crowcpp kayıtları
crowcpp üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-113 Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')1
- CWE-193 Off-by-one Error1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-416 Use After Free1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-908 Use of Uninitialized Resource1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2022-34970Kavram kanıtı | Crow before 1.0+4 has a heap-based buffer overflow via the function qs_parse in query_string.h.crowcpp · crow · CWE-193 | Kritik9,8 | — | %4,0 | 4 Ağu 2022 |
40Planlayın | CVE-2022-38667İstismar yok | HTTP applications (servers) based on Crow through 1.0+4 may allow a Use-After-Free and code execution when HTTP pipelining is used.crowcpp · crow · CWE-416 | Kritik9,8 | — | %2,9 | 22 Ağu 2022 |
30İzleyin | CVE-2021-23514İstismar yok | This affects the package Crow before 0.3+4.crowcpp · crow · CWE-22 | Yüksek7,5 | — | %1,6 | 13 Oca 2022 |
30İzleyin | CVE-2022-38668İstismar yok | HTTP applications (servers) based on Crow through 1.0+4 may reveal potentially sensitive uninitialized data from stack memory when fulfillincrowcpp · crow · CWE-908 | Yüksek7,5 | — | %1,4 | 22 Ağu 2022 |
24İzleyin | CVE-2021-23824İstismar yok | This affects the package Crow before 0.3+4.crowcpp · crow · CWE-79 | Orta6,1 | — | %0,9 | 13 Oca 2022 |
24İzleyin | CVE-2023-26142İstismar yok | All versions of the package crow are vulnerable to HTTP Response Splitting when untrusted user input is used to build header values.crowcpp · crow · CWE-113 | Orta6,1 | — | %0,5 | 12 Eyl 2023 |
- CVE-2022-3497040Planlayın
Crow before 1.0+4 has a heap-based buffer overflow via the function qs_parse in query_string.h.
KritikCVSS 9,8Kavram kanıtıEPSS %4crowcpp · crow4 Ağu 2022
- CVE-2022-3866740Planlayın
HTTP applications (servers) based on Crow through 1.0+4 may allow a Use-After-Free and code execution when HTTP pipelining is used.
KritikCVSS 9,8İstismar yokEPSS %3crowcpp · crow22 Ağu 2022
- CVE-2021-2351430İzleyin
This affects the package Crow before 0.3+4.
YüksekCVSS 7,5İstismar yokEPSS %2crowcpp · crow13 Oca 2022
- CVE-2022-3866830İzleyin
HTTP applications (servers) based on Crow through 1.0+4 may reveal potentially sensitive uninitialized data from stack memory when fulfillin
YüksekCVSS 7,5İstismar yokEPSS %1crowcpp · crow22 Ağu 2022
- CVE-2021-2382424İzleyin
This affects the package Crow before 0.3+4.
OrtaCVSS 6,1İstismar yokEPSS %1crowcpp · crow13 Oca 2022
- CVE-2023-2614224İzleyin
All versions of the package crow are vulnerable to HTTP Response Splitting when untrusted user input is used to build header values.
OrtaCVSS 6,1İstismar yokEPSS %1crowcpp · crow12 Eyl 2023