authzed kayıtları
authzed üreticisine ait 13 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-532 Insertion of Sensitive Information into Log File2
- CWE-190 Integer Overflow or Wraparound1
- CWE-20 Improper Input Validation1
- CWE-209 Generation of Error Message Containing Sensitive Information1
- CWE-269 Improper Privilege Management1
- CWE-277 Insecure Inherited Permissions1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
13 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
36İzleyin | CVE-2024-27101İstismar yok | Integer overflow in chunking helper causes dispatching to miss elements or panicauthzed · spicedb · CWE-190 | Kritik9,1 | — | %0,5 | 1 Mar 2024 |
32İzleyin | CVE-2022-21646İstismar yok | Lookup operations do not take into account wildcards in SpiceDBauthzed · spicedb · CWE-20 | Yüksek8,1 | — | %1,3 | 11 Oca 2022 |
30İzleyin | CVE-2023-29193İstismar yok | SpiceDB binding metrics port to untrusted networks and can leak command-line flagsauthzed · spicedb · CWE-209 | Yüksek7,5 | — | %0,8 | 14 Nis 2023 |
26İzleyin | CVE-2023-46255İstismar yok | `SPICEDB_DATASTORE_CONN_URI` is leaked when URI cannot be parsedauthzed · spicedb · CWE-532 | Orta6,5 | — | %0,4 | 31 Eki 2023 |
21İzleyin | CVE-2023-35930İstismar yok | LookupResources may return partial results in spicedbauthzed · spicedb · CWE-913 | Orta5,3 | — | %0,4 | 26 Haz 2023 |
21İzleyin | CVE-2024-38361İstismar yok | Permissions processing error in spacedbauthzed · spicedb · CWE-281 | Orta5,3 | — | %0,4 | 20 Haz 2024 |
21İzleyin | CVE-2025-49011İstismar yok | SpiceDB checks involving relations with caveats can result in no permission when permission is expectedauthzed · spicedb · CWE-358 | Orta5,3 | — | %0,3 | 6 Haz 2025 |
21İzleyin | CVE-2024-46989İstismar yok | Multiple caveats on resources of the same type can result in no permission when permission is expectedauthzed · spicedb · CWE-269 | Orta5,3 | — | %0,3 | 18 Eyl 2024 |
17İzleyin | CVE-2024-32001İstismar yok | SpiceDB: LookupSubjects may return partial results if a specific kind of relation is usedauthzed · spicedb · CWE-755 | Orta4,3 | — | %0,6 | 10 Nis 2024 |
17İzleyin | CVE-2026-40091İstismar yok | SpiceDB: SPICEDB_DATASTORE_CONN_URI is leaked on startup logsauthzed · spicedb · CWE-532 | Orta4,4 | — | %0,2 | 15 Nis 2026 |
11İzleyin | CVE-2025-65111İstismar yok | SpiceDB's LookupResources with Multiple Entrypoints across Different Definitions Can Return Incomplete Resultsauthzed · spicedb · CWE-277 | Düşük2,9 | — | %0,2 | 21 Kas 2025 |
10İzleyin | CVE-2025-64529İstismar yok | SpiceDB's WriteRelationships fails silently if payload is too bigauthzed · spicedb · CWE-770 | Düşük2,7 | — | %0,2 | 10 Kas 2025 |
9İzleyin | CVE-2024-48909İstismar yok | SpiceDB calls to LookupResources using LookupResources2 with caveats may return context is missing when it is notauthzed · spicedb · CWE-172 | Düşük2,4 | — | %0,3 | 14 Eki 2024 |
- CVE-2024-2710136İzleyin
Integer overflow in chunking helper causes dispatching to miss elements or panic
KritikCVSS 9,1İstismar yokEPSS %0authzed · spicedb1 Mar 2024
- CVE-2022-2164632İzleyin
Lookup operations do not take into account wildcards in SpiceDB
YüksekCVSS 8,1İstismar yokEPSS %1authzed · spicedb11 Oca 2022
- CVE-2023-2919330İzleyin
SpiceDB binding metrics port to untrusted networks and can leak command-line flags
YüksekCVSS 7,5İstismar yokEPSS %1authzed · spicedb14 Nis 2023
- CVE-2023-4625526İzleyin
`SPICEDB_DATASTORE_CONN_URI` is leaked when URI cannot be parsed
OrtaCVSS 6,5İstismar yokEPSS %0authzed · spicedb31 Eki 2023
- CVE-2023-3593021İzleyin
LookupResources may return partial results in spicedb
OrtaCVSS 5,3İstismar yokEPSS %0authzed · spicedb26 Haz 2023
- CVE-2024-3836121İzleyin
Permissions processing error in spacedb
OrtaCVSS 5,3İstismar yokEPSS %0authzed · spicedb20 Haz 2024
- CVE-2025-4901121İzleyin
SpiceDB checks involving relations with caveats can result in no permission when permission is expected
OrtaCVSS 5,3İstismar yokEPSS %0authzed · spicedb6 Haz 2025
- CVE-2024-4698921İzleyin
Multiple caveats on resources of the same type can result in no permission when permission is expected
OrtaCVSS 5,3İstismar yokEPSS %0authzed · spicedb18 Eyl 2024
- CVE-2024-3200117İzleyin
SpiceDB: LookupSubjects may return partial results if a specific kind of relation is used
OrtaCVSS 4,3İstismar yokEPSS %1authzed · spicedb10 Nis 2024
- CVE-2026-4009117İzleyin
SpiceDB: SPICEDB_DATASTORE_CONN_URI is leaked on startup logs
OrtaCVSS 4,4İstismar yokEPSS %0authzed · spicedb15 Nis 2026
- CVE-2025-6511111İzleyin
SpiceDB's LookupResources with Multiple Entrypoints across Different Definitions Can Return Incomplete Results
DüşükCVSS 2,9İstismar yokEPSS %0authzed · spicedb21 Kas 2025
- CVE-2025-6452910İzleyin
SpiceDB's WriteRelationships fails silently if payload is too big
DüşükCVSS 2,7İstismar yokEPSS %0authzed · spicedb10 Kas 2025
- CVE-2024-489099İzleyin
SpiceDB calls to LookupResources using LookupResources2 with caveats may return context is missing when it is not
DüşükCVSS 2,4İstismar yokEPSS %0authzed · spicedb14 Eki 2024