hummingbird kayıtları
hummingbird üreticisine ait 43 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 1 · %2,3
- Pre-auth RCE
- 8
- Düzeltme kaydı olan
- %60,5
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-122 Heap-based Buffer Overflow3
- CWE-787 Out-of-bounds Write2
- CWE-59 Improper Link Resolution Before File Access ('Link Following')2
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer2
- CWE-73 External Control of File Name or Path2
- CWE-190 Integer Overflow or Wraparound2
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
43 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
46Planlayın | CVE-2008-4728Kavram kanıtı | Multiple insecure method vulnerabilities in the DeployRun.DeploymentSetup.1 (DeployRun.dll) ActiveX control 10.0.0.44 in Hummingbird Deploymhummingbird · deployment wizard | Kritik9,3 | — | %31,6 | 23 Eki 2008 |
40Planlayın | CVE-2005-1815Silahlaştırılmış | Multiple buffer overflows in Hummingbird Connectivity inetD 10.0.0.1 and 9.0.0.4 allows attackers to cause a denial of service and possibly hummingbird · connectivity | Orta5,0 | — | %47,1 | 1 Haz 2005 |
37İzleyin | CVE-2026-44990İstismar yok | Apostrophe has default XSS via `xmp` raw-text passthrough in `sanitize-html`apostrophecms · sanitize-html · CWE-79 | Kritik9,3 | — | %0,6 | 12 Haz 2026 |
36İzleyin | CVE-2026-6100İstismar yok | Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressurepython software foundation · cpython · CWE-416 | Kritik9,1 | — | %0,5 | 13 Nis 2026 |
34İzleyin | CVE-2026-46385İstismar yok | iskorotkov/avro: CPU Exhaustion in Avro Decoderiskorotkov · avro · CWE-400 | Yüksek8,7 | — | %0,6 | 29 May 2026 |
34İzleyin | CVE-2026-46384İstismar yok | iskorotkov/avro: Integer Overflow in Avro Decoderiskorotkov · avro · CWE-190 | Yüksek8,7 | — | %0,5 | 29 May 2026 |
33İzleyin | CVE-2025-13878İstismar yok | Malformed BRID/HHIT records can cause named to terminate unexpectedlyisc · bind 9 · CWE-617 | Yüksek7,5 | — | %9,4 | 21 Oca 2026 |
33İzleyin | CVE-2026-54369İstismar yok | acl < 2.4.0 Symlink Traversal Privilege Escalation via libacl Functionsacl project · acl · CWE-59 | Yüksek8,4 | — | %0,1 | 29 Haz 2026 |
33İzleyin | CVE-2026-54371İstismar yok | attr < 2.6.0 Symlink Traversal Privilege Escalation via getfattr/setfattrattr project · attr · CWE-59 | Yüksek8,4 | — | %0,1 | 29 Haz 2026 |
32İzleyin | CVE-2026-41316İstismar yok | ERB has an @_init deserialization guard bypass via def_module / def_method / def_classruby · erb · CWE-693 | Yüksek8,1 | — | %1,1 | 24 Nis 2026 |
31İzleyin | CVE-2026-10118İstismar yok | Poppler: integer overflow in poppler splashoutputdev::tilingpatternfill leads to heap buffer overflow via unchecked dimension multiplicationred hat · red hat enterprise linux 10 · CWE-190 | Yüksek7,8 | — | %0,2 | 1 Haz 2026 |
30İzleyin | CVE-2003-1103İstismar yok | SQL injection vulnerability in loginact.asp for Hummingbird CyberDOCS before 3.9 allows remote attackers to execute arbitrary SQL commands.hummingbird · cyberdocs | Yüksek7,5 | — | %1,5 | 31 Ara 2003 |
30İzleyin | CVE-2026-6893İstismar yok | Dracut: dracut: root code execution via dhcp options command injectionred hat · red hat enterprise linux 10 · CWE-78 | Yüksek7,5 | — | %1,2 | 10 Haz 2026 |
30İzleyin | CVE-2026-33846İstismar yok | Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassemblyred hat · red hat enterprise linux 10 · CWE-130 | Yüksek7,5 | — | %1,2 | 4 May 2026 |
30İzleyin | CVE-2005-2599İstismar yok | Hummingbird FTP for Connectivity 10.0 uses weak encryption (trivial encoding) to store the user's password in the FTP profile, which allows hummingbird · connectivity | Yüksek7,5 | — | %1,1 | 17 Ağu 2005 |
30İzleyin | CVE-1999-1280İstismar yok | Hummingbird Exceed 6.0.1.0 inadvertently includes a DLL that was meant for development and testing, which logs user names and passwords in chummingbird · exceed | Yüksek7,5 | — | %1,1 | 3 Ara 1998 |
