CWE-67 · 7 kayıt
Improper Handling of Windows Device Names
Bu sınıftaki CVE’ler
7 kayıt
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
27İzleyin | CVE-2026-17545İstismar yok | PHP on Windows: Reserved Device Names Are Not Rejected Before File/Stream I/O which can cause DoSphp group · php · CWE-67 | Orta6,9 | — | %0,3 | 4 gün önce |
25İzleyin | CVE-2026-27199Kavram kanıtı | Werkzeug safe_join() allows Windows special device namespalletsprojects · werkzeug · CWE-67 | Orta6,3 | — | %0,5 | 21 Şub 2026 |
25İzleyin | CVE-2025-66221İstismar yok | Werkzeug safe_join() allows Windows special device namespalletsprojects · werkzeug · CWE-67 | Orta6,3 | — | %0,5 | 28 Kas 2025 |
25İzleyin | CVE-2026-21860İstismar yok | Werkzeug safe_join() allows Windows special device names with compound extensionspalletsprojects · werkzeug · CWE-67 | Orta6,3 | — | %0,5 | 8 Oca 2026 |
25İzleyin | CVE-2026-102598İstismar yok | Werkzeug safe_join() allows Windows special device namespallets · werkzeug · CWE-67 | Orta6,3 | — | — | 1 gün önce |
21İzleyin | CVE-2024-35197İstismar yok | gix refs and paths with reserved Windows device names access the devicesbyron · gitoxide · CWE-67 | Orta5,4 | — | %0,4 | 23 May 2024 |
9İzleyin | CVE-2024-51745İstismar yok | Wasmtime doesn't fully sandbox all the Windows device filenamesbytecodealliance · wasmtime · CWE-67 | Düşük2,3 | — | %0,8 | 5 Kas 2024 |
- CVE-2026-1754527İzleyin
PHP on Windows: Reserved Device Names Are Not Rejected Before File/Stream I/O which can cause DoS
OrtaCVSS 6,9İstismar yokEPSS %0php group · php4 gün önce
- CVE-2026-2719925İzleyin
Werkzeug safe_join() allows Windows special device names
OrtaCVSS 6,3Kavram kanıtıEPSS %1palletsprojects · werkzeug21 Şub 2026
- CVE-2025-6622125İzleyin
Werkzeug safe_join() allows Windows special device names
OrtaCVSS 6,3İstismar yokEPSS %1palletsprojects · werkzeug28 Kas 2025
- CVE-2026-2186025İzleyin
Werkzeug safe_join() allows Windows special device names with compound extensions
OrtaCVSS 6,3İstismar yokEPSS %0palletsprojects · werkzeug8 Oca 2026
- CVE-2026-10259825İzleyin
Werkzeug safe_join() allows Windows special device names
OrtaCVSS 6,3İstismar yokpallets · werkzeug1 gün önce
- CVE-2024-3519721İzleyin
gix refs and paths with reserved Windows device names access the devices
OrtaCVSS 5,4İstismar yokEPSS %0byron · gitoxide23 May 2024
- CVE-2024-517459İzleyin
Wasmtime doesn't fully sandbox all the Windows device filenames
DüşükCVSS 2,3İstismar yokEPSS %1bytecodealliance · wasmtime5 Kas 2024