Cloudflare kayıtları
cloudflare üreticisine ait 62 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 3
- Düzeltme kaydı olan
- %87,1
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-20 Improper Input Validation10
- CWE-400 Uncontrolled Resource Consumption8
- CWE-862 Missing Authorization5
- CWE-59 Improper Link Resolution Before File Access ('Link Following')3
- CWE-284 Improper Access Control3
- CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')3
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWEBug bounty kapsamı
Ürünün üreticisi herkese açık bir programda görünüyor. Eşleşme ad üzerinden yapıldı; kapsam metnini programda doğrulayın.
Tüm kayıtlar
62 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2021-3907İstismar yok | Arbitrary filepath traversal via URI injectioncloudflare · octorpki · CWE-20 | Kritik9,8 | — | %4,2 | 11 Kas 2021 |
39İzleyin | CVE-2014-125026İstismar yok | Out-of-bounds write in github.com/cloudflare/golz4cloudflare · golz4 · CWE-787 | Kritik9,8 | — | %1,1 | 27 Ara 2022 |
39İzleyin | CVE-2022-3320İstismar yok | Bypassing Cloudflare Zero Trust policies using warp-cli set-custom-endpoint commandcloudflare · warp · CWE-862 | Kritik9,8 | — | %0,4 | 28 Eki 2022 |
37İzleyin | CVE-2026-2835İstismar yok | HTTP Request Smuggling via HTTP/1.0 and Transfer-Encoding Misparsingcloudflare · pingora · CWE-444 | Kritik9,3 | — | %0,6 | 4 Mar 2026 |
37İzleyin | CVE-2026-2833İstismar yok | HTTP Request Smuggling via Premature Upgradecloudflare · pingora · CWE-444 | Kritik9,3 | — | %0,5 | 4 Mar 2026 |
35İzleyin | CVE-2022-3512İstismar yok | Lock WARP switch bypass using warp-cli 'add-trusted-ssid' commandcloudflare · warp · CWE-862 | Yüksek8,8 | — | %0,4 | 28 Eki 2022 |
34İzleyin | CVE-2025-7054İstismar yok | Infinite loop triggered by connection ID retirementcloudflare · quiche · CWE-835 | Yüksek8,7 | — | %0,4 | 7 Ağu 2025 |
34İzleyin | CVE-2022-3337İstismar yok | Lock WARP switch bypass by removing VPN profile on iOS mobile clientcloudflare · warp mobile client · CWE-862 | Yüksek8,5 | — | %0,4 | 28 Eki 2022 |
33İzleyin | CVE-2026-2836İstismar yok | Cache poisoning via insecure-by-default cache keycloudflare · pingora · CWE-345 | Yüksek8,4 | — | %0,2 | 4 Mar 2026 |
32İzleyin | CVE-2022-4428İstismar yok | support_uri validation missing in WARP client for Windowscloudflare · warp · CWE-20 | Yüksek8,0 | — | %0,7 | 11 Oca 2023 |
32İzleyin | CVE-2023-7080İstismar yok | Arbitrary remote code execution within wrangler dev Workers sandboxcloudflare · wrangler · CWE-269 | Yüksek8,0 | — | %0,6 | 29 Ara 2023 |
32İzleyin | CVE-2023-2512İstismar yok | Buffer under-read in workerdcloudflare · workerd · CWE-125 | Yüksek8,1 | — | %0,6 | 12 May 2023 |
32İzleyin | CVE-2023-7078İstismar yok | Server-Side Request Forgery (SSRF) in Miniflarecloudflare · miniflare · CWE-918 | Yüksek8,1 | — | %0,6 | 29 Ara 2023 |
