discovery kayıtları
discovery üreticisine ait 7 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-59 Improper Link Resolution Before File Access ('Link Following')2
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')2
- CWE-130 Improper Handling of Length Parameter Inconsistency1
- CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')1
- CWE-88 Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
7 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
36İzleyin | CVE-2026-9277Kavram kanıtı | shell-quote `quote()` does not validate object-token shapes, allowing command injection via line terminators in `.op`CWE-77 | Kritik9,2 | — | %1,0 | 22 May 2026 |
33İzleyin | CVE-2026-54369İstismar yok | acl < 2.4.0 Symlink Traversal Privilege Escalation via libacl Functionsacl project · acl · CWE-59 | Yüksek8,4 | — | %0,2 | 29 Haz 2026 |
33İzleyin | CVE-2026-54371İstismar yok | attr < 2.6.0 Symlink Traversal Privilege Escalation via getfattr/setfattrattr project · attr · CWE-59 | Yüksek8,4 | — | %0,2 | 29 Haz 2026 |
31İzleyin | CVE-2026-11332İstismar yok | Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code executionred hat · red hat ansible automation platform 2.5 for rhel 8 · CWE-88 | Yüksek7,8 | — | %0,2 | 5 Haz 2026 |
30İzleyin | CVE-2026-33846İstismar yok | Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassemblyred hat · red hat enterprise linux 10 · CWE-130 | Yüksek7,5 | — | %1,1 | 4 May 2026 |
30İzleyin | CVE-2026-4111İstismar yok | Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchivered hat · red hat enterprise linux 10 · CWE-835 | Yüksek7,5 | — | %0,9 | 13 Mar 2026 |
30İzleyin | CVE-2024-52011Kavram kanıtı | launch-editor vulnerable to command injection via the crafted request on Windowsvitejs · launch-editor · CWE-77 | Yüksek7,5 | — | %0,5 | 1 Haz 2026 |
- CVE-2026-927736İzleyin
shell-quote `quote()` does not validate object-token shapes, allowing command injection via line terminators in `.op`
KritikCVSS 9,2Kavram kanıtıEPSS %122 May 2026
- CVE-2026-5436933İzleyin
acl < 2.4.0 Symlink Traversal Privilege Escalation via libacl Functions
YüksekCVSS 8,4İstismar yokEPSS %0acl project · acl29 Haz 2026
- CVE-2026-5437133İzleyin
attr < 2.6.0 Symlink Traversal Privilege Escalation via getfattr/setfattr
YüksekCVSS 8,4İstismar yokEPSS %0attr project · attr29 Haz 2026
- CVE-2026-1133231İzleyin
Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution
YüksekCVSS 7,8İstismar yokEPSS %0red hat · red hat ansible automation platform 2.5 for rhel 85 Haz 2026
- CVE-2026-3384630İzleyin
Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly
YüksekCVSS 7,5İstismar yokEPSS %1red hat · red hat enterprise linux 104 May 2026
- CVE-2026-411130İzleyin
Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive
YüksekCVSS 7,5İstismar yokEPSS %1red hat · red hat enterprise linux 1013 Mar 2026
- CVE-2024-5201130İzleyin
launch-editor vulnerable to command injection via the crafted request on Windows
YüksekCVSS 7,5Kavram kanıtıEPSS %1vitejs · launch-editor1 Haz 2026