NaturalIntelligence kayıtları
naturalintelligence üreticisine ait 10 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-776 Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')2
- CWE-400 Uncontrolled Resource Consumption2
- CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')1
- CWE-185 Incorrect Regular Expression1
- CWE-20 Improper Input Validation1
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
10 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
37İzleyin | CVE-2026-25896İstismar yok | fast-xml-parser has an entity encoding bypass via regex injection in DOCTYPE entity namesnaturalintelligence · fast-xml-parser · CWE-185 | Kritik9,3 | — | %0,5 | 20 Şub 2026 |
30İzleyin | CVE-2023-34104İstismar yok | Regex Injection via Doctype Entitiesnaturalintelligence · fast-xml-parser · CWE-400 | Yüksek7,5 | — | %1,1 | 6 Haz 2023 |
30İzleyin | CVE-2026-26278İstismar yok | fast-xml-parser affected by DoS through entity expansion in DOCTYPE (no expansion limit)naturalintelligence · fast-xml-parser · CWE-776 | Yüksek7,5 | — | %1,0 | 19 Şub 2026 |
30İzleyin | CVE-2024-41818İstismar yok | ReDOS at currency parsing fast-xml-parsernaturalintelligence · fast-xml-parser · CWE-400 | Yüksek7,5 | — | %0,8 | 29 Tem 2024 |
30İzleyin | CVE-2026-33036İstismar yok | fast-xml-parser affected by numeric entity expansion bypassing all entity expansion limits (incomplete fix for CVE-2026-26278)naturalintelligence · fast-xml-parser · CWE-776 | Yüksek7,5 | — | %0,7 | 20 Mar 2026 |
30İzleyin | CVE-2026-25128İstismar yok | fast-xml-parser has RangeError DoS Numeric Entities Bugnaturalintelligence · fast-xml-parser · CWE-20 | Yüksek7,5 | — | %0,6 | 30 Oca 2026 |
26İzleyin | CVE-2023-26920İstismar yok | fast-xml-parser before 4.1.2 allows __proto__ for Prototype Pollution.naturalintelligence · fast xml parser · CWE-1321 | Orta6,5 | — | %1,2 | 12 Ara 2023 |
24İzleyin | CVE-2026-41650İstismar yok | fast-xml-parser XMLBuilder: XML Comment and CDATA Injection via Unescaped Delimitersnaturalintelligence · fast-xml-parser · CWE-91 | Orta6,1 | — | %0,3 | 7 May 2026 |
23İzleyin | CVE-2026-33349İstismar yok | fast-xml-parser: Entity Expansion Limits Bypassed When Set to Zero Due to JavaScript Falsy Evaluationnaturalintelligence · fast-xml-parser · CWE-1284 | Orta5,9 | — | %0,5 | 24 Mar 2026 |
10İzleyin | CVE-2026-27942İstismar yok | fast-xml-parser has stack overflow in XMLBuilder with preserveOrdernaturalintelligence · fast-xml-parser · CWE-120 | Düşük2,7 | — | %0,7 | 25 Şub 2026 |
- CVE-2026-2589637İzleyin
fast-xml-parser has an entity encoding bypass via regex injection in DOCTYPE entity names
KritikCVSS 9,3İstismar yokEPSS %0naturalintelligence · fast-xml-parser20 Şub 2026
- CVE-2023-3410430İzleyin
Regex Injection via Doctype Entities
YüksekCVSS 7,5İstismar yokEPSS %1naturalintelligence · fast-xml-parser6 Haz 2023
- CVE-2026-2627830İzleyin
fast-xml-parser affected by DoS through entity expansion in DOCTYPE (no expansion limit)
YüksekCVSS 7,5İstismar yokEPSS %1naturalintelligence · fast-xml-parser19 Şub 2026
- CVE-2024-4181830İzleyin
ReDOS at currency parsing fast-xml-parser
YüksekCVSS 7,5İstismar yokEPSS %1naturalintelligence · fast-xml-parser29 Tem 2024
- CVE-2026-3303630İzleyin
fast-xml-parser affected by numeric entity expansion bypassing all entity expansion limits (incomplete fix for CVE-2026-26278)
YüksekCVSS 7,5İstismar yokEPSS %1naturalintelligence · fast-xml-parser20 Mar 2026
- CVE-2026-2512830İzleyin
fast-xml-parser has RangeError DoS Numeric Entities Bug
YüksekCVSS 7,5İstismar yokEPSS %1naturalintelligence · fast-xml-parser30 Oca 2026
- CVE-2023-2692026İzleyin
fast-xml-parser before 4.1.2 allows __proto__ for Prototype Pollution.
OrtaCVSS 6,5İstismar yokEPSS %1naturalintelligence · fast xml parser12 Ara 2023
- CVE-2026-4165024İzleyin
fast-xml-parser XMLBuilder: XML Comment and CDATA Injection via Unescaped Delimiters
OrtaCVSS 6,1İstismar yokEPSS %0naturalintelligence · fast-xml-parser7 May 2026
- CVE-2026-3334923İzleyin
fast-xml-parser: Entity Expansion Limits Bypassed When Set to Zero Due to JavaScript Falsy Evaluation
OrtaCVSS 5,9İstismar yokEPSS %0naturalintelligence · fast-xml-parser24 Mar 2026
- CVE-2026-2794210İzleyin
fast-xml-parser has stack overflow in XMLBuilder with preserveOrder
DüşükCVSS 2,7İstismar yokEPSS %1naturalintelligence · fast-xml-parser25 Şub 2026