32İzleyin | CVE-2022-3321İstismar yok | Lock WARP switch feature bypass on WARP mobile client for iOScloudflare · warp mobile client · CWE-862 | Yüksek8,2 | — | %0,4 | 28 Eki 2022 |
32İzleyin | CVE-2023-1732İstismar yok | Improper random reading in CIRCLcloudflare · circl · CWE-20 | Yüksek8,2 | — | %0,4 | 10 May 2023 |
31İzleyin | CVE-2023-3036İstismar yok | Out of Bounds Slice index in cfnts leads to remote paniccloudflare · cfnts · CWE-119 | Yüksek7,5 | — | %2,2 | 14 Haz 2023 |
31İzleyin | CVE-2025-6087İstismar yok | SSRF vulnerability in opennextjs-cloudflare via /_next/image endpointcloudflare · create-cloudflare · CWE-918 | Yüksek7,8 | — | %1,0 | 16 Haz 2025 |
31İzleyin | CVE-2020-24356İstismar yok | Local Privilege Escalation in cloudflaredcloudflare · cloudflared · CWE-427 | Yüksek7,8 | — | %0,3 | 2 Eki 2020 |
31İzleyin | CVE-2022-2145İstismar yok | Cloudlfare WARP Arbitrary File Overwritecloudflare · warp · CWE-20 | Yüksek7,8 | — | %0,3 | 28 Haz 2022 |
31İzleyin | CVE-2023-0652İstismar yok | Local Privilege Escalation in Cloudflare WARP Installer (Windows)cloudflare · warp · CWE-59 | Yüksek7,8 | — | %0,3 | 6 Nis 2023 |
31İzleyin | CVE-2020-35152İstismar yok | Privilege escalation through unquoted service binary path on Cloudflare WARP for Windowscloudflare · warp · CWE-428 | Yüksek7,8 | — | %0,3 | 2 Şub 2021 |
31İzleyin | CVE-2022-2147İstismar yok | Unquoted Service Path in Cloudflare WARP for Windowscloudflare · warp · CWE-428 | Yüksek7,8 | — | %0,3 | 23 Haz 2022 |
31İzleyin | CVE-2023-1314İstismar yok | Local Privilege Escalation Vulnerability in cloudflared's Installercloudflare · cloudflared · CWE-59 | Yüksek7,8 | — | %0,3 | 21 Mar 2023 |
31İzleyin | CVE-2023-1412İstismar yok | Local Privilege Escalation Vulnerability in WARP's MSI Installercloudflare · warp · CWE-59 | Yüksek7,8 | — | %0,2 | 5 Nis 2023 |
31İzleyin | CVE-2022-2225İstismar yok | Zero Trust Secure Web Gateway policies bypass using WARP client subcommandscloudflare · warp · CWE-284 | Yüksek7,8 | — | %0,2 | 26 Tem 2022 |
- CVE-2021-390740Planlayın
Arbitrary filepath traversal via URI injection
KritikCVSS 9,8İstismar yokEPSS %4cloudflare · octorpki11 Kas 2021
- CVE-2014-12502639İzleyin
Out-of-bounds write in github.com/cloudflare/golz4
KritikCVSS 9,8İstismar yokEPSS %1cloudflare · golz427 Ara 2022
- CVE-2022-332039İzleyin
Bypassing Cloudflare Zero Trust policies using warp-cli set-custom-endpoint command
KritikCVSS 9,8İstismar yokEPSS %0cloudflare · warp28 Eki 2022
- CVE-2026-283537İzleyin
HTTP Request Smuggling via HTTP/1.0 and Transfer-Encoding Misparsing
KritikCVSS 9,3İstismar yokEPSS %1cloudflare · pingora4 Mar 2026
- CVE-2026-283337İzleyin
HTTP Request Smuggling via Premature Upgrade
KritikCVSS 9,3İstismar yokEPSS %1cloudflare · pingora4 Mar 2026
- CVE-2022-351235İzleyin
Lock WARP switch bypass using warp-cli 'add-trusted-ssid' command
