İçeriğe atla
Noroxi

BlackBerry kayıtları

BlackBerry üreticisine ait 93 yayımlanmış kayıt. Bunların 2 tanesi sahada sömürüldü (CISA KEV listesinde), 3 tanesi için hazır saldırı aracı var.

Ürüne göre süzün ↓

Araştırmacı profili

KEV’e giren
2 · %2,2
Silahlaştırılmış
3 · %3,2
Pre-auth RCE
9
Düzeltme kaydı olan
%3,2
Yayından KEV’e ortanca
645 gün

Pre-auth RCE: saldırganın hesabı olmadan, ağ üzerinden kod çalıştırabildiği açıklar. Yayından KEV’e ortanca: sahada sömürülen kayıtların yayımlanmasıyla CISA listesine girmesi arasındaki tipik süre.

Yıllara göre kayıt

  1. 16
  2. 17
  3. 18
  4. 19
  5. 20
  6. 21
  7. 22
  8. 23
  9. 24
  10. 25
  11. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

93 kayıt
  • CVE-2020-1938
    99Hemen

    When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    apache · geode24 Şub 2020

  • CVE-2020-11652
    82Hemen

    An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2.

    OrtaCVSS 6,5KEVSilahlaştırılmışEPSS %86

    saltstack · salt30 Nis 2020

  • CVE-2020-6932
    40Planlayın

    An information disclosure and remote code execution vulnerability in the slinger web server of the BlackBerry QNX Software Development Platf

    KritikCVSS 9,8İstismar yokEPSS %3

    blackberry · qnx software development platform12 Ağu 2020

  • CVE-2014-2533
    40Planlayın

    /sbin/ifwatchd in BlackBerry QNX Neutrino RTOS 6.4.x and 6.5.x allows local users to gain privileges by providing an arbitrary program name

    YüksekCVSS 7,2SilahlaştırılmışEPSS %2

    blackberry · qnx neutrino rtos18 Mar 2014

  • CVE-2021-32024
    40Planlayın

    A remote code execution vulnerability in the BMP image codec of BlackBerry QNX SDP version(s) 6.4 to 7.1 could allow an attacker to potentia

    KritikCVSS 9,8İstismar yokEPSS %1

    blackberry · qnx software development platform13 Ara 2021

  • CVE-2021-22156
    40Planlayın

    An integer overflow vulnerability in the calloc() function of the C runtime library of affected versions of BlackBerry® QNX Software Develop

    KritikCVSS 9,8İstismar yokEPSS %1

    blackberry · qnx software development platform17 Ağu 2021

  • CVE-2008-3246
    39İzleyin

    Unspecified vulnerability in the PDF distiller component in the BlackBerry Attachment Service in BlackBerry Unite! 1.0 SP1 (1.0.1) before bu

    KritikCVSS 9,3İstismar yokEPSS %6

    blackberry · enterprise server21 Tem 2008

  • CVE-2008-3024
    39İzleyin

    Stack-based buffer overflow in phgrafx in QNX Momentics (aka RTOS) 6.3.2 and earlier allows local users to gain privileges via a long .pal f

    KritikCVSS 9,3Kavram kanıtıEPSS %5

    blackberry · qnx momentics7 Tem 2008

  • CVE-2014-2389
    39İzleyin

    Stack-based buffer overflow in a certain decryption function in qconnDoor on BlackBerry Z10 devices with software 10.1.0.2312, when develope

    KritikCVSS 9,3İstismar yokEPSS %5

    blackberry · blackberry os12 Nis 2014

  • CVE-2017-9367
    39İzleyin

    A directory traversal vulnerability in the BlackBerry Workspaces Server could potentially allow an attacker to execute or upload arbitrary f

    KritikCVSS 9,8İstismar yokEPSS %1

    blackberry · workspaces vapp16 Eki 2017

  • CVE-2025-2474
    39İzleyin

    Vulnerability in PCX Image Codec Impacts QNX Software Development Platform

    KritikCVSS 9,8İstismar yokEPSS %0

    blackberry · qnx software development platform10 Haz 2025

  • CVE-2024-48856
    39İzleyin

    Vulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development Platform

    KritikCVSS 9,8İstismar yokEPSS %0

    blackberry · qnx software development platform14 Oca 2025

  • CVE-2025-3945
    39İzleyin

    Improper Neutralization of Argument Delimiters in a Command (‘Argument Injection’)

    KritikCVSS 9,8İstismar yokEPSS %0

    tridium · niagara22 May 2025

  • CVE-2025-3944
    39İzleyin

    Incorrect Permission Assignment for Critical Resource

    KritikCVSS 9,8İstismar yokEPSS %0

    tridium · niagara22 May 2025

  • CVE-2025-3940
    39İzleyin

    Improper Use of Validation Framework

    KritikCVSS 9,8İstismar yokEPSS %0

    tridium · niagara22 May 2025

  • CVE-2025-3937
    39İzleyin

    Use of Password Hash with Insufficient Computational Effort

    KritikCVSS 9,8İstismar yokEPSS %0

    tridium · niagara22 May 2025

  • CVE-2025-3938
    39İzleyin

    Missing Cryptographic Step

    KritikCVSS 9,8İstismar yokEPSS %0

    tridium · niagara22 May 2025

  • CVE-2017-3891
    38İzleyin

    In BlackBerry QNX Software Development Platform (SDP) 6.6.0, an elevation of privilege vulnerability in the default configuration of the QNX

    KritikCVSS 9,6İstismar yokEPSS %1

    blackberry · qnx software development platform14 Kas 2017

  • CVE-2016-1914
    36İzleyin

    Multiple SQL injection vulnerabilities in the com.rim.mdm.ui.server.ImageServlet servlet in BlackBerry Enterprise Server 12 (BES12) Self-Ser

    YüksekCVSS 8,8Kavram kanıtıEPSS %4

    blackberry · blackberry enterprise service13 Nis 2017

  • CVE-2024-35213
    36İzleyin

    Vulnerability in SGI Image Codec Impacts BlackBerry QNX Software Development Platform (SDP)

    KritikCVSS 9,0İstismar yokEPSS %0

    blackberry · qnx software development platform11 Haz 2024

  • CVE-2021-22155
    35İzleyin

    An Authentication Bypass vulnerability in the SAML Authentication component of BlackBerry Workspaces Server (deployed with Appliance-X) vers

    YüksekCVSS 8,8İstismar yokEPSS %0

    blackberry · workspaces server12 May 2021

  • CVE-2017-9370
    35İzleyin

    An information disclosure / elevation of privilege vulnerability in the BlackBerry Workspaces Server could potentially allow an attacker who

    YüksekCVSS 8,8İstismar yokEPSS %0

    blackberry · workspaces9 Ağu 2017

  • CVE-2026-18084
    34İzleyin

    Cross-Site Scripting (XSS) in Management Console of BlackBerry UEM

    YüksekCVSS 8,6İstismar yokEPSS %0

    blackberry · unified endpoint manager28 Tem 2026

  • CVE-2025-3943
    33İzleyin

    Use of GET Request Method With sensitive Query Strings

    YüksekCVSS 7,5İstismar yokEPSS %11

    tridium · niagara22 May 2025

  • CVE-2013-2687
    33İzleyin

    Stack-based buffer overflow in the bpe_decompress function in (1) BlackBerry QNX Neutrino RTOS through 6.5.0 SP1 and (2) QNX Momentics Tool

    YüksekCVSS 7,8İstismar yokEPSS %8

    blackberry · qnx momentics tool suite12 Tem 2013