AlistGo kayıtları
alistgo üreticisine ait 9 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %66,7
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-434 Unrestricted Upload of File with Dangerous Type2
- CWE-295 Improper Certificate Validation1
- CWE-863 Incorrect Authorization1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
9 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2022-45969İstismar yok | Alist v3.4.0 is vulnerable to Directory Traversal,alistgo · alist · CWE-22 | Kritik9,8 | — | %1,2 | 15 Ara 2022 |
35İzleyin | CVE-2022-45968İstismar yok | Alist v3.4.0 is vulnerable to File Upload.alistgo · alist · CWE-434 | Yüksek8,8 | — | %1,0 | 12 Ara 2022 |
35İzleyin | CVE-2026-25161İstismar yok | Alist vulnerable to Path Traversal in multiple file operation handlersalistgo · alist · CWE-22 | Yüksek8,8 | — | %0,8 | 4 Şub 2026 |
35İzleyin | CVE-2023-33498İstismar yok | alist <=3.16.3 is vulnerable to Incorrect Access Control.alistgo · alist · CWE-434 | Yüksek8,8 | — | %0,7 | 7 Haz 2023 |
30İzleyin | CVE-2023-31726İstismar yok | AList 3.15.1 is vulnerable to Incorrect Access Control, which can be exploited by attackers to obtain sensitive information.alistgo · alist · CWE-863 | Yüksek7,5 | — | %1,1 | 23 May 2023 |
29İzleyin | CVE-2026-25160İstismar yok | Alist has Insecure TLS Configalistgo · alist · CWE-295 | Yüksek7,4 | — | %0,2 | 4 Şub 2026 |
24İzleyin | CVE-2022-26533İstismar yok | Alist v2.1.0 and below was discovered to contain a cross-site scripting (XSS) vulnerability via /i/:data/ipa.plist.alistgo · alist · CWE-79 | Orta6,1 | — | %0,7 | 11 Mar 2022 |
21İzleyin | CVE-2022-45970İstismar yok | Alist v3.5.1 is vulnerable to Cross Site Scripting (XSS) via the bulletin board.alistgo · alist · CWE-79 | Orta5,4 | — | %0,5 | 12 Ara 2022 |
20İzleyin | CVE-2024-47067İstismar yok | Alist Contains a Reflected Cross-Site Scripting Vulnerabilityalistgo · alist · CWE-79 | Orta5,1 | — | %0,4 | 30 Eyl 2024 |
- CVE-2022-4596939İzleyin
Alist v3.4.0 is vulnerable to Directory Traversal,
KritikCVSS 9,8İstismar yokEPSS %1alistgo · alist15 Ara 2022
- CVE-2022-4596835İzleyin
Alist v3.4.0 is vulnerable to File Upload.
YüksekCVSS 8,8İstismar yokEPSS %1alistgo · alist12 Ara 2022
- CVE-2026-2516135İzleyin
Alist vulnerable to Path Traversal in multiple file operation handlers
YüksekCVSS 8,8İstismar yokEPSS %1alistgo · alist4 Şub 2026
- CVE-2023-3349835İzleyin
alist <=3.16.3 is vulnerable to Incorrect Access Control.
YüksekCVSS 8,8İstismar yokEPSS %1alistgo · alist7 Haz 2023
- CVE-2023-3172630İzleyin
AList 3.15.1 is vulnerable to Incorrect Access Control, which can be exploited by attackers to obtain sensitive information.
YüksekCVSS 7,5İstismar yokEPSS %1alistgo · alist23 May 2023
- CVE-2026-2516029İzleyin
Alist has Insecure TLS Config
YüksekCVSS 7,4İstismar yokEPSS %0alistgo · alist4 Şub 2026
- CVE-2022-2653324İzleyin
Alist v2.1.0 and below was discovered to contain a cross-site scripting (XSS) vulnerability via /i/:data/ipa.plist.
OrtaCVSS 6,1İstismar yokEPSS %1alistgo · alist11 Mar 2022
- CVE-2022-4597021İzleyin
Alist v3.5.1 is vulnerable to Cross Site Scripting (XSS) via the bulletin board.
OrtaCVSS 5,4İstismar yokEPSS %0alistgo · alist12 Ara 2022
- CVE-2024-4706720İzleyin
Alist Contains a Reflected Cross-Site Scripting Vulnerability
OrtaCVSS 5,1İstismar yokEPSS %0alistgo · alist30 Eyl 2024