4ra1n
Chaitin Tech and pwnull
15 kredili kayıt · son 12 ayda 4 · 1 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Bu ad yeni bir CVE'de kredilendirildiğinde haber alın
Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
26İzleyin | CVE-2026-46718İstismar yok | Apache Calcite: A user-controled model can load arbitrary classes, leading to code executionapache · calcite · CWE-470 | Orta6,5 | — | %0,4 | 2 Haz 2026 |
32İzleyin | CVE-2026-42588Kavram kanıtı | Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Remote Code Execution via Jolokia addNetworkConnectorapache · activemq · CWE-20 | Yüksek8,1 | — | %0,7 | 1 Haz 2026 |
24İzleyin | CVE-2026-42253İstismar yok | Apache ActiveMQ, Apache ActiveMQ Web: HTTP Response Header Injection via JMS Message Propertiesapache · activemq · CWE-79 | Orta6,1 | — | %1,0 | 1 Haz 2026 |
4İzleyin | CVE-2026-23901İstismar yok | Apache Shiro: Brute force attack possible to determine valid user namesapache · shiro · CWE-208 | Düşük1,0 | — | %0,2 | 10 Şub 2026 |
36İzleyin | CVE-2024-51504İstismar yok | Apache ZooKeeper: Authentication bypass with IP-based authentication in Admin Serverapache · zookeeper · CWE-290 | Kritik9,1 | — | %0,9 | 7 Kas 2024 |
99Hemen | CVE-2024-38856Silahlaştırılmış | Apache OFBiz: Unauthenticated endpoint could allow execution of screen rendering codeapache · ofbiz · CWE-863 | Kritik9,8 | KEV | %99,4 | 5 Ağu 2024 |
30İzleyin | CVE-2023-31058İstismar yok | Apache InLong: JDBC URL bypassing by adding blanksapache · inlong · CWE-502 | Yüksek7,5 | — | %1,2 | 22 May 2023 |
40Planlayın | CVE-2023-27603İstismar yok | Apache Linkis Mangaer module engineConn material upload exists Zip Slip issueapache · linkis · CWE-22 | Kritik9,8 | — | %1,8 | 10 Nis 2023 |
39İzleyin | CVE-2023-25613İstismar yok | LDAP Injection Vulnerability in Apache Kerbyapache · kerby ldap backend · CWE-74 | Kritik9,8 | — | %1,4 | 20 Şub 2023 |
40Planlayın | CVE-2022-45875İstismar yok | Apache DolphinScheduler: Remote command execution Vulnerability in script alert pluginapache · dolphinscheduler · CWE-20 | Kritik9,8 | — | %2,7 | 4 Oca 2023 |
21İzleyin | CVE-2022-45910İstismar yok | Apache ManifoldCF: LDAP Injection Vulnerability - ActiveDirectory Authoritiesapache · manifoldcf · CWE-90 | Orta5,3 | — | %1,6 | 7 Ara 2022 |
30İzleyin | CVE-2022-43766İstismar yok | Apache IoTDB prior to 0.13.3 allows DoSapache · iotdb · CWE-400 | Yüksek7,5 | — | %1,6 | 26 Eki 2022 |
31İzleyin | CVE-2022-41704İstismar yok | Apache Batik prior to 1.16 allows RCE when loading untrusted SVG inputapache · batik · CWE-918 | Yüksek7,5 | — | %3,1 | 25 Eki 2022 |
36İzleyin | CVE-2022-40955İstismar yok | Deserialization attack in Apache InLong prior to version 1.3.0 allows RCE via JDBCapache · inlong · CWE-502 | Yüksek8,8 | — | %2,6 | 20 Eyl 2022 |
47Planlayın | CVE-2022-32532Kavram kanıtı | Authentication Bypass Vulnerabilityapache · shiro · CWE-863 | Kritik9,8 | — | %25,5 | 28 Haz 2022 |
- CVE-2026-4671826İzleyin
Apache Calcite: A user-controled model can load arbitrary classes, leading to code execution
OrtaCVSS 6,5İstismar yokEPSS %0apache · calcite2 Haz 2026
- CVE-2026-4258832İzleyin
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Remote Code Execution via Jolokia addNetworkConnector
YüksekCVSS 8,1Kavram kanıtıEPSS %0apache · activemq1 Haz 2026
- CVE-2026-4225324İzleyin
Apache ActiveMQ, Apache ActiveMQ Web: HTTP Response Header Injection via JMS Message Properties
OrtaCVSS 6,1İstismar yokEPSS %1apache · activemq1 Haz 2026
- CVE-2026-239014İzleyin
Apache Shiro: Brute force attack possible to determine valid user names
DüşükCVSS 1,0İstismar yokEPSS %0apache · shiro10 Şub 2026
- CVE-2024-5150436İzleyin
Apache ZooKeeper: Authentication bypass with IP-based authentication in Admin Server
KritikCVSS 9,1İstismar yokEPSS %0apache · zookeeper7 Kas 2024
- CVE-2024-3885699Hemen
Apache OFBiz: Unauthenticated endpoint could allow execution of screen rendering code
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99apache · ofbiz5 Ağu 2024
- CVE-2023-3105830İzleyin
Apache InLong: JDBC URL bypassing by adding blanks
YüksekCVSS 7,5İstismar yokEPSS %1apache · inlong22 May 2023
- CVE-2023-2760340Planlayın
Apache Linkis Mangaer module engineConn material upload exists Zip Slip issue
KritikCVSS 9,8İstismar yokEPSS %1apache · linkis10 Nis 2023
- CVE-2023-2561339İzleyin
LDAP Injection Vulnerability in Apache Kerby
KritikCVSS 9,8İstismar yokEPSS %1apache · kerby ldap backend20 Şub 2023
- CVE-2022-4587540Planlayın
Apache DolphinScheduler: Remote command execution Vulnerability in script alert plugin
KritikCVSS 9,8İstismar yokEPSS %2apache · dolphinscheduler4 Oca 2023
- CVE-2022-4591021İzleyin
Apache ManifoldCF: LDAP Injection Vulnerability - ActiveDirectory Authorities
OrtaCVSS 5,3İstismar yokEPSS %1apache · manifoldcf7 Ara 2022
- CVE-2022-4376630İzleyin
Apache IoTDB prior to 0.13.3 allows DoS
YüksekCVSS 7,5İstismar yokEPSS %1apache · iotdb26 Eki 2022
- CVE-2022-4170431İzleyin
Apache Batik prior to 1.16 allows RCE when loading untrusted SVG input
YüksekCVSS 7,5İstismar yokEPSS %3apache · batik25 Eki 2022
- CVE-2022-4095536İzleyin
Deserialization attack in Apache InLong prior to version 1.3.0 allows RCE via JDBC
YüksekCVSS 8,8İstismar yokEPSS %2apache · inlong20 Eyl 2022
- CVE-2022-3253247Planlayın
Authentication Bypass Vulnerability
KritikCVSS 9,8Kavram kanıtıEPSS %25apache · shiro28 Haz 2022