llamaindex kayıtları
llamaindex üreticisine ait 24 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 6
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')6
- CWE-674 Uncontrolled Recursion3
- CWE-440 Expected Behavior Violation2
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-94 Improper Control of Generation of Code ('Code Injection')2
- CWE-770 Allocation of Resources Without Limits or Throttling1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
24 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2024-3271İstismar yok | Command Injection in run-llama/llama_indexllamaindex · llamaindex · CWE-77 | Kritik9,8 | — | %2,8 | 15 Nis 2024 |
39İzleyin | CVE-2024-11958İstismar yok | SQL Injection in run-llama/llama_indexllamaindex · llamaindex · CWE-89 | Kritik9,8 | — | %1,4 | 20 Mar 2025 |
39İzleyin | CVE-2024-12909İstismar yok | SQL Injection to RCE in run-llama/llama_indexllamaindex · llamaindex · CWE-89 | Kritik9,8 | — | %1,4 | 20 Mar 2025 |
39İzleyin | CVE-2025-1750İstismar yok | SQL Injection in run-llama/llama_indexllamaindex · llamaindex · CWE-89 | Kritik9,8 | — | %0,8 | 2 Haz 2025 |
39İzleyin | CVE-2025-1793İstismar yok | SQL Injection in run-llama/llama_indexllamaindex · llamaindex · CWE-89 | Kritik9,8 | — | %0,6 | 5 Haz 2025 |
39İzleyin | CVE-2024-23751İstismar yok | LlamaIndex (aka llama_index) through 0.9.34 allows SQL injection via the Text-to-SQL feature in NLSQLTableQueryEngine, SQLTableRetrieverQuerllamaindex · llamaindex · CWE-89 | Kritik9,8 | — | %0,6 | 21 Oca 2024 |
36İzleyin | CVE-2024-4181İstismar yok | Command Injection in run-llama/llama_indexllamaindex · llamaindex · CWE-94 | Yüksek8,8 | — | %2,1 | 16 May 2024 |
35İzleyin | CVE-2024-45201İstismar yok | An issue was discovered in llama_index before 0.10.38.llamaindex · llamaindex · CWE-94 | Yüksek8,8 | — | %0,5 | 22 Ağu 2024 |
34İzleyin | CVE-2024-58339İstismar yok | LlamaIndex <= 0.12.2 VannaQueryEngine SQL Execution Allows Resource Exhaustionllamaindex · llamaindex · CWE-770 | Yüksek8,7 | — | %0,6 | 12 Oca 2026 |
33İzleyin | CVE-2024-14021İstismar yok | LlamaIndex <= 0.11.6 BGEM3Index Unsafe Deserializationllamaindex · llamaindex · CWE-502 | Yüksek8,4 | — | %0,3 | 12 Oca 2026 |
31İzleyin | CVE-2025-1753İstismar yok | Command Injection in LLama-Index CLI in run-llama/llama_indexllamaindex · llamaindex · CWE-78 | Yüksek7,8 | — | %1,0 | 28 May 2025 |
31İzleyin | CVE-2025-7707İstismar yok | World-Writable NLTK Cache Directory Vulnerability in run-llama/llama_indexllamaindex · llamaindex · CWE-377 | Yüksek7,8 | — | %0,1 | 13 Eki 2025 |
30İzleyin | CVE-2024-12704İstismar yok | Denial of Service (DoS) in run-llama/llama_indexllamaindex · llamaindex · CWE-835 | Yüksek7,5 | — | %0,8 | 20 Mar 2025 |
30İzleyin | CVE-2025-3046İstismar yok | Path Traversal via Symbolic Links in run-llama/llama_indexllamaindex · llamaindex · CWE-22 | Yüksek7,5 | — | %0,6 | 7 Tem 2025 |
30İzleyin | CVE-2025-6209İstismar yok | Arbitrary File Read through Path Traversal in run-llama/llama_indexllamaindex · llamaindex · CWE-29 | Yüksek7,5 | — | %0,6 | 7 Tem 2025 |
30İzleyin | CVE-2025-1752İstismar yok | Denial of Service in run-llama/llama_indexllamaindex · llamaindex · CWE-674 | Yüksek7,5 | — | %0,5 | 10 May 2025 |
30İzleyin | CVE-2025-3108İstismar yok | Unsafe Deserialization in JsonPickleSerializer Enables Remote Code Execution in run-llama/llama_indexllamaindex · llamaindex · CWE-1112 | Yüksek7,5 | — | %0,5 | 6 Tem 2025 |
30İzleyin | CVE-2025-3225İstismar yok | XML Entity Expansion vulnerability in run-llama/llama_indexllamaindex · llamaindex · CWE-776 | Yüksek7,5 | — | %0,4 | 7 Tem 2025 |
28İzleyin | CVE-2024-12911İstismar yok | SQL Injection in run-llama/llama_indexllamaindex · llamaindex · CWE-89 | Yüksek7,1 | — | %0,5 | 20 Mar 2025 |
26İzleyin | CVE-2025-5472İstismar yok | Denial of Service via Uncontrolled Recursive JSON Parsing in JSONReader in run-llama/llama_indexllamaindex · llamaindex · CWE-674 | Orta6,5 | — | %0,3 | 7 Tem 2025 |
26İzleyin | CVE-2025-6211İstismar yok | MD5 Hash Collision in run-llama/llama_indexllamaindex · llamaindex · CWE-440 | Orta6,5 | — | %0,3 | 10 Tem 2025 |
