hliu kayıtları
hliu üreticisine ait 8 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-918 Server-Side Request Forgery (SSRF)3
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-400 Uncontrolled Resource Consumption1
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')1
- CWE-770 Allocation of Resources Without Limits or Throttling1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
8 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
37İzleyin | CVE-2024-9309İstismar yok | SSRF in POST /worker_generate_stream API endpoint in haotian-liu/llavahliu · llava · CWE-918 | Kritik9,3 | — | %0,5 | 20 Mar 2025 |
30İzleyin | CVE-2024-12065İstismar yok | Local File Inclusion in haotian-liu/llavahliu · llava · CWE-22 | Yüksek7,5 | — | %0,9 | 20 Mar 2025 |
30İzleyin | CVE-2024-12070İstismar yok | Denial of Service in haotian-liu/llavahliu · large language and vision assistant · CWE-400 | Yüksek7,5 | — | %0,8 | 20 Mar 2025 |
30İzleyin | CVE-2024-11449İstismar yok | Server-Side Request Forgery in haotian-liu/llavahliu · large language and vision assistant · CWE-918 | Yüksek7,5 | — | %0,7 | 20 Mar 2025 |
30İzleyin | CVE-2024-12068İstismar yok | Server-Side Request Forgery in haotian-liu/llavahliu · llava · CWE-918 | Yüksek7,5 | — | %0,7 | 20 Mar 2025 |
30İzleyin | CVE-2024-10225İstismar yok | Denial of Service in haotian-liu/llavahliu · llava · CWE-770 | Yüksek7,5 | — | %0,6 | 20 Mar 2025 |
24İzleyin | CVE-2024-9308İstismar yok | Open Redirect in haotian-liu/llavahliu · llava · CWE-601 | Orta6,1 | — | %0,5 | 20 Mar 2025 |
24İzleyin | CVE-2024-9311İstismar yok | Cross-Site Request Forgery to XSS in haotian-liu/llavahliu · large language and vision assistant · CWE-352 | Orta6,1 | — | %0,2 | 20 Mar 2025 |
- CVE-2024-930937İzleyin
SSRF in POST /worker_generate_stream API endpoint in haotian-liu/llava
KritikCVSS 9,3İstismar yokEPSS %0hliu · llava20 Mar 2025
- CVE-2024-1206530İzleyin
Local File Inclusion in haotian-liu/llava
YüksekCVSS 7,5İstismar yokEPSS %0hliu · llava20 Mar 2025
- CVE-2024-1207030İzleyin
Denial of Service in haotian-liu/llava
YüksekCVSS 7,5İstismar yokEPSS %0hliu · large language and vision assistant20 Mar 2025
- CVE-2024-1144930İzleyin
Server-Side Request Forgery in haotian-liu/llava
YüksekCVSS 7,5İstismar yokEPSS %0hliu · large language and vision assistant20 Mar 2025
- CVE-2024-1206830İzleyin
Server-Side Request Forgery in haotian-liu/llava
YüksekCVSS 7,5İstismar yokEPSS %0hliu · llava20 Mar 2025
- CVE-2024-1022530İzleyin
Denial of Service in haotian-liu/llava
YüksekCVSS 7,5İstismar yokEPSS %0hliu · llava20 Mar 2025
- CVE-2024-930824İzleyin
Open Redirect in haotian-liu/llava
OrtaCVSS 6,1İstismar yokEPSS %0hliu · llava20 Mar 2025
- CVE-2024-931124İzleyin
Cross-Site Request Forgery to XSS in haotian-liu/llava
OrtaCVSS 6,1İstismar yokEPSS %0hliu · large language and vision assistant20 Mar 2025