Anonymous working with Trend Micro Zero Day Initiative.
32 kredili kayıt · son 12 ayda 9 · 1 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2024-23476İstismar yok | SolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution Vulnerabilitysolarwinds · access rights manager · CWE-22 | Kritik9,6 | — | %7,1 | 15 Şub 2024 |
37İzleyin | CVE-2023-40057İstismar yok | SolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code Executionsolarwinds · access rights manager · CWE-502 | Kritik9,0 | — | %4,9 | 15 Şub 2024 |
26İzleyin | CVE-2023-40058İstismar yok | Sensitive Information Disclosure Vulnerabilitysolarwinds · access rights manager · CWE-200 | Orta6,5 | — | %0,8 | 21 Ara 2023 |
49Planlayın | CVE-2022-22721İstismar yok | core: Possible buffer overflow with very large or unlimited LimitXMLRequestBodyapache · http server · CWE-190 | Kritik9,1 | — | %41,7 | 14 Mar 2022 |
68Bu hafta | CVE-2021-44790Kavram kanıtı | Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlierapache · http server · CWE-787 | Kritik9,8 | — | %96,8 | 20 Ara 2021 |
35İzleyin | CVE-2021-35212İstismar yok | Blind SQL injection Vulnerabilitysolarwinds · orion platform · CWE-89 | Yüksek8,8 | — | %1,6 | 31 Ağu 2021 |
36İzleyin | CVE-2021-35213İstismar yok | Orion User setting Improper Access Control Privilege Escalation Vulnerabilitysolarwinds · orion platform · CWE-284 | Yüksek8,8 | — | %3,4 | 31 Ağu 2021 |
- CVE-2024-2347640Planlayın
SolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution Vulnerability
KritikCVSS 9,6İstismar yokEPSS %7solarwinds · access rights manager15 Şub 2024
- CVE-2023-4005737İzleyin
SolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code Execution
KritikCVSS 9,0İstismar yokEPSS %5solarwinds · access rights manager15 Şub 2024
- CVE-2023-4005826İzleyin
Sensitive Information Disclosure Vulnerability
OrtaCVSS 6,5İstismar yokEPSS %1solarwinds · access rights manager21 Ara 2023
- CVE-2022-2272149Planlayın
core: Possible buffer overflow with very large or unlimited LimitXMLRequestBody
KritikCVSS 9,1İstismar yokEPSS %42apache · http server14 Mar 2022
- CVE-2021-4479068Bu hafta
Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier
KritikCVSS 9,8Kavram kanıtıEPSS %97apache · http server20 Ara 2021
- CVE-2021-3521235İzleyin
Blind SQL injection Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %2solarwinds · orion platform31 Ağu 2021
- CVE-2021-3521336İzleyin
Orion User setting Improper Access Control Privilege Escalation Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %3solarwinds · orion platform31 Ağu 2021