condor project kayıtları
condor project üreticisine ait 17 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %88,2
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-264 Permissions, Privileges, and Access Controls4
- CWE-20 Improper Input Validation3
- CWE-287 Improper Authentication2
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-134 Use of Externally-Controlled Format String1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
17 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
42Planlayın | CVE-2012-3416İstismar yok | Condor before 7.8.2 allows remote attackers to bypass host-based authentication and execute actions such as ALLOW_ADMINISTRATOR or ALLOW_WRIcondor project · condor · CWE-287 | Kritik10,0 | — | %5,1 | 25 Ağu 2012 |
41Planlayın | CVE-2012-5390İstismar yok | The standard universe shadow (condor_shadow.std) component in Condor 7.7.3 through 7.7.6, 7.8.0 before 7.8.5, and 7.9.0 does no properly checondor project · condor · CWE-264 | Kritik10,0 | — | %2,4 | 6 Haz 2014 |
41Planlayın | CVE-2012-5196İstismar yok | Multiple buffer overflows in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 have unknown impact and attack vectors.condor project · condor · CWE-119 | Kritik10,0 | — | %1,8 | 28 Eyl 2012 |
41Planlayın | CVE-2012-5197İstismar yok | Multiple unspecified vulnerabilities in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 have unknown impact and attack vectors related to condor project · condor | Kritik10,0 | — | %1,6 | 28 Eyl 2012 |
31İzleyin | CVE-2008-3424İstismar yok | Condor before 7.0.4 does not properly handle wildcards in the ALLOW_WRITE, DENY_WRITE, HOSTALLOW_WRITE, or HOSTDENY_WRITE configuration varicondor project · condor · CWE-863 | Yüksek7,5 | — | %2,6 | 31 Tem 2008 |
28İzleyin | CVE-2008-3830İstismar yok | Condor before 7.0.5 does not properly handle when the configuration specifies overlapping netmasks in allow or deny rules, which causes the condor project · condor · CWE-264 | Yüksek7,2 | — | %0,3 | 8 Eki 2008 |
27İzleyin | CVE-2009-4133İstismar yok | Condor 6.5.4 through 7.2.4, 7.3.x, and 7.4.0, as used in MRG, Grid for MRG, and Grid Execute Node for MRG, allows remote authenticated userscondor project · condor | Orta6,5 | — | %2,0 | 23 Ara 2009 |
26İzleyin | CVE-2012-3492İstismar yok | The filesystem authentication (condor_io/condor_auth_fs.cpp) in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 uses authentication directcondor project · condor · CWE-287 | Orta6,4 | — | %3,1 | 28 Eyl 2012 |
24İzleyin | CVE-2012-3493İstismar yok | The command_give_request_ad function in condor_startd.V6/command.cpp Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 allows remote attackecondor project · condor · CWE-200 | Orta5,8 | — | %1,6 | 28 Eyl 2012 |
21İzleyin | CVE-2008-3829İstismar yok | Unspecified vulnerability in the condor_ schedd daemon in Condor before 7.0.5 allows attackers to cause a denial of service (crash) via unkncondor project · condor | Orta5,0 | — | %1,8 | 8 Eki 2008 |
18İzleyin | CVE-2012-4462İstismar yok | aviary/jobcontrol.py in Condor, as used in Red Hat Enterprise MRG 2.3, when removing a job, allows remote attackers to cause a denial of sercondor project · condor · CWE-20 | Orta4,3 | — | %2,2 | 13 Mar 2013 |
18İzleyin | CVE-2008-3828İstismar yok | Stack-based buffer overflow in the condor_ schedd daemon in Condor before 7.0.5 allows attackers to cause a denial of service (crash) and pocondor project · condor · CWE-119 | Orta4,6 | — | %0,5 | 8 Eki 2008 |
18İzleyin | CVE-2008-3826İstismar yok | Unspecified vulnerability in Condor before 7.0.5 allows attackers to execute jobs as other users via unknown vectors.condor project · condor · CWE-264 | Orta4,6 | — | %0,3 | 8 Eki 2008 |
17İzleyin | CVE-2009-5136İstismar yok | The policy definition evaluator in Condor before 7.4.2 does not properly handle attributes in a WANT_SUSPEND policy that evaluate to an UNDEcondor project · condor · CWE-20 | Orta4,0 | — | %1,9 | 11 Eki 2013 |
17İzleyin | CVE-2012-3491İstismar yok | src/condor_schedd.V6/schedd.cpp in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 does not properly check the permissions of jobs, which condor project · condor · CWE-264 | Orta4,0 | — | %1,8 | 28 Eyl 2012 |
17İzleyin | CVE-2011-4930İstismar yok | Multiple format string vulnerabilities in Condor 7.2.0 through 7.6.4, and possibly certain 7.7.x versions, as used in Red Hat MRG Grid and pcondor project · condor · CWE-134 | Orta4,4 | — | %0,5 | 10 Şub 2014 |
14İzleyin | CVE-2013-4255İstismar yok | The policy definition evaluator in Condor 7.5.4, 8.0.0, and earlier does not properly handle attributes in a (1) PREEMPT, (2) SUSPEND, (3) Ccondor project · condor · CWE-20 | Düşük3,5 | — | %1,6 | 11 Eki 2013 |
- CVE-2012-341642Planlayın
Condor before 7.8.2 allows remote attackers to bypass host-based authentication and execute actions such as ALLOW_ADMINISTRATOR or ALLOW_WRI
KritikCVSS 10,0İstismar yokEPSS %5condor project · condor25 Ağu 2012
- CVE-2012-539041Planlayın
The standard universe shadow (condor_shadow.std) component in Condor 7.7.3 through 7.7.6, 7.8.0 before 7.8.5, and 7.9.0 does no properly che
KritikCVSS 10,0İstismar yokEPSS %2condor project · condor6 Haz 2014
- CVE-2012-519641Planlayın
Multiple buffer overflows in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 have unknown impact and attack vectors.
