Cure53
13 kredili kayıt · son 12 ayda 8 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Bu ad yeni bir CVE'de kredilendirildiğinde haber alın
Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
30İzleyin | CVE-2026-63763İstismar yok | SurrealDB before 2.5.0 Privilege Escalation via Future Fieldssurrealdb · surrealdb · CWE-639 | Yüksek7,5 | — | %0,5 | 20 Tem 2026 |
23İzleyin | CVE-2025-71398İstismar yok | SurrealDB before 2.2.2 SSRF via HTTP Redirect Bypasssurrealdb · surrealdb · CWE-918 | Orta5,8 | — | %0,3 | 18 Tem 2026 |
28İzleyin | CVE-2025-71397İstismar yok | SurrealDB before 2.2.2 CPU Exhaustion via nested FOR loopssurrealdb · surrealdb · CWE-835 | Yüksek7,1 | — | %0,6 | 18 Tem 2026 |
9İzleyin | CVE-2025-71396İstismar yok | SurrealDB before 2.2.2 Denial of Service via JavaScript Scriptingsurrealdb · surrealdb · CWE-770 | Düşük2,3 | — | %0,6 | 18 Tem 2026 |
28İzleyin | CVE-2025-71395İstismar yok | SurrealDB before 2.2.2 Memory Exhaustion via string::replacesurrealdb · surrealdb · CWE-789 | Yüksek7,1 | — | %0,5 | 18 Tem 2026 |
9İzleyin | CVE-2025-71394İstismar yok | SurrealDB before 2.2.2 Local File Read via DEFINE ANALYZERsurrealdb · surrealdb · CWE-22 | Düşük2,3 | — | %0,4 | 18 Tem 2026 |
24İzleyin | CVE-2025-71393İstismar yok | SurrealDB before 2.2.2 Memory Exhaustion via Nested Functionssurrealdb · surrealdb · CWE-674 | Orta6,0 | — | %0,5 | 18 Tem 2026 |
37İzleyin | CVE-2025-71392İstismar yok | SurrealDB before 2.2.2 SurrealQL Injection via exportsurrealdb · surrealdb · CWE-77 | Kritik9,4 | — | %0,4 | 18 Tem 2026 |
35İzleyin | CVE-2024-9348İstismar yok | Docker Desktop before v4.34.3 allows RCE via unsanitized GitHub source link in Build viewdocker · docker desktop · CWE-20 | Yüksek8,9 | — | %0,5 | 16 Eki 2024 |
35İzleyin | CVE-2024-8696İstismar yok | A remote code execution (RCE) vulnerability via crafted extension publisher-url/additional-urls could be abused by a malicious extension in Docker Desktop befordocker · desktop · CWE-79 | Yüksek8,9 | — | %1,2 | 12 Eyl 2024 |
36İzleyin | CVE-2024-8695İstismar yok | A remote code execution (RCE) vulnerability via crafted extension description/changelog could be abused by a malicious extension in Docker Desktop before 4.34.2docker · desktop · CWE-79 | Kritik9,0 | — | %1,3 | 12 Eyl 2024 |
31İzleyin | CVE-2023-0633İstismar yok | In Docker Desktop on Windows before 4.12.0 an argument injection to installer may result in LPEdocker · docker desktop · CWE-88 | Yüksek7,8 | — | %0,4 | 25 Eyl 2023 |
31İzleyin | CVE-2023-0627İstismar yok | Docker Desktop 4.11.x allows --no-windows-containers flag bypassdocker · docker desktop · CWE-501 | Yüksek7,8 | — | %0,3 | 25 Eyl 2023 |
- CVE-2026-6376330İzleyin
SurrealDB before 2.5.0 Privilege Escalation via Future Fields
YüksekCVSS 7,5İstismar yokEPSS %0surrealdb · surrealdb20 Tem 2026
- CVE-2025-7139823İzleyin
SurrealDB before 2.2.2 SSRF via HTTP Redirect Bypass
OrtaCVSS 5,8İstismar yokEPSS %0surrealdb · surrealdb18 Tem 2026
- CVE-2025-7139728İzleyin
SurrealDB before 2.2.2 CPU Exhaustion via nested FOR loops
YüksekCVSS 7,1İstismar yokEPSS %1surrealdb · surrealdb18 Tem 2026
- CVE-2025-713969İzleyin
SurrealDB before 2.2.2 Denial of Service via JavaScript Scripting
DüşükCVSS 2,3İstismar yokEPSS %1surrealdb · surrealdb18 Tem 2026
- CVE-2025-7139528İzleyin
SurrealDB before 2.2.2 Memory Exhaustion via string::replace
YüksekCVSS 7,1İstismar yokEPSS %0surrealdb · surrealdb18 Tem 2026
- CVE-2025-713949İzleyin
SurrealDB before 2.2.2 Local File Read via DEFINE ANALYZER
DüşükCVSS 2,3İstismar yokEPSS %0surrealdb · surrealdb18 Tem 2026
- CVE-2025-7139324İzleyin
SurrealDB before 2.2.2 Memory Exhaustion via Nested Functions
OrtaCVSS 6,0İstismar yokEPSS %0surrealdb · surrealdb18 Tem 2026
- CVE-2025-7139237İzleyin
SurrealDB before 2.2.2 SurrealQL Injection via export
KritikCVSS 9,4İstismar yokEPSS %0surrealdb · surrealdb18 Tem 2026
- CVE-2024-934835İzleyin
Docker Desktop before v4.34.3 allows RCE via unsanitized GitHub source link in Build view
YüksekCVSS 8,9İstismar yokEPSS %0docker · docker desktop16 Eki 2024
- CVE-2024-869635İzleyin
A remote code execution (RCE) vulnerability via crafted extension publisher-url/additional-urls could be abused by a malicious extension in Docker Desktop befor
YüksekCVSS 8,9İstismar yokEPSS %1docker · desktop12 Eyl 2024
- CVE-2024-869536İzleyin
A remote code execution (RCE) vulnerability via crafted extension description/changelog could be abused by a malicious extension in Docker Desktop before 4.34.2
KritikCVSS 9,0İstismar yokEPSS %1docker · desktop12 Eyl 2024
- CVE-2023-063331İzleyin
In Docker Desktop on Windows before 4.12.0 an argument injection to installer may result in LPE
YüksekCVSS 7,8İstismar yokEPSS %0docker · docker desktop25 Eyl 2023
- CVE-2023-062731İzleyin
Docker Desktop 4.11.x allows --no-windows-containers flag bypass
YüksekCVSS 7,8İstismar yokEPSS %0docker · docker desktop25 Eyl 2023