clash project kayıtları
clash project üreticisine ait 4 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-346 Origin Validation Error1
- CWE-552 Files or Directories Accessible to External Parties1
- CWE-732 Incorrect Permission Assignment for Critical Resource1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
4 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2022-26255İstismar yok | Clash for Windows v0.19.8 was discovered to allow arbitrary code execution via a crafted payload injected into the Proxies name column.clash project · clash · CWE-79 | Kritik9,8 | — | %1,7 | 27 Mar 2022 |
39İzleyin | CVE-2023-24205İstismar yok | Clash for Windows v0.20.12 was discovered to contain a remote code execution (RCE) vulnerability which is exploited via overwriting the confclash project · clash · CWE-732 | Kritik9,8 | — | %1,2 | 23 Şub 2023 |
35İzleyin | CVE-2020-24772İstismar yok | In Dreamacro Clash for Windows v0.11.4, an attacker could embed a malicious iframe in a website with a crafted URL that would launch the Claclash project · clash · CWE-346 | Yüksek8,8 | — | %0,6 | 21 Mar 2022 |
31İzleyin | CVE-2022-40126Kavram kanıtı | A misconfiguration in the Service Mode profile directory of Clash for Windows v0.19.9 allows attackers to escalate privileges and execute arclash project · clash · CWE-552 | Yüksek7,8 | — | %0,3 | 29 Eyl 2022 |
- CVE-2022-2625540Planlayın
Clash for Windows v0.19.8 was discovered to allow arbitrary code execution via a crafted payload injected into the Proxies name column.
KritikCVSS 9,8İstismar yokEPSS %1clash project · clash27 Mar 2022
- CVE-2023-2420539İzleyin
Clash for Windows v0.20.12 was discovered to contain a remote code execution (RCE) vulnerability which is exploited via overwriting the conf
KritikCVSS 9,8İstismar yokEPSS %1clash project · clash23 Şub 2023
- CVE-2020-2477235İzleyin
In Dreamacro Clash for Windows v0.11.4, an attacker could embed a malicious iframe in a website with a crafted URL that would launch the Cla
YüksekCVSS 8,8İstismar yokEPSS %0clash project · clash21 Mar 2022
- CVE-2022-4012631İzleyin
A misconfiguration in the Service Mode profile directory of Clash for Windows v0.19.9 allows attackers to escalate privileges and execute ar
YüksekCVSS 7,8Kavram kanıtıEPSS %0clash project · clash29 Eyl 2022