KritikCVSS 10,0İstismar yokEPSS %1condor project · condor28 Eyl 2012
- CVE-2012-519741Planlayın
Multiple unspecified vulnerabilities in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 have unknown impact and attack vectors related to
KritikCVSS 10,0İstismar yokEPSS %1condor project · condor28 Eyl 2012
- CVE-2008-342431İzleyin
Condor before 7.0.4 does not properly handle wildcards in the ALLOW_WRITE, DENY_WRITE, HOSTALLOW_WRITE, or HOSTDENY_WRITE configuration vari
YüksekCVSS 7,5İstismar yokEPSS %2condor project · condor31 Tem 2008
- CVE-2008-383028İzleyin
Condor before 7.0.5 does not properly handle when the configuration specifies overlapping netmasks in allow or deny rules, which causes the
YüksekCVSS 7,2İstismar yokEPSS %0condor project · condor8 Eki 2008
- CVE-2009-413327İzleyin
Condor 6.5.4 through 7.2.4, 7.3.x, and 7.4.0, as used in MRG, Grid for MRG, and Grid Execute Node for MRG, allows remote authenticated users
OrtaCVSS 6,5İstismar yokEPSS %2condor project · condor23 Ara 2009
- CVE-2012-349226İzleyin
The filesystem authentication (condor_io/condor_auth_fs.cpp) in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 uses authentication direct
OrtaCVSS 6,4İstismar yokEPSS %3condor project · condor28 Eyl 2012
- CVE-2012-349324İzleyin
The command_give_request_ad function in condor_startd.V6/command.cpp Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 allows remote attacke
OrtaCVSS 5,8İstismar yokEPSS %1condor project · condor28 Eyl 2012
- CVE-2008-382921İzleyin
Unspecified vulnerability in the condor_ schedd daemon in Condor before 7.0.5 allows attackers to cause a denial of service (crash) via unkn
OrtaCVSS 5,0İstismar yokEPSS %1condor project · condor8 Eki 2008
- CVE-2012-446218İzleyin
aviary/jobcontrol.py in Condor, as used in Red Hat Enterprise MRG 2.3, when removing a job, allows remote attackers to cause a denial of ser
OrtaCVSS 4,3İstismar yokEPSS %2condor project · condor13 Mar 2013
- CVE-2008-382818İzleyin
Stack-based buffer overflow in the condor_ schedd daemon in Condor before 7.0.5 allows attackers to cause a denial of service (crash) and po
OrtaCVSS 4,6İstismar yokEPSS %0condor project · condor8 Eki 2008
- CVE-2008-382618İzleyin
Unspecified vulnerability in Condor before 7.0.5 allows attackers to execute jobs as other users via unknown vectors.
OrtaCVSS 4,6İstismar yokEPSS %0condor project · condor8 Eki 2008
- CVE-2009-513617İzleyin
The policy definition evaluator in Condor before 7.4.2 does not properly handle attributes in a WANT_SUSPEND policy that evaluate to an UNDE
OrtaCVSS 4,0İstismar yokEPSS %1condor project · condor11 Eki 2013
- CVE-2012-349117İzleyin
src/condor_schedd.V6/schedd.cpp in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 does not properly check the permissions of jobs, which
OrtaCVSS 4,0İstismar yokEPSS %1condor project · condor28 Eyl 2012
- CVE-2011-493017İzleyin
Multiple format string vulnerabilities in Condor 7.2.0 through 7.6.4, and possibly certain 7.7.x versions, as used in Red Hat MRG Grid and p
OrtaCVSS 4,4İstismar yokEPSS %0condor project · condor10 Şub 2014
- CVE-2013-425514İzleyin
The policy definition evaluator in Condor 7.5.4, 8.0.0, and earlier does not properly handle attributes in a (1) PREEMPT, (2) SUSPEND, (3) C
DüşükCVSS 3,5İstismar yokEPSS %1condor project · condor11 Eki 2013