CWE-1327 · 24 kayıt
Binding to an Unrestricted IP Address
Bu sınıftaki CVE’ler
24 kayıt
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
41Planlayın | CVE-2026-82456Kavram kanıtı | argocd-mcp 0.8.0 Authentication Bypass via Unauthenticated HTTPargoproj-labs · argocd-mcp · CWE-1327 | Kritik10,0 | — | %1,7 | 29 Ağu 2026 |
39İzleyin | CVE-2026-20212Kavram kanıtı | Cisco Nexus 3000 and 9000 Series Switches Silicon One Hardware Abstraction Layer Remote Code Execution Vulnerabilitycisco · cisco nx-os software · CWE-1327 | Kritik9,8 | — | %0,7 | 2 Eyl 2026 |
39İzleyin | CVE-2026-24015İstismar yok | Apache IoTDB: Insecure Default Configuration Vulnerabilityapache · iotdb · CWE-1327 | Kritik9,8 | — | %0,6 | 9 Mar 2026 |
37İzleyin | CVE-2025-61934İstismar yok | AutomationDirect Productivity Suite Binding to an Unrestricted IP Address CWE-1327automationdirect · productivity suite · CWE-1327 | Kritik9,3 | — | %0,7 | 23 Eki 2025 |
36İzleyin | CVE-2024-47176Silahlaştırılmış | cups-browsed binds to `INADDR_ANY:631`, trusting any packet from any sourceopenprinting · cups-browsed · CWE-1327 | Orta5,3 | — | %50,6 | 26 Eyl 2024 |
36İzleyin | CVE-2026-0481İstismar yok | Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to perform unauthorized chamd · amd instinct™ mi210 · CWE-1327 | Kritik9,2 | — | %0,3 | 15 May 2026 |
35İzleyin | CVE-2026-42503İstismar yok | Accidental binding to INADDR_ANY might lead to RCE in golang.org/x/tools/goplsgolang · gopls · CWE-1327 | Yüksek8,8 | — | %0,3 | 6 May 2026 |
32İzleyin | CVE-2026-75021İstismar yok | fastify-cli vulnerable to remote code execution via ignored explicit Inspector bind addressfastify-cli · fastify-cli · CWE-1327 | Yüksek8,1 | — | %0,7 | 8 Eyl 2026 |
32İzleyin | CVE-2026-47873İstismar yok | Spring Tools Docker integration publishes unauthenticated debug (JDWP) and JMX ports on all network interfacesbroadcom · spring tools · CWE-1327 | Yüksek8,0 | — | %0,3 | 30 Tem 2026 |
31İzleyin | CVE-2023-1968İstismar yok | Instruments with Illumina Universal Copy Service v2.x are vulnerable due to binding to an unrestricted IP address.illumina · iscan firmware · CWE-1327 | Yüksek7,5 | — | %1,8 | 28 Nis 2023 |
30İzleyin | CVE-2023-41742İstismar yok | Excessive attack surface due to binding to an unrestricted IP address.acronis · agent · CWE-1327 | Yüksek7,5 | — | %0,5 | 31 Ağu 2023 |
29İzleyin | CVE-2025-55322İstismar yok | OmniParser Remote Code Execution Vulnerabilitymicrosoft · omniparser · CWE-1327 | Yüksek7,3 | — | %0,4 | 24 Eyl 2025 |
27İzleyin | CVE-2025-11538İstismar yok | Keycloak-server: debug default bind addresskeycloak · keycloak · CWE-1327 | Orta6,8 | — | %0,4 | 13 Kas 2025 |
27İzleyin | GHSA-7m9g-pmxf-m9m8İstismar yok | Duplicate Advisory: Keycloak allows Binding to an Unrestricted IP AddressMaven · org.keycloak:keycloak-quarkus-server · CWE-1327 | Orta6,8 | — | — | 13 Kas 2025 |
26İzleyin | CVE-2026-21528İstismar yok | Azure IoT Explorer Information Disclosure Vulnerabilitymicrosoft · azure iot explorer · CWE-1327 | Orta6,5 | — | %0,5 | 10 Şub 2026 |
25İzleyin | CVE-2026-28395İstismar yok | OpenClaw 2026.1.14-1 < 2026.2.12 - Unintended Public Binding of Chrome Extension Relay via Wildcard cdpUrlopenclaw · openclaw · CWE-1327 | Orta6,3 | — | %0,7 | 5 Mar 2026 |
