coturn project kayıtları
coturn project üreticisine ait 14 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-125 Out-of-bounds Read1
- CWE-284 Improper Access Control1
- CWE-441 Unintended Proxy or Intermediary ('Confused Deputy')1
- CWE-476 NULL Pointer Dereference1
- CWE-665 Improper Initialization1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
14 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
41Planlayın | CVE-2020-6061İstismar yok | An exploitable heap out-of-bounds read vulnerability exists in the way CoTURN 4.5.1.1 web server parses POST requests.coturn project · coturn · CWE-125 | Kritik9,8 | — | %5,1 | 19 Şub 2020 |
40Planlayın | CVE-2018-4056İstismar yok | An exploitable SQL injection vulnerability exists in the administrator web portal function of coTURN prior to version 4.5.0.9.coturn project · coturn · CWE-89 | Kritik9,8 | — | %2,9 | 5 Şub 2019 |
40Planlayın | CVE-2018-4059İstismar yok | An exploitable unsafe default configuration vulnerability exists in the TURN server function of coTURN prior to version 4.5.0.9.coturn project · coturn · CWE-862 | Kritik9,8 | — | %1,8 | 21 Mar 2019 |
39İzleyin | CVE-2026-43994İstismar yok | Coturn: Stack buffer overflow in decode_oauth_token_gcm()coturn project · coturn · CWE-120 | Kritik9,8 | — | %0,6 | 18 Haz 2026 |
32İzleyin | CVE-2020-6062İstismar yok | An exploitable denial-of-service vulnerability exists in the way CoTURN 4.5.1.1 web server parses POST requests.coturn project · coturn · CWE-476 | Yüksek7,5 | — | %6,1 | 19 Şub 2020 |
31İzleyin | CVE-2020-4067İstismar yok | Improper Initialization in coturncoturn project · coturn · CWE-665 | Yüksek7,5 | — | %1,8 | 29 Haz 2020 |
30İzleyin | CVE-2026-40613İstismar yok | Coturn: Misaligned Memory Access in coturn STUN Attribute Parser (Remote DoS on ARM64)coturn project · coturn · CWE-704 | Yüksek7,5 | — | %1,5 | 21 Nis 2026 |
30İzleyin | CVE-2018-4058İstismar yok | An exploitable unsafe default configuration vulnerability exists in the TURN server functionality of coTURN prior to 4.5.0.9.coturn project · coturn | Yüksek7,7 | — | %0,9 | 21 Mar 2019 |
29İzleyin | CVE-2026-53450İstismar yok | Coturn: IPv4-mapped 127.0.0.1 bypasses default loopback peer protectioncoturn project · coturn · CWE-918 | Yüksek7,4 | — | %0,2 | 10 Tem 2026 |
28İzleyin | CVE-2020-26262İstismar yok | Loopback bypass in Coturncoturn project · coturn · CWE-441 | Yüksek7,2 | — | %1,5 | 13 Oca 2021 |
28İzleyin | CVE-2026-53448İstismar yok | Coturn: SQL Injection in HTTPS Admin Panel Delete Operationscoturn project · coturn · CWE-89 | Yüksek7,2 | — | %0,7 | 10 Tem 2026 |
26İzleyin | CVE-2026-27624İstismar yok | Coturn: IPv4-mapped IPv6 (::ffff:0:0/96) bypasses denied-peer-ip ACLcoturn project · coturn · CWE-284 | Orta6,5 | — | %0,4 | 25 Şub 2026 |
24İzleyin | CVE-2026-53449İstismar yok | Coturn: Arbitrary File Write via CLI psd Commandcoturn project · coturn · CWE-73 | Orta6,0 | — | %0,2 | 10 Tem 2026 |
21İzleyin | CVE-2026-43915İstismar yok | Coturn: Stored Cross-Site Scripting (XSS) in web-admin interface via TURN usernamecoturn project · coturn · CWE-79 | Orta5,4 | — | %0,2 | 18 Haz 2026 |
- CVE-2020-606141Planlayın
An exploitable heap out-of-bounds read vulnerability exists in the way CoTURN 4.5.1.1 web server parses POST requests.
KritikCVSS 9,8İstismar yokEPSS %5coturn project · coturn19 Şub 2020
- CVE-2018-405640Planlayın
An exploitable SQL injection vulnerability exists in the administrator web portal function of coTURN prior to version 4.5.0.9.
KritikCVSS 9,8İstismar yokEPSS %2coturn project · coturn5 Şub 2019
- CVE-2018-405940Planlayın
An exploitable unsafe default configuration vulnerability exists in the TURN server function of coTURN prior to version 4.5.0.9.
KritikCVSS 9,8İstismar yokEPSS %1coturn project · coturn21 Mar 2019
- CVE-2026-4399439İzleyin
Coturn: Stack buffer overflow in decode_oauth_token_gcm()
KritikCVSS 9,8İstismar yokEPSS %0coturn project · coturn18 Haz 2026
- CVE-2020-606232İzleyin
An exploitable denial-of-service vulnerability exists in the way CoTURN 4.5.1.1 web server parses POST requests.
YüksekCVSS 7,5İstismar yokEPSS %6coturn project · coturn19 Şub 2020
- CVE-2020-406731İzleyin
Improper Initialization in coturn
YüksekCVSS 7,5İstismar yokEPSS %1coturn project · coturn29 Haz 2020
- CVE-2026-4061330İzleyin
Coturn: Misaligned Memory Access in coturn STUN Attribute Parser (Remote DoS on ARM64)
YüksekCVSS 7,5İstismar yokEPSS %1coturn project · coturn21 Nis 2026
- CVE-2018-405830İzleyin
An exploitable unsafe default configuration vulnerability exists in the TURN server functionality of coTURN prior to 4.5.0.9.
YüksekCVSS 7,7İstismar yokEPSS %0coturn project · coturn21 Mar 2019
- CVE-2026-5345029İzleyin
Coturn: IPv4-mapped 127.0.0.1 bypasses default loopback peer protection
YüksekCVSS 7,4İstismar yokEPSS %0coturn project · coturn10 Tem 2026
- CVE-2020-2626228İzleyin
Loopback bypass in Coturn
YüksekCVSS 7,2İstismar yokEPSS %1coturn project · coturn13 Oca 2021
- CVE-2026-5344828İzleyin
Coturn: SQL Injection in HTTPS Admin Panel Delete Operations
YüksekCVSS 7,2İstismar yokEPSS %0coturn project · coturn10 Tem 2026
- CVE-2026-2762426İzleyin
Coturn: IPv4-mapped IPv6 (::ffff:0:0/96) bypasses denied-peer-ip ACL
OrtaCVSS 6,5İstismar yokEPSS %0coturn project · coturn25 Şub 2026
- CVE-2026-5344924İzleyin
Coturn: Arbitrary File Write via CLI psd Command
OrtaCVSS 6,0İstismar yokEPSS %0coturn project · coturn10 Tem 2026
- CVE-2026-4391521İzleyin
Coturn: Stored Cross-Site Scripting (XSS) in web-admin interface via TURN username
OrtaCVSS 5,4İstismar yokEPSS %0coturn project · coturn18 Haz 2026