layer5 kayıtları
layer5 üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %66,7
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')5
- CWE-284 Improper Access Control1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
62Bu hafta | CVE-2021-31856Kavram kanıtı | A SQL Injection vulnerability in the REST API in Layer5 Meshery 0.5.2 allows an attacker to execute arbitrary SQL commands via the /experimelayer5 · meshery · CWE-89 | Kritik9,8 | — | %75,4 | 28 Nis 2021 |
39İzleyin | CVE-2023-46575İstismar yok | A SQL injection vulnerability exists in Meshery prior to version v0.6.179, enabling a remote attacker to retrieve sensitive information and layer5 · meshery · CWE-89 | Kritik9,8 | — | %1,3 | 24 Kas 2023 |
39İzleyin | CVE-2024-36535İstismar yok | Insecure permissions in meshery v0.7.51 allows attackers to access sensitive data and escalate privileges by obtaining the service account'slayer5 · meshery · CWE-284 | Kritik9,8 | — | %0,5 | 24 Tem 2024 |
32İzleyin | CVE-2024-35181İstismar yok | GHSL-2024-013 Meshery SQL Injection vulnerabilitylayer5 · meshery · CWE-89 | Yüksek8,1 | — | %1,6 | 27 May 2024 |
32İzleyin | CVE-2024-35182İstismar yok | GHSL-2024-014 Meshery SQL Injection vulnerabilitylayer5 · meshery · CWE-89 | Yüksek8,1 | — | %1,6 | 27 May 2024 |
30İzleyin | CVE-2024-29031İstismar yok | Meshery SQL Injection vulnerabilitylayer5 · meshery · CWE-89 | Yüksek7,5 | — | %1,0 | 21 Mar 2024 |
- CVE-2021-3185662Bu hafta
A SQL Injection vulnerability in the REST API in Layer5 Meshery 0.5.2 allows an attacker to execute arbitrary SQL commands via the /experime
KritikCVSS 9,8Kavram kanıtıEPSS %75layer5 · meshery28 Nis 2021
- CVE-2023-4657539İzleyin
A SQL injection vulnerability exists in Meshery prior to version v0.6.179, enabling a remote attacker to retrieve sensitive information and
KritikCVSS 9,8İstismar yokEPSS %1layer5 · meshery24 Kas 2023
- CVE-2024-3653539İzleyin
Insecure permissions in meshery v0.7.51 allows attackers to access sensitive data and escalate privileges by obtaining the service account's
KritikCVSS 9,8İstismar yokEPSS %0layer5 · meshery24 Tem 2024
- CVE-2024-3518132İzleyin
GHSL-2024-013 Meshery SQL Injection vulnerability
YüksekCVSS 8,1İstismar yokEPSS %2layer5 · meshery27 May 2024
- CVE-2024-3518232İzleyin
GHSL-2024-014 Meshery SQL Injection vulnerability
YüksekCVSS 8,1İstismar yokEPSS %2layer5 · meshery27 May 2024
- CVE-2024-2903130İzleyin
Meshery SQL Injection vulnerability
YüksekCVSS 7,5İstismar yokEPSS %1layer5 · meshery21 Mar 2024