RyotaK
Flatt Security Inc.
13 kredili kayıt · son 12 ayda 4 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Bu ad yeni bir CVE'de kredilendirildiğinde haber alın
Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2026-2780İstismar yok | Privilege escalation in the Netmonitor componentmozilla · firefox · CWE-269 | Kritik9,8 | — | %0,3 | 24 Şub 2026 |
30İzleyin | CVE-2025-12741İstismar yok | Arbitrary File Write in Denodo dialect of Looker allows Remote Code Executiongoogle cloud · looker · CWE-20 | Yüksek7,7 | — | %0,2 | 24 Kas 2025 |
30İzleyin | CVE-2025-12740İstismar yok | Remote Command Execution in Looker via IBM DB2 JDBC drivegoogle cloud · looker · CWE-20 | Yüksek7,7 | — | %0,2 | 24 Kas 2025 |
28İzleyin | CVE-2025-12472İstismar yok | Remote Code Execution in Looker due to Improperly Validated Directory Deletiongoogle cloud · looker · CWE-362 | Yüksek7,1 | — | %0,2 | 19 Kas 2025 |
20İzleyin | CVE-2025-8153İstismar yok | Cross-site Scripting vulnerability in NEC Corporation UNIVERGE IX from Ver.9.5 to Ver.10.7, from Ver.10.8.21 to Ver.10.8.36, from Ver.10.9.1nec corporation · univerge ix · CWE-79 | Orta5,1 | — | %0,3 | 16 Eyl 2025 |
17İzleyin | CVE-2024-11014İstismar yok | Cross-site request forgery (CSRF) vulnerability in NEC Corporation UNIVERGE IX from Ver9.2 to Ver10.10.21, for Ver10.8 up to Ver10.8.27 and nec corporation · univerge ix · CWE-352 | Orta4,3 | — | %0,1 | 29 Kas 2024 |
28İzleyin | CVE-2024-11013İstismar yok | Command Injection vulnerability in NEC Corporation UNIVERGE IX from Ver9.2 to Ver10.10.21, for Ver10.8 up to Ver10.8.27, for Ver10.9 up to Vnec corporation · univerge ix · CWE-77 | Yüksek7,2 | — | %1,1 | 29 Kas 2024 |
38İzleyin | CVE-2024-52308İstismar yok | Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computergithub · cli · CWE-77 | Kritik9,6 | — | %0,9 | 14 Kas 2024 |
30İzleyin | CVE-2024-8927İstismar yok | cgi.force_redirect configuration is bypassable due to the environment variable collisionphp · php · CWE-1220 | Yüksek7,5 | — | %1,0 | 8 Eki 2024 |
47Planlayın | CVE-2024-1874Kavram kanıtı | Command injection via array-ish $command parameter of proc_open()php · php · CWE-116 | Kritik9,4 | — | %32,7 | 29 Nis 2024 |
36İzleyin | CVE-2023-4759İstismar yok | Improper handling of case insensitive filesystems in Eclipse JGit allows arbitrary file writeeclipse · jgit · CWE-59 | Yüksek8,8 | — | %2,1 | 12 Eyl 2023 |
35İzleyin | CVE-2023-22381İstismar yok | Code injection in GitHub Enterprise Server leading to arbitrary environment variables in GitHub Actionsgithub · enterprise server · CWE-94 | Yüksek8,8 | — | %0,8 | 2 Mar 2023 |
31İzleyin | CVE-2021-22539İstismar yok | Code execution in VSCode-bazel via malicious Bazel config filesgoogle · bazel · CWE-73 | Yüksek7,8 | — | %0,3 | 16 Nis 2021 |
- CVE-2026-278039İzleyin
Privilege escalation in the Netmonitor component
KritikCVSS 9,8İstismar yokEPSS %0mozilla · firefox24 Şub 2026
- CVE-2025-1274130İzleyin
Arbitrary File Write in Denodo dialect of Looker allows Remote Code Execution
YüksekCVSS 7,7İstismar yokEPSS %0google cloud · looker24 Kas 2025
- CVE-2025-1274030İzleyin
Remote Command Execution in Looker via IBM DB2 JDBC drive
YüksekCVSS 7,7İstismar yokEPSS %0google cloud · looker24 Kas 2025
- CVE-2025-1247228İzleyin
Remote Code Execution in Looker due to Improperly Validated Directory Deletion
YüksekCVSS 7,1İstismar yokEPSS %0google cloud · looker19 Kas 2025
- CVE-2025-815320İzleyin
Cross-site Scripting vulnerability in NEC Corporation UNIVERGE IX from Ver.9.5 to Ver.10.7, from Ver.10.8.21 to Ver.10.8.36, from Ver.10.9.1
OrtaCVSS 5,1İstismar yokEPSS %0nec corporation · univerge ix16 Eyl 2025
- CVE-2024-1101417İzleyin
Cross-site request forgery (CSRF) vulnerability in NEC Corporation UNIVERGE IX from Ver9.2 to Ver10.10.21, for Ver10.8 up to Ver10.8.27 and
OrtaCVSS 4,3İstismar yokEPSS %0nec corporation · univerge ix29 Kas 2024
- CVE-2024-1101328İzleyin
Command Injection vulnerability in NEC Corporation UNIVERGE IX from Ver9.2 to Ver10.10.21, for Ver10.8 up to Ver10.8.27, for Ver10.9 up to V
YüksekCVSS 7,2İstismar yokEPSS %1nec corporation · univerge ix29 Kas 2024
- CVE-2024-5230838İzleyin
Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer
KritikCVSS 9,6İstismar yokEPSS %0github · cli14 Kas 2024
- CVE-2024-892730İzleyin
cgi.force_redirect configuration is bypassable due to the environment variable collision
YüksekCVSS 7,5İstismar yokEPSS %1php · php8 Eki 2024
- CVE-2024-187447Planlayın
Command injection via array-ish $command parameter of proc_open()
KritikCVSS 9,4Kavram kanıtıEPSS %32php · php29 Nis 2024
- CVE-2023-475936İzleyin
Improper handling of case insensitive filesystems in Eclipse JGit allows arbitrary file write
YüksekCVSS 8,8İstismar yokEPSS %2eclipse · jgit12 Eyl 2023
- CVE-2023-2238135İzleyin
Code injection in GitHub Enterprise Server leading to arbitrary environment variables in GitHub Actions
YüksekCVSS 8,8İstismar yokEPSS %0github · enterprise server2 Mar 2023
- CVE-2021-2253931İzleyin
Code execution in VSCode-bazel via malicious Bazel config files
YüksekCVSS 7,8İstismar yokEPSS %0google · bazel16 Nis 2021