23İzleyin | CVE-2023-5398İstismar yok | Server receiving a malformed message based on a list of IPs resulting in heap corruption causing a denial of service.honeywell · experion server · CWE-1327 | Orta5,9 | — | %0,4 | 17 Nis 2024 |
21İzleyin | CVE-2024-36105İstismar yok | dbt allows Binding to an Unrestricted IP Address via socketsocketdbt-labs · dbt-core · CWE-1327 | Orta5,3 | — | %0,7 | 27 May 2024 |
21İzleyin | CVE-2026-16713İstismar yok | IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code executionibm · documentation offline · CWE-1327 | Orta5,3 | — | %0,5 | 13 Ağu 2026 |
21İzleyin | CVE-2026-100868İstismar yok | Penpot before 2.18.0 Unauthenticated WebSocket Access via MCP Bridgepenpot · penpot · CWE-1327 | Orta5,3 | — | %0,3 | 27 Eyl 2026 |
17İzleyin | CVE-2024-49383İstismar yok | Excessive attack surface in acep-importer service due to binding to an unrestricted IP address.acronis · cyber protect · CWE-1327 | Orta4,3 | — | %0,2 | 15 Eki 2024 |
17İzleyin | CVE-2024-49382İstismar yok | Excessive attack surface in archive-server service due to binding to an unrestricted IP address.acronis · cyber protect · CWE-1327 | Orta4,3 | — | %0,2 | 15 Eki 2024 |
17İzleyin | CVE-2024-49384İstismar yok | Excessive attack surface in acep-collector service due to binding to an unrestricted IP address.acronis · cyber protect · CWE-1327 | Orta4,3 | — | %0,2 | 15 Eki 2024 |
14İzleyin | CVE-2022-29820İstismar yok | In JetBrains PyCharm before 2022.1 exposure of the debugger port to the internal network was possiblejetbrains · pycharm · CWE-1327 | Düşük3,5 | — | %0,4 | 28 Nis 2022 |
- CVE-2026-8245641Planlayın
argocd-mcp 0.8.0 Authentication Bypass via Unauthenticated HTTP
KritikCVSS 10,0Kavram kanıtıEPSS %2argoproj-labs · argocd-mcp29 Ağu 2026
- CVE-2026-2021239İzleyin
Cisco Nexus 3000 and 9000 Series Switches Silicon One Hardware Abstraction Layer Remote Code Execution Vulnerability
KritikCVSS 9,8Kavram kanıtıEPSS %1cisco · cisco nx-os software2 Eyl 2026
- CVE-2026-2401539İzleyin
Apache IoTDB: Insecure Default Configuration Vulnerability
KritikCVSS 9,8İstismar yokEPSS %1apache · iotdb9 Mar 2026
- CVE-2025-6193437İzleyin
AutomationDirect Productivity Suite Binding to an Unrestricted IP Address CWE-1327
KritikCVSS 9,3İstismar yokEPSS %1automationdirect · productivity suite23 Eki 2025
- CVE-2024-4717636İzleyin
cups-browsed binds to `INADDR_ANY:631`, trusting any packet from any source
OrtaCVSS 5,3SilahlaştırılmışEPSS %51openprinting · cups-browsed26 Eyl 2024
- CVE-2026-048136İzleyin
Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to perform unauthorized ch
KritikCVSS 9,2İstismar yokEPSS %0amd · amd instinct™ mi21015 May 2026
- CVE-2026-4250335İzleyin
Accidental binding to INADDR_ANY might lead to RCE in golang.org/x/tools/gopls
YüksekCVSS 8,8İstismar yokEPSS %0golang · gopls6 May 2026
- CVE-2026-7502132İzleyin
fastify-cli vulnerable to remote code execution via ignored explicit Inspector bind address
YüksekCVSS 8,1İstismar yokEPSS %1fastify-cli · fastify-cli8 Eyl 2026
- CVE-2026-4787332İzleyin
Spring Tools Docker integration publishes unauthenticated debug (JDWP) and JMX ports on all network interfaces
YüksekCVSS 8,0İstismar yokEPSS %0broadcom · spring tools30 Tem 2026
- CVE-2023-196831İzleyin
Instruments with Illumina Universal Copy Service v2.x are vulnerable due to binding to an unrestricted IP address.