YüksekCVSS 8,8İstismar yokEPSS %0cloudflare · warp28 Eki 2022
- CVE-2025-705434İzleyin
Infinite loop triggered by connection ID retirement
YüksekCVSS 8,7İstismar yokEPSS %0cloudflare · quiche7 Ağu 2025
- CVE-2022-333734İzleyin
Lock WARP switch bypass by removing VPN profile on iOS mobile client
YüksekCVSS 8,5İstismar yokEPSS %0cloudflare · warp mobile client28 Eki 2022
- CVE-2026-283633İzleyin
Cache poisoning via insecure-by-default cache key
YüksekCVSS 8,4İstismar yokEPSS %0cloudflare · pingora4 Mar 2026
- CVE-2022-442832İzleyin
support_uri validation missing in WARP client for Windows
YüksekCVSS 8,0İstismar yokEPSS %1cloudflare · warp11 Oca 2023
- CVE-2023-708032İzleyin
Arbitrary remote code execution within wrangler dev Workers sandbox
YüksekCVSS 8,0İstismar yokEPSS %1cloudflare · wrangler29 Ara 2023
- CVE-2023-251232İzleyin
Buffer under-read in workerd
YüksekCVSS 8,1İstismar yokEPSS %1cloudflare · workerd12 May 2023
- CVE-2023-707832İzleyin
Server-Side Request Forgery (SSRF) in Miniflare
YüksekCVSS 8,1İstismar yokEPSS %1cloudflare · miniflare29 Ara 2023
- CVE-2022-332132İzleyin
Lock WARP switch feature bypass on WARP mobile client for iOS
YüksekCVSS 8,2İstismar yokEPSS %0cloudflare · warp mobile client28 Eki 2022
- CVE-2023-173232İzleyin
Improper random reading in CIRCL
YüksekCVSS 8,2İstismar yokEPSS %0cloudflare · circl10 May 2023
- CVE-2023-303631İzleyin
Out of Bounds Slice index in cfnts leads to remote panic
YüksekCVSS 7,5İstismar yokEPSS %2cloudflare · cfnts14 Haz 2023
- CVE-2025-608731İzleyin
SSRF vulnerability in opennextjs-cloudflare via /_next/image endpoint
YüksekCVSS 7,8İstismar yokEPSS %1cloudflare · create-cloudflare16 Haz 2025
- CVE-2020-2435631İzleyin
Local Privilege Escalation in cloudflared
YüksekCVSS 7,8İstismar yokEPSS %0cloudflare · cloudflared2 Eki 2020
- CVE-2022-214531İzleyin
Cloudlfare WARP Arbitrary File Overwrite
YüksekCVSS 7,8İstismar yokEPSS %0cloudflare · warp28 Haz 2022
- CVE-2023-065231İzleyin
Local Privilege Escalation in Cloudflare WARP Installer (Windows)
YüksekCVSS 7,8İstismar yokEPSS %0cloudflare · warp6 Nis 2023
- CVE-2020-3515231İzleyin
Privilege escalation through unquoted service binary path on Cloudflare WARP for Windows
YüksekCVSS 7,8İstismar yokEPSS %0cloudflare · warp2 Şub 2021
- CVE-2022-214731İzleyin
Unquoted Service Path in Cloudflare WARP for Windows
YüksekCVSS 7,8İstismar yokEPSS %0cloudflare · warp23 Haz 2022
- CVE-2023-131431İzleyin
Local Privilege Escalation Vulnerability in cloudflared's Installer
YüksekCVSS 7,8İstismar yokEPSS %0cloudflare · cloudflared21 Mar 2023
- CVE-2023-141231İzleyin
Local Privilege Escalation Vulnerability in WARP's MSI Installer
YüksekCVSS 7,8İstismar yokEPSS %0cloudflare · warp5 Nis 2023
- CVE-2022-222531İzleyin
Zero Trust Secure Web Gateway policies bypass using WARP client subcommands
YüksekCVSS 7,8İstismar yokEPSS %0cloudflare · warp26 Tem 2022