ray project records
3 published records for vendor ray project.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 2 · 66.7%
- Pre-auth RCE
- 1
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-29 Path Traversal: '\..\filename'1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
- CWE-862 Missing Authorization1
The weakness classes this vendor ships most often: where to look.
CWEAll records
3 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
61This week | CVE-2023-6019Weaponized | Ray Command Injection in cpu_profile Parameterray project · ray · CWE-78 | Critical9.8 | — | 74.6% | Nov 16, 2023 |
60This week | CVE-2023-6020Weaponized | Ray Static File Local File Includeray project · ray · CWE-862 | High7.5 | — | 14.6% | Nov 16, 2023 |
41Plan | CVE-2023-6021Proof of concept | Ray Log File Local File Includeray project · ray · CWE-29 | High7.5 | — | 37.0% | Nov 16, 2023 |
- CVE-2023-601961This week
Ray Command Injection in cpu_profile Parameter
CriticalCVSS 9.8WeaponizedEPSS 74%ray project · rayNov 16, 2023
- CVE-2023-602060This week
Ray Static File Local File Include
HighCVSS 7.5WeaponizedEPSS 14%ray project · rayNov 16, 2023
- CVE-2023-602141Plan
Ray Log File Local File Include
HighCVSS 7.5Proof of conceptEPSS 37%ray project · rayNov 16, 2023