İçeriğe atla
Noroxi

ethyca kayıtları

ethyca üreticisine ait 20 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
0
Düzeltme kaydı olan
%100
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 23
  2. 24
  3. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

20 kayıt
  • CVE-2024-38537
    39İzleyin

    Inclusion of Untrusted polyfill.io Code Vulnerability in fides.js

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    ethyca · fides2 Tem 2024

  • CVE-2023-48224
    36İzleyin

    Cryptographically Weak Generation of One-Time Codes for Identity Verification in ethyca-fides

    KritikCVSS 9,1İstismar yokEPSS %1

    ethyca · fides15 Kas 2023

  • CVE-2025-57817
    34İzleyin

    Fides Webserver API is Vulnerable to OAuth Client Privilege Escalation

    YüksekCVSS 8,6İstismar yokEPSS %0

    ethyca · fides8 Eyl 2025

  • CVE-2023-36827
    30İzleyin

    Fides vulnerable to Path Traversal in Webserver API

    YüksekCVSS 7,5İstismar yokEPSS %1

    ethyca · fides5 Tem 2023

  • CVE-2024-45053
    28İzleyin

    Remote Code Execution Vulnerability via SSTI in Fides Webserver Jinja Email Templating Engine

    YüksekCVSS 7,2İstismar yokEPSS %1

    ethyca · fides4 Eyl 2024

  • CVE-2023-41319
    28İzleyin

    Remote Code Execution in Custom Integration Upload in Fides

    YüksekCVSS 7,2İstismar yokEPSS %1

    ethyca · fides6 Eyl 2023

  • CVE-2023-46124
    28İzleyin

    Server-Side Request Forgery Vulnerability in Custom Integration Upload

    YüksekCVSS 7,2İstismar yokEPSS %1

    ethyca · fides25 Eki 2023

  • CVE-2023-46125
    26İzleyin

    Fides Information Disclosure Vulnerability in Config API Endpoint

    OrtaCVSS 6,5İstismar yokEPSS %1

    ethyca · fides25 Eki 2023

  • CVE-2024-35189
    26İzleyin

    Sensitive Data Disclosure Vulnerability in Connection Configuration Endpoints in Fides

    OrtaCVSS 6,5İstismar yokEPSS %1

    ethyca · fides30 May 2024

  • CVE-2025-57816
    25İzleyin

    Fides Webserver API Rate Limiting Vulnerability in Proxied Environments

    OrtaCVSS 6,3İstismar yokEPSS %0

    ethyca · fides8 Eyl 2025

  • CVE-2023-47114
    24İzleyin

    Ethyca Fides HTML Injection Vulnerability in HTML-Formatted DSR Packages

    OrtaCVSS 6,1İstismar yokEPSS %1

    ethyca · fides8 Kas 2023

  • CVE-2024-31223
    21İzleyin

    Fides Information Disclosure Vulnerability in Privacy Center of SERVER_SIDE_FIDES_API_URL

    OrtaCVSS 5,3Kavram kanıtıEPSS %1

    ethyca · fides3 Tem 2024

  • CVE-2023-46126
    21İzleyin

    Fides JavaScript Injection Vulnerability in Privacy Center URL

    OrtaCVSS 5,4İstismar yokEPSS %1

    ethyca · fides25 Eki 2023

  • CVE-2024-45052
    21İzleyin

    Fides Webserver Authentication Timing-Based Username Enumeration Vulnerability

    OrtaCVSS 5,3İstismar yokEPSS %1

    ethyca · fides4 Eyl 2024

  • CVE-2023-37481
    19İzleyin

    Fides Webserver Vulnerable to SVG Bomb File Uploads

    OrtaCVSS 4,9İstismar yokEPSS %1

    ethyca · fides18 Tem 2023

  • CVE-2023-37480
    19İzleyin

    Fides Webserver Vulnerable to Zip Bomb File Uploads

    OrtaCVSS 4,9İstismar yokEPSS %1

    ethyca · fides18 Tem 2023

  • CVE-2024-34715
    13İzleyin

    Partial Password Exposure Vulnerability in Fides Webserver Logs

    DüşükCVSS 3,3İstismar yokEPSS %0

    ethyca · fides29 May 2024

  • CVE-2024-52008
    8İzleyin

    Password Policy Bypass Vulnerability in Fides Webserver

    DüşükCVSS 2,0İstismar yokEPSS %1

    ethyca · fides26 Kas 2024

  • CVE-2025-57766
    6İzleyin

    Fides's Admin UI User Password Change Does Not Invalidate Current Session

    DüşükCVSS 1,7İstismar yokEPSS %0

    ethyca · fides8 Eyl 2025

  • CVE-2025-57815
    6İzleyin

    Fides Lacks Brute-Force Protections on Authentication Endpoints

    DüşükCVSS 1,7İstismar yokEPSS %0

    ethyca · fides8 Eyl 2025