30İzleyin | CVE-2026-48863İstismar yok | Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of serviceopensuse · libsolv · CWE-121 | Yüksek7,5 | — | %0,8 | 15 Tem 2026 |
30İzleyin | CVE-2026-4111İstismar yok | Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchivered hat · red hat enterprise linux 10 · CWE-835 | Yüksek7,5 | — | %0,7 | 13 Mar 2026 |
30İzleyin | CVE-2026-56208İstismar yok | Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modered hat · red hat enterprise linux 10.0 extended update support · CWE-122 | Yüksek7,6 | — | %0,6 | 19 Haz 2026 |
30İzleyin | CVE-2026-40164İstismar yok | jq: Algorithmic complexity DoS via hardcoded MurmurHash3 seedjqlang · jq · CWE-328 | Yüksek7,5 | — | %0,3 | 14 Nis 2026 |
29İzleyin | CVE-2008-4729Kavram kanıtı | Stack-based buffer overflow in Hummingbird.XWebHostCtrl.1 ActiveX control (hclxweb.dll) in Hummingbird Xweb ActiveX Control 13.0 and earlierhummingbird · exceed · CWE-119 | Orta6,8 | — | %6,8 | 23 Eki 2008 |
29İzleyin | CVE-2025-55131İstismar yok | A flaw in Node.js's buffer allocation logic can expose uninitialized memory when allocations are interrupted, when using the `vm` module witnodejs · node · CWE-120 | Yüksek7,1 | — | %3,4 | 20 Oca 2026 |
29İzleyin | CVE-2026-12912İstismar yok | Libtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff imagered hat · red hat enterprise linux 10 · CWE-122 | Yüksek7,3 | — | %0,4 | 29 Haz 2026 |
28İzleyin | CVE-2026-56211İstismar yok | Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesred hat · red hat enterprise linux ai 3.3 for rhel 9 · CWE-787 | Yüksek7,1 | — | %0,8 | 19 Haz 2026 |
28İzleyin | CVE-2026-26157Kavram kanıtı | Busybox: busybox: arbitrary file overwrite and potential code execution via incomplete path sanitizationred hat · red hat hardened images · CWE-73 | Yüksek7,0 | — | %0,7 | 11 Şub 2026 |
- CVE-2008-472846Planlayın
Multiple insecure method vulnerabilities in the DeployRun.DeploymentSetup.1 (DeployRun.dll) ActiveX control 10.0.0.44 in Hummingbird Deploym
KritikCVSS 9,3Kavram kanıtıEPSS %31hummingbird · deployment wizard23 Eki 2008
- CVE-2005-181540Planlayın
Multiple buffer overflows in Hummingbird Connectivity inetD 10.0.0.1 and 9.0.0.4 allows attackers to cause a denial of service and possibly
OrtaCVSS 5,0SilahlaştırılmışEPSS %47hummingbird · connectivity1 Haz 2005
- CVE-2026-4499037İzleyin
Apostrophe has default XSS via `xmp` raw-text passthrough in `sanitize-html`
KritikCVSS 9,3İstismar yokEPSS %0apostrophecms · sanitize-html12 Haz 2026
- CVE-2026-610036İzleyin
Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressure
KritikCVSS 9,1İstismar yokEPSS %0python software foundation · cpython13 Nis 2026
- CVE-2026-4638534İzleyin
iskorotkov/avro: CPU Exhaustion in Avro Decoder
YüksekCVSS 8,7İstismar yokEPSS %0iskorotkov · avro29 May 2026
- CVE-2026-4638434İzleyin
iskorotkov/avro: Integer Overflow in Avro Decoder
YüksekCVSS 8,7İstismar yokEPSS %0iskorotkov · avro29 May 2026
- CVE-2025-1387833İzleyin
Malformed BRID/HHIT records can cause named to terminate unexpectedly
YüksekCVSS 7,5İstismar yokEPSS %9isc · bind 921 Oca 2026
- CVE-2026-5436933İzleyin
acl < 2.4.0 Symlink Traversal Privilege Escalation via libacl Functions
YüksekCVSS 8,4İstismar yokEPSS %0acl project · acl29 Haz 2026
- CVE-2026-5437133İzleyin
attr < 2.6.0 Symlink Traversal Privilege Escalation via getfattr/setfattr
YüksekCVSS 8,4İstismar yokEPSS %0attr project · attr29 Haz 2026
- CVE-2026-4131632İzleyin
ERB has an @_init deserialization guard bypass via def_module / def_method / def_class
YüksekCVSS 8,1İstismar yokEPSS %1ruby · erb24 Nis 2026
- CVE-2026-1011831İzleyin
Poppler: integer overflow in poppler splashoutputdev::tilingpatternfill leads to heap buffer overflow via unchecked dimension multiplication
YüksekCVSS 7,8İstismar yokEPSS %0red hat · red hat enterprise linux 101 Haz 2026
- CVE-2003-110330İzleyin
SQL injection vulnerability in loginact.asp for Hummingbird CyberDOCS before 3.9 allows remote attackers to execute arbitrary SQL commands.
