nicolargo kayıtları
nicolargo üreticisine ait 15 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor5
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3
- CWE-346 Origin Validation Error2
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2
- CWE-942 Permissive Cross-domain Security Policy with Untrusted Domains2
- CWE-918 Server-Side Request Forgery (SSRF)1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
15 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
36İzleyin | CVE-2026-32633İstismar yok | Glances's Browser API Exposes Reusable Downstream Credentials via `/api/4/serverslist`nicolargo · glances · CWE-200 | Kritik9,1 | — | %0,4 | 18 Mar 2026 |
36İzleyin | CVE-2026-32611İstismar yok | Glances has a SQL Injection in DuckDB Export via Unparameterized DDL Statementsnicolargo · glances · CWE-89 | Kritik9,1 | — | %0,3 | 18 Mar 2026 |
35İzleyin | CVE-2026-30928Kavram kanıtı | Glances Exposes Unauthenticated Configuration Secretsnicolargo · glances · CWE-200 | Yüksek8,7 | — | %1,6 | 10 Mar 2026 |
34İzleyin | CVE-2026-32596Kavram kanıtı | Glances exposes the REST API without authenticationnicolargo · glances · CWE-200 | Yüksek8,7 | — | %1,5 | 18 Mar 2026 |
32İzleyin | CVE-2026-32610İstismar yok | Glances's Default CORS Configuration Allows Cross-Origin Credential Theftnicolargo · glances · CWE-942 | Yüksek8,1 | — | %0,3 | 18 Mar 2026 |
32İzleyin | CVE-2026-32634İstismar yok | Glances Central Browser Autodiscovery Leaks Reusable Credentials to Zeroconf-Spoofed Serversnicolargo · glances · CWE-346 | Yüksek8,1 | — | %0,2 | 18 Mar 2026 |
31İzleyin | CVE-2026-33641Kavram kanıtı | Glances Vulnerable to Command Injection via Dynamic Configuration Valuesnicolargo · glances · CWE-78 | Yüksek7,8 | — | %0,9 | 2 Nis 2026 |
30İzleyin | CVE-2026-32609İstismar yok | Glances has Incomplete Secrets Redaction: /api/v4/args Endpoint Leaks Password Hash and SNMP Credentialsnicolargo · glances · CWE-200 | Yüksek7,5 | — | %0,5 | 18 Mar 2026 |
30İzleyin | CVE-2026-34839İstismar yok | Glances Vulnerable to Cross-Origin Information Disclosure via Unauthenticated REST API (/api/4) due to Permissive CORSnicolargo · glances · CWE-200 | Yüksek7,7 | — | %0,4 | 21 Nis 2026 |
29İzleyin | CVE-2026-35587İstismar yok | Glances IP Plugin has SSRF via public_api that leads to credential leakagenicolargo · glances · CWE-918 | Yüksek7,3 | — | %0,3 | 21 Nis 2026 |
29İzleyin | CVE-2026-30930İstismar yok | Glances has SQL Injection via Process Names in TimescaleDB Exportnicolargo · glances · CWE-89 | Yüksek7,3 | — | %0,3 | 10 Mar 2026 |
28İzleyin | CVE-2026-33533İstismar yok | Glances Vulnerable to Cross-Origin System Information Disclosure via XML-RPC Server CORS Wildcardnicolargo · glances · CWE-942 | Yüksek7,1 | — | %0,3 | 2 Nis 2026 |
28İzleyin | CVE-2026-32608İstismar yok | Glances has a Command Injection via Process Names in Action Command Templatesnicolargo · glances · CWE-78 | Yüksek7,0 | — | %0,2 | 18 Mar 2026 |
25İzleyin | CVE-2026-35588İstismar yok | Glances has CQL Injection in its Cassandra Export Module via Unsanitized Config Valuesnicolargo · glances · CWE-89 | Orta6,3 | — | %0,2 | 21 Nis 2026 |
23İzleyin | CVE-2026-32632İstismar yok | Glances's REST/WebUI Lacks Host Validation and Remains Exposed to DNS Rebindingnicolargo · glances · CWE-346 | Orta5,9 | — | %0,1 | 18 Mar 2026 |
- CVE-2026-3263336İzleyin
Glances's Browser API Exposes Reusable Downstream Credentials via `/api/4/serverslist`
KritikCVSS 9,1İstismar yokEPSS %0nicolargo · glances18 Mar 2026
- CVE-2026-3261136İzleyin
Glances has a SQL Injection in DuckDB Export via Unparameterized DDL Statements
KritikCVSS 9,1İstismar yokEPSS %0nicolargo · glances18 Mar 2026
- CVE-2026-3092835İzleyin
Glances Exposes Unauthenticated Configuration Secrets
YüksekCVSS 8,7Kavram kanıtıEPSS %1nicolargo · glances10 Mar 2026
- CVE-2026-3259634İzleyin
Glances exposes the REST API without authentication
YüksekCVSS 8,7Kavram kanıtıEPSS %1nicolargo · glances18 Mar 2026
- CVE-2026-3261032İzleyin
Glances's Default CORS Configuration Allows Cross-Origin Credential Theft
YüksekCVSS 8,1İstismar yokEPSS %0nicolargo · glances18 Mar 2026
- CVE-2026-3263432İzleyin
Glances Central Browser Autodiscovery Leaks Reusable Credentials to Zeroconf-Spoofed Servers
YüksekCVSS 8,1İstismar yokEPSS %0nicolargo · glances18 Mar 2026
- CVE-2026-3364131İzleyin
Glances Vulnerable to Command Injection via Dynamic Configuration Values
YüksekCVSS 7,8Kavram kanıtıEPSS %0nicolargo · glances2 Nis 2026
- CVE-2026-3260930İzleyin
Glances has Incomplete Secrets Redaction: /api/v4/args Endpoint Leaks Password Hash and SNMP Credentials
YüksekCVSS 7,5İstismar yokEPSS %0nicolargo · glances18 Mar 2026
- CVE-2026-3483930İzleyin
Glances Vulnerable to Cross-Origin Information Disclosure via Unauthenticated REST API (/api/4) due to Permissive CORS
YüksekCVSS 7,7İstismar yokEPSS %0nicolargo · glances21 Nis 2026
- CVE-2026-3558729İzleyin
Glances IP Plugin has SSRF via public_api that leads to credential leakage
YüksekCVSS 7,3İstismar yokEPSS %0nicolargo · glances21 Nis 2026
- CVE-2026-3093029İzleyin
Glances has SQL Injection via Process Names in TimescaleDB Export
YüksekCVSS 7,3İstismar yokEPSS %0nicolargo · glances10 Mar 2026
- CVE-2026-3353328İzleyin
Glances Vulnerable to Cross-Origin System Information Disclosure via XML-RPC Server CORS Wildcard
YüksekCVSS 7,1İstismar yokEPSS %0nicolargo · glances2 Nis 2026
- CVE-2026-3260828İzleyin
Glances has a Command Injection via Process Names in Action Command Templates
YüksekCVSS 7,0İstismar yokEPSS %0nicolargo · glances18 Mar 2026
- CVE-2026-3558825İzleyin
Glances has CQL Injection in its Cassandra Export Module via Unsanitized Config Values
OrtaCVSS 6,3İstismar yokEPSS %0nicolargo · glances21 Nis 2026
- CVE-2026-3263223İzleyin
Glances's REST/WebUI