frigate kayıtları
frigate üreticisine ait 10 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %40
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-285 Improper Authorization1
- CWE-287 Improper Authentication1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-502 Deserialization of Untrusted Data1
- CWE-770 Allocation of Resources Without Limits or Throttling1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
10 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
37İzleyin | CVE-2026-25643Kavram kanıtı | Frigate Affected by Authenticated Remote Command Execution (RCE) and Container Escapefrigate · frigate · CWE-78 | Kritik9,1 | — | %3,8 | 6 Şub 2026 |
34İzleyin | CVE-2026-33124İstismar yok | Frigate has insecure password change functionalityfrigate · frigate · CWE-287 | Yüksek8,6 | — | %0,4 | 20 Mar 2026 |
32İzleyin | CVE-2026-33125İstismar yok | Frigate Broken Access Control: Users assigned the viewer role can delete admin and other low-privileged accountsfrigate · frigate · CWE-285 | Yüksek8,1 | — | %0,4 | 20 Mar 2026 |
30İzleyin | CVE-2023-45672İstismar yok | Frigate unsafe deserialization in `load_config_with_no_duplicates` of `frigate/util/builtin.py`frigate · frigate · CWE-502 | Yüksek7,5 | — | %1,4 | 30 Eki 2023 |
27İzleyin | CVE-2024-32874İstismar yok | In Frigate, Malicious Long Unicode filenames may cause a Multiple Application-level Denial of Serviceblakeblackshear · frigate · CWE-770 | Orta6,8 | — | %0,8 | 14 May 2024 |
27İzleyin | CVE-2023-45670İstismar yok | Frigate cross-site request forgery in `config_save` and `config_set` request handlersfrigate · frigate · CWE-352 | Orta6,8 | — | %0,4 | 30 Eki 2023 |
26İzleyin | CVE-2026-33469İstismar yok | Authenticated Frigate users can read the full unredacted configuration via `/api/config/rawfrigate · frigate · CWE-863 | Orta6,5 | — | %0,4 | 26 Mar 2026 |
18İzleyin | CVE-2023-45671Kavram kanıtı | Frigate reflected XSS through `/<camera_name>` API endpointsfrigate · frigate · CWE-79 | Orta4,7 | — | %1,4 | 30 Eki 2023 |
17İzleyin | CVE-2026-33470İstismar yok | Frigate has cross-camera snapshot disclosure via unrestricted timeline IDs and missing authorization in /api/events/{event_id}/snapshot-clean.webpfrigate · frigate · CWE-862 | Orta4,3 | — | %0,3 | 26 Mar 2026 |
17İzleyin | CVE-2026-33126İstismar yok | Frigate has SSRF vulnerability in /ffprobe endpointfrigate · frigate · CWE-918 | Orta4,3 | — | %0,3 | 20 Mar 2026 |
- CVE-2026-2564337İzleyin
Frigate Affected by Authenticated Remote Command Execution (RCE) and Container Escape
KritikCVSS 9,1Kavram kanıtıEPSS %4frigate · frigate6 Şub 2026
- CVE-2026-3312434İzleyin
Frigate has insecure password change functionality
YüksekCVSS 8,6İstismar yokEPSS %0frigate · frigate20 Mar 2026
- CVE-2026-3312532İzleyin
Frigate Broken Access Control: Users assigned the viewer role can delete admin and other low-privileged accounts
YüksekCVSS 8,1İstismar yokEPSS %0frigate · frigate20 Mar 2026
- CVE-2023-4567230İzleyin
Frigate unsafe deserialization in `load_config_with_no_duplicates` of `frigate/util/builtin.py`
YüksekCVSS 7,5İstismar yokEPSS %1frigate · frigate30 Eki 2023
- CVE-2024-3287427İzleyin
In Frigate, Malicious Long Unicode filenames may cause a Multiple Application-level Denial of Service
OrtaCVSS 6,8İstismar yokEPSS %1blakeblackshear · frigate14 May 2024
- CVE-2023-4567027İzleyin
Frigate cross-site request forgery in `config_save` and `config_set` request handlers
OrtaCVSS 6,8İstismar yokEPSS %0frigate · frigate30 Eki 2023
- CVE-2026-3346926İzleyin
Authenticated Frigate users can read the full unredacted configuration via `/api/config/raw
OrtaCVSS 6,5İstismar yokEPSS %0frigate · frigate26 Mar 2026
- CVE-2023-4567118İzleyin
Frigate reflected XSS through `/<camera_name>` API endpoints
OrtaCVSS 4,7Kavram kanıtıEPSS %1frigate · frigate30 Eki 2023
- CVE-2026-3347017İzleyin
Frigate has cross-camera snapshot disclosure via unrestricted timeline IDs and missing authorization in /api/events/{event_id}/snapshot-clean.webp
OrtaCVSS 4,3İstismar yokEPSS %0frigate · frigate26 Mar 2026
- CVE-2026-3312617İzleyin
Frigate has SSRF vulnerability in /ffprobe endpoint
OrtaCVSS 4,3İstismar yokEPSS %0frigate · frigate20 Mar 2026