İçeriğe atla
Noroxi

langgenius kayıtları

langgenius üreticisine ait 27 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%37
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 25
  2. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

27 kayıt
  • CVE-2025-63387
    39İzleyin

    Dify v1.9.1 is vulnerable to Insecure Permissions.

    YüksekCVSS 7,5Kavram kanıtıEPSS %30

    langgenius · dify18 Ara 2025

  • CVE-2025-56157
    39İzleyin

    Default credentials in Dify thru 1.5.1.

    KritikCVSS 9,8İstismar yokEPSS %1

    langgenius · dify18 Ara 2025

  • CVE-2025-63386
    36İzleyin

    A Cross-Origin Resource Sharing (CORS) misconfiguration vulnerability exists in Dify v1.9.1 in the /console/api/setup endpoint.

    KritikCVSS 9,1İstismar yokEPSS %0

    langgenius · dify18 Ara 2025

  • CVE-2025-63388
    36İzleyin

    A Cross-Origin Resource Sharing (CORS) misconfiguration vulnerability exists in Dify v1.9.1 in the /console/api/system-features endpoint.

    KritikCVSS 9,1İstismar yokEPSS %0

    langgenius · dify18 Ara 2025

  • CVE-2025-1796
    35İzleyin

    Admin account takeover through weak Pseudo-Random number generator used in generating password reset codes in langgenius/dify

    YüksekCVSS 8,8İstismar yokEPSS %1

    langgenius · dify20 Mar 2025

  • CVE-2024-12039
    32İzleyin

    Improper Restriction of Excessive Authentication Attempts in langgenius/dify

    YüksekCVSS 8,1İstismar yokEPSS %1

    langgenius · dify20 Mar 2025

  • CVE-2024-12776
    32İzleyin

    Authentication Bypass in langgenius/dify

    YüksekCVSS 8,1İstismar yokEPSS %1

    langgenius · dify20 Mar 2025

  • CVE-2024-11824
    30İzleyin

    Stored XSS in langgenius/dify

    YüksekCVSS 7,6İstismar yokEPSS %0

    langgenius · dify20 Mar 2025

  • CVE-2025-43862
    30İzleyin

    Dify Allows Unauthorized Access and Modification of APP Orchestration

    YüksekCVSS 7,6İstismar yokEPSS %0

    langgenius · dify25 Nis 2025

  • CVE-2025-3466
    28İzleyin

    Unsanitized Input in langgenius/dify

    YüksekCVSS 7,2İstismar yokEPSS %1

    langgenius · dify7 Tem 2025

  • CVE-2024-10252
    28İzleyin

    Code Injection in langgenius/dify

    YüksekCVSS 7,2İstismar yokEPSS %1

    langgenius · dify20 Mar 2025

  • CVE-2026-42138
    27İzleyin

    Dify Vulnerable to Stored XSS via SVG-file upload

    OrtaCVSS 6,9İstismar yokEPSS %0

    langgenius · dify4 May 2026

  • CVE-2024-12775
    26İzleyin

    SSRF in langgenius/dify

    OrtaCVSS 6,5İstismar yokEPSS %1

    langgenius · dify20 Mar 2025

  • CVE-2025-0184
    26İzleyin

    Server-Side Request Forgery (SSRF) in langgenius/dify

    OrtaCVSS 6,5Kavram kanıtıEPSS %1

    langgenius · dify20 Mar 2025

  • CVE-2025-32796
    26İzleyin

    Dify Allows Unauthorized APP Enable/Disable via API

    OrtaCVSS 6,5İstismar yokEPSS %0

    langgenius · dify18 Nis 2025

  • CVE-2025-32795
    26İzleyin

    Dify Allows Insecure User Role Access Control for APP Editing

    OrtaCVSS 6,5İstismar yokEPSS %0

    langgenius · dify18 Nis 2025

  • CVE-2026-41950
    24İzleyin

    Dify < 1.14.0 Authorization Bypass via File UUID

    OrtaCVSS 6,0İstismar yokEPSS %0

    langgenius · dify5 May 2026

  • CVE-2025-59422
    24İzleyin

    Dify Has Broken Access Control on Log Message Endpoint Allows Reading of Chats of Others

    OrtaCVSS 6,0İstismar yokEPSS %0

    langgenius · dify25 Eyl 2025

  • CVE-2025-11750
    21İzleyin

    User Enumeration via Distinct Error Messages in langgenius/dify-web

    OrtaCVSS 5,3Kavram kanıtıEPSS %1

    langgenius · dify22 Eki 2025

  • CVE-2024-11850
    21İzleyin

    Stored XSS in langgenius/dify

    OrtaCVSS 5,4İstismar yokEPSS %0

    langgenius · dify20 Mar 2025

  • CVE-2025-3467
    21İzleyin

    XSS Vulnerability in langgenius/dify

    OrtaCVSS 5,4İstismar yokEPSS %0

    langgenius · dify7 Tem 2025

  • CVE-2025-49149
    21İzleyin

    Dify has XSS vulnerability

    OrtaCVSS 5,3İstismar yokEPSS %0

    langgenius · dify17 Haz 2025

  • CVE-2025-29720
    19İzleyin

    Dify v1.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the component controllers.console.remote_files.RemoteFileUpload

    OrtaCVSS 4,8İstismar yokEPSS %0

    langgenius · dify14 Nis 2025

  • CVE-2024-11821
    17İzleyin

    Privilege Escalation in langgenius/dify

    OrtaCVSS 4,3İstismar yokEPSS %0

    langgenius · dify20 Mar 2025

  • CVE-2025-32790
    17İzleyin

    Dify Allows Insecure User Role Access Control for APP DSL Exporting

    OrtaCVSS 4,3İstismar yokEPSS %0

    langgenius · dify18 Nis 2025