YüksekCVSS 7,5İstismar yokEPSS %1hummingbird · cyberdocs31 Ara 2003
- CVE-2026-689330İzleyin
Dracut: dracut: root code execution via dhcp options command injection
YüksekCVSS 7,5İstismar yokEPSS %1red hat · red hat enterprise linux 1010 Haz 2026
- CVE-2026-3384630İzleyin
Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly
YüksekCVSS 7,5İstismar yokEPSS %1red hat · red hat enterprise linux 104 May 2026
- CVE-2005-259930İzleyin
Hummingbird FTP for Connectivity 10.0 uses weak encryption (trivial encoding) to store the user's password in the FTP profile, which allows
YüksekCVSS 7,5İstismar yokEPSS %1hummingbird · connectivity17 Ağu 2005
- CVE-1999-128030İzleyin
Hummingbird Exceed 6.0.1.0 inadvertently includes a DLL that was meant for development and testing, which logs user names and passwords in c
YüksekCVSS 7,5İstismar yokEPSS %1hummingbird · exceed3 Ara 1998
- CVE-2026-4886330İzleyin
Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service
YüksekCVSS 7,5İstismar yokEPSS %0opensuse · libsolv15 Tem 2026
- CVE-2026-411130İzleyin
Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive
YüksekCVSS 7,5İstismar yokEPSS %0red hat · red hat enterprise linux 1013 Mar 2026
- CVE-2026-5620830İzleyin
Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode
YüksekCVSS 7,6İstismar yokEPSS %0red hat · red hat enterprise linux 10.0 extended update support19 Haz 2026
- CVE-2026-4016430İzleyin
jq: Algorithmic complexity DoS via hardcoded MurmurHash3 seed
YüksekCVSS 7,5İstismar yokEPSS %0jqlang · jq14 Nis 2026
- CVE-2008-472929İzleyin
Stack-based buffer overflow in Hummingbird.XWebHostCtrl.1 ActiveX control (hclxweb.dll) in Hummingbird Xweb ActiveX Control 13.0 and earlier
OrtaCVSS 6,8Kavram kanıtıEPSS %6hummingbird · exceed23 Eki 2008
- CVE-2025-5513129İzleyin
A flaw in Node.js's buffer allocation logic can expose uninitialized memory when allocations are interrupted, when using the `vm` module wit
YüksekCVSS 7,1İstismar yokEPSS %3nodejs · node20 Oca 2026
- CVE-2026-1291229İzleyin
Libtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff image
YüksekCVSS 7,3İstismar yokEPSS %0red hat · red hat enterprise linux 1029 Haz 2026
- CVE-2026-5621128İzleyin
Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled frames
YüksekCVSS 7,1İstismar yokEPSS %0red hat · red hat enterprise linux ai 3.3 for rhel 919 Haz 2026
- CVE-2026-2615728İzleyin
Busybox: busybox: arbitrary file overwrite and potential code execution via incomplete path sanitization
YüksekCVSS 7,0Kavram kanıtıEPSS %0red hat · red hat hardened images11 Şub 2026