minecraft kayıtları
minecraft üreticisine ait 4 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-190 Integer Overflow or Wraparound1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-502 Deserialization of Untrusted Data1
- CWE-59 Improper Link Resolution Before File Access ('Link Following')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
4 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2021-33790İstismar yok | The RebornCore library before 4.7.3 allows remote code execution because it deserializes untrusted data in ObjectInputStream.readObject as ptechreborn · reborncore · CWE-502 | Kritik9,8 | — | %2,8 | 31 May 2021 |
40Planlayın | CVE-2022-23884Kavram kanıtı | Mojang Bedrock Dedicated Server 1.18.2 is affected by an integer overflow leading to a bound check bypass caused by PurchaseReceiptPacket::_minecraft · bedrock server · CWE-190 | Kritik9,8 | — | %2,6 | 28 Mar 2022 |
35İzleyin | CVE-2023-33245İstismar yok | Minecraft through 1.19 and 1.20 pre-releases before 7 (Java) allow arbitrary file overwrite, and possibly code execution, via crafted world minecraft · minecraft · CWE-59 | Yüksek8,8 | — | %0,9 | 30 May 2023 |
30İzleyin | CVE-2021-35054İstismar yok | Minecraft before 1.17.1, when online-mode=false is configured, allows path traversal for deletion of arbitrary JSON files.minecraft · minecraft · CWE-22 | Yüksek7,5 | — | %1,4 | 20 Tem 2021 |
- CVE-2021-3379040Planlayın
The RebornCore library before 4.7.3 allows remote code execution because it deserializes untrusted data in ObjectInputStream.readObject as p
KritikCVSS 9,8İstismar yokEPSS %3techreborn · reborncore31 May 2021
- CVE-2022-2388440Planlayın
Mojang Bedrock Dedicated Server 1.18.2 is affected by an integer overflow leading to a bound check bypass caused by PurchaseReceiptPacket::_
KritikCVSS 9,8Kavram kanıtıEPSS %3minecraft · bedrock server28 Mar 2022
- CVE-2023-3324535İzleyin
Minecraft through 1.19 and 1.20 pre-releases before 7 (Java) allow arbitrary file overwrite, and possibly code execution, via crafted world
YüksekCVSS 8,8İstismar yokEPSS %1minecraft · minecraft30 May 2023
- CVE-2021-3505430İzleyin
Minecraft before 1.17.1, when online-mode=false is configured, allows path traversal for deletion of arbitrary JSON files.
YüksekCVSS 7,5İstismar yokEPSS %1minecraft · minecraft20 Tem 2021