2025