glance project kayıtları
glance project üreticisine ait 4 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %75
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
4 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
37İzleyin | CVE-2022-31546İstismar yok | The nlpweb/glance repository through 2014-06-27 on GitHub allows absolute path traversal because the Flask send_file function is used unsafeglance project · glance · CWE-22 | Kritik9,3 | — | %1,3 | 10 Tem 2022 |
26İzleyin | CVE-2018-3715İstismar yok | glance node module before 3.0.4 suffers from a Path Traversal vulnerability due to lack of validation of path passed to it, which allows a mglance project · glance · CWE-22 | Orta6,5 | — | %1,4 | 6 Haz 2018 |
26İzleyin | CVE-2022-25937İstismar yok | Versions of the package glance before 3.0.9 are vulnerable to Directory Traversal that allows users to read files outside the public root diglance project · glance · CWE-22 | Orta6,5 | — | %1,1 | 13 Şub 2023 |
24İzleyin | CVE-2018-3748İstismar yok | There is a Stored XSS vulnerability in the glance node module versions <= 3.0.5.glance project · glance · CWE-79 | Orta6,1 | — | %0,9 | 3 Tem 2018 |
- CVE-2022-3154637İzleyin
The nlpweb/glance repository through 2014-06-27 on GitHub allows absolute path traversal because the Flask send_file function is used unsafe
KritikCVSS 9,3İstismar yokEPSS %1glance project · glance10 Tem 2022
- CVE-2018-371526İzleyin
glance node module before 3.0.4 suffers from a Path Traversal vulnerability due to lack of validation of path passed to it, which allows a m
OrtaCVSS 6,5İstismar yokEPSS %1glance project · glance6 Haz 2018
- CVE-2022-2593726İzleyin
Versions of the package glance before 3.0.9 are vulnerable to Directory Traversal that allows users to read files outside the public root di
OrtaCVSS 6,5İstismar yokEPSS %1glance project · glance13 Şub 2023
- CVE-2018-374824İzleyin
There is a Stored XSS vulnerability in the glance node module versions <= 3.0.5.
OrtaCVSS 6,1İstismar yokEPSS %0glance project · glance3 Tem 2018