24İzleyin | CVE-2025-6210İstismar yok | Hardlink-Based Path Traversal in run-llama/llama_indexllamaindex · llamaindex · CWE-22 | Orta6,2 | — | %0,3 | 7 Tem 2025 |
23İzleyin | CVE-2024-12910İstismar yok | Denial of Service in run-llama/llama_indexllamaindex · llamaindex · CWE-674 | Orta5,9 | — | %0,6 | 20 Mar 2025 |
21İzleyin | CVE-2025-3044İstismar yok | MD5 Hash Collision in run-llama/llama_indexllamaindex · llamaindex · CWE-440 | Orta5,3 | — | %0,3 | 7 Tem 2025 |
- CVE-2024-327140Planlayın
Command Injection in run-llama/llama_index
KritikCVSS 9,8İstismar yokEPSS %2llamaindex · llamaindex15 Nis 2024
- CVE-2024-1195839İzleyin
SQL Injection in run-llama/llama_index
KritikCVSS 9,8İstismar yokEPSS %1llamaindex · llamaindex20 Mar 2025
- CVE-2024-1290939İzleyin
SQL Injection to RCE in run-llama/llama_index
KritikCVSS 9,8İstismar yokEPSS %1llamaindex · llamaindex20 Mar 2025
- CVE-2025-175039İzleyin
SQL Injection in run-llama/llama_index
KritikCVSS 9,8İstismar yokEPSS %0llamaindex · llamaindex2 Haz 2025
- CVE-2025-179339İzleyin
SQL Injection in run-llama/llama_index
KritikCVSS 9,8İstismar yokEPSS %0llamaindex · llamaindex5 Haz 2025
- CVE-2024-2375139İzleyin
LlamaIndex (aka llama_index) through 0.9.34 allows SQL injection via the Text-to-SQL feature in NLSQLTableQueryEngine, SQLTableRetrieverQuer
KritikCVSS 9,8İstismar yokEPSS %0llamaindex · llamaindex21 Oca 2024
- CVE-2024-418136İzleyin
Command Injection in run-llama/llama_index
YüksekCVSS 8,8İstismar yokEPSS %2llamaindex · llamaindex16 May 2024
- CVE-2024-4520135İzleyin
An issue was discovered in llama_index before 0.10.38.
YüksekCVSS 8,8İstismar yokEPSS %0llamaindex · llamaindex22 Ağu 2024
- CVE-2024-5833934İzleyin
LlamaIndex <= 0.12.2 VannaQueryEngine SQL Execution Allows Resource Exhaustion
YüksekCVSS 8,7İstismar yokEPSS %0llamaindex · llamaindex12 Oca 2026
- CVE-2024-1402133İzleyin
LlamaIndex <= 0.11.6 BGEM3Index Unsafe Deserialization
YüksekCVSS 8,4İstismar yokEPSS %0llamaindex · llamaindex12 Oca 2026
- CVE-2025-175331İzleyin
Command Injection in LLama-Index CLI in run-llama/llama_index
YüksekCVSS 7,8İstismar yokEPSS %1llamaindex · llamaindex28 May 2025
- CVE-2025-770731İzleyin
World-Writable NLTK Cache Directory Vulnerability in run-llama/llama_index
YüksekCVSS 7,8İstismar yokEPSS %0llamaindex · llamaindex13 Eki 2025
- CVE-2024-1270430İzleyin
Denial of Service (DoS) in run-llama/llama_index
YüksekCVSS 7,5İstismar yokEPSS %0llamaindex · llamaindex20 Mar 2025
- CVE-2025-304630İzleyin
Path Traversal via Symbolic Links in run-llama/llama_index
YüksekCVSS 7,5İstismar yokEPSS %0llamaindex · llamaindex7 Tem 2025
- CVE-2025-620930İzleyin
Arbitrary File Read through Path Traversal in run-llama/llama_index
YüksekCVSS 7,5İstismar yokEPSS %0llamaindex · llamaindex7 Tem 2025
- CVE-2025-175230İzleyin
Denial of Service in run-llama/llama_index
YüksekCVSS 7,5İstismar yokEPSS %0llamaindex · llamaindex10 May 2025
- CVE-2025-310830İzleyin
Unsafe Deserialization in JsonPickleSerializer Enables Remote Code Execution in run-llama/llama_index
YüksekCVSS 7,5İstismar yokEPSS %0llamaindex · llamaindex6 Tem 2025
- CVE-2025-322530İzleyin
XML Entity Expansion vulnerability in run-llama/llama_index
YüksekCVSS 7,5İstismar yokEPSS %0llamaindex · llamaindex7 Tem 2025
- CVE-2024-1291128İzleyin
SQL Injection in run-llama/llama_index
YüksekCVSS 7,1İstismar yokEPSS %0llamaindex · llamaindex20 Mar 2025
- CVE-2025-547226İzleyin
Denial of Service via Uncontrolled Recursive JSON Parsing in JSONReader in run-llama/llama_index
OrtaCVSS 6,5İstismar yokEPSS %0llamaindex · llamaindex7 Tem 2025
- CVE-2025-621126İzleyin
MD5 Hash Collision in run-llama/llama_index
OrtaCVSS 6,5İstismar yokEPSS %0llamaindex · llamaindex10 Tem 2025
- CVE-2025-621024İzleyin
Hardlink-Based Path Traversal in run-llama/llama_index
OrtaCVSS 6,2İstismar yokEPSS %0llamaindex · llamaindex7 Tem 2025
- CVE-2024-1291023İzleyin
Denial of Service in run-llama/llama_index
OrtaCVSS 5,9İstismar yokEPSS %0llamaindex · llamaindex20 Mar 2025
- CVE-2025-304421İzleyin
MD5 Hash Collision in run-llama/llama_index
OrtaCVSS 5,3İstismar yokEPSS %0llamaindex · llamaindex7 Tem 2025