icewhale kayıtları
icewhale üreticisine ait 9 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 3
- Düzeltme kaydı olan
- %88,9
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-204 Observable Response Discrepancy2
- CWE-287 Improper Authentication1
- CWE-306 Missing Authentication for Critical Function1
- CWE-307 Improper Restriction of Excessive Authentication Attempts1
- CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere1
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
9 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
41Planlayın | CVE-2023-37265Kavram kanıtı | Incorrect identification of source IP addresses in CasaOSicewhale · casaos · CWE-306 | Kritik9,8 | — | %7,3 | 17 Tem 2023 |
41Planlayın | CVE-2023-37266Kavram kanıtı | Weak json web token (JWT) secrets in CasaOSicewhale · casaos · CWE-287 | Kritik9,8 | — | %6,8 | 17 Tem 2023 |
41Planlayın | CVE-2022-24193İstismar yok | CasaOS before v0.2.7 was discovered to contain a command injection vulnerability.icewhale · casaos · CWE-78 | Kritik9,8 | — | %5,5 | 10 Mar 2022 |
39İzleyin | CVE-2024-24767İstismar yok | CasaOS Improper Restriction of Excessive Authentication Attempts vulnerabilityicewhale · casaos · CWE-307 | Kritik9,8 | — | %0,9 | 6 Mar 2024 |
39İzleyin | CVE-2024-24765İstismar yok | CasaOS-UserService allows unauthorized access to any fileicewhale · casaos · CWE-200 | Kritik9,8 | — | %0,9 | 6 Mar 2024 |
35İzleyin | CVE-2023-37469İstismar yok | CasaOS Command Injection vulnerabilityicewhale · casaos · CWE-77 | Yüksek8,8 | — | %1,5 | 24 Ağu 2023 |
30İzleyin | CVE-2024-24766İstismar yok | CasaOS Username Enumerationicewhale · casaos-userservice · CWE-204 | Yüksek7,5 | — | %0,7 | 6 Mar 2024 |
30İzleyin | CVE-2024-28232İstismar yok | Username Enumeration in CasaOS via bypass of CVE-2024-24766icewhale · casaos-userservice · CWE-204 | Yüksek7,5 | — | %0,6 | 1 Nis 2024 |
27İzleyin | CVE-2025-34171Kavram kanıtı | CasaOS <= 0.4.15 Unauthenticated File and Debug Data Exposureicewhale · casaos · CWE-497 | Orta6,9 | — | %0,6 | 2 Oca 2026 |
- CVE-2023-3726541Planlayın
Incorrect identification of source IP addresses in CasaOS
KritikCVSS 9,8Kavram kanıtıEPSS %7icewhale · casaos17 Tem 2023
- CVE-2023-3726641Planlayın
Weak json web token (JWT) secrets in CasaOS
KritikCVSS 9,8Kavram kanıtıEPSS %6icewhale · casaos17 Tem 2023
- CVE-2022-2419341Planlayın
CasaOS before v0.2.7 was discovered to contain a command injection vulnerability.
KritikCVSS 9,8İstismar yokEPSS %5icewhale · casaos10 Mar 2022
- CVE-2024-2476739İzleyin
CasaOS Improper Restriction of Excessive Authentication Attempts vulnerability
KritikCVSS 9,8İstismar yokEPSS %0icewhale · casaos6 Mar 2024
- CVE-2024-2476539İzleyin
CasaOS-UserService allows unauthorized access to any file
KritikCVSS 9,8İstismar yokEPSS %0icewhale · casaos6 Mar 2024
- CVE-2023-3746935İzleyin
CasaOS Command Injection vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1icewhale · casaos24 Ağu 2023
- CVE-2024-2476630İzleyin
CasaOS Username Enumeration
YüksekCVSS 7,5İstismar yokEPSS %0icewhale · casaos-userservice6 Mar 2024
- CVE-2024-2823230İzleyin
Username Enumeration in CasaOS via bypass of CVE-2024-24766
YüksekCVSS 7,5İstismar yokEPSS %0icewhale · casaos-userservice1 Nis 2024
- CVE-2025-3417127İzleyin
CasaOS <= 0.4.15 Unauthenticated File and Debug Data Exposure
OrtaCVSS 6,9Kavram kanıtıEPSS %0icewhale · casaos2 Oca 2026