YüksekCVSS 7,5İstismar yokEPSS %2illumina · iscan firmware28 Nis 2023
- CVE-2023-4174230İzleyin
Excessive attack surface due to binding to an unrestricted IP address.
YüksekCVSS 7,5İstismar yokEPSS %0acronis · agent31 Ağu 2023
- CVE-2025-5532229İzleyin
OmniParser Remote Code Execution Vulnerability
YüksekCVSS 7,3İstismar yokEPSS %0microsoft · omniparser24 Eyl 2025
- CVE-2025-1153827İzleyin
Keycloak-server: debug default bind address
OrtaCVSS 6,8İstismar yokEPSS %0keycloak · keycloak13 Kas 2025
- GHSA-7m9g-pmxf-m9m827İzleyin
Duplicate Advisory: Keycloak allows Binding to an Unrestricted IP Address
OrtaCVSS 6,8İstismar yokMaven · org.keycloak:keycloak-quarkus-server13 Kas 2025
- CVE-2026-2152826İzleyin
Azure IoT Explorer Information Disclosure Vulnerability
OrtaCVSS 6,5İstismar yokEPSS %1microsoft · azure iot explorer10 Şub 2026
- CVE-2026-2839525İzleyin
OpenClaw 2026.1.14-1 < 2026.2.12 - Unintended Public Binding of Chrome Extension Relay via Wildcard cdpUrl
OrtaCVSS 6,3İstismar yokEPSS %1openclaw · openclaw5 Mar 2026
- CVE-2023-539823İzleyin
Server receiving a malformed message based on a list of IPs resulting in heap corruption causing a denial of service.
OrtaCVSS 5,9İstismar yokEPSS %0honeywell · experion server17 Nis 2024
- CVE-2024-3610521İzleyin
dbt allows Binding to an Unrestricted IP Address via socketsocket
OrtaCVSS 5,3İstismar yokEPSS %1dbt-labs · dbt-core27 May 2024
- CVE-2026-1671321İzleyin
IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution
OrtaCVSS 5,3İstismar yokEPSS %0ibm · documentation offline13 Ağu 2026
- CVE-2026-10086821İzleyin
Penpot before 2.18.0 Unauthenticated WebSocket Access via MCP Bridge
OrtaCVSS 5,3İstismar yokEPSS %0penpot · penpot27 Eyl 2026
- CVE-2024-4938317İzleyin
Excessive attack surface in acep-importer service due to binding to an unrestricted IP address.
OrtaCVSS 4,3İstismar yokEPSS %0acronis · cyber protect15 Eki 2024
- CVE-2024-4938217İzleyin
Excessive attack surface in archive-server service due to binding to an unrestricted IP address.
OrtaCVSS 4,3İstismar yokEPSS %0acronis · cyber protect15 Eki 2024
- CVE-2024-4938417İzleyin
Excessive attack surface in acep-collector service due to binding to an unrestricted IP address.
OrtaCVSS 4,3İstismar yokEPSS %0acronis · cyber protect15 Eki 2024
- CVE-2022-2982014İzleyin
In JetBrains PyCharm before 2022.1 exposure of the debugger port to the internal network was possible
DüşükCVSS 3,5İstismar yokEPSS %0jetbrains · pycharm28 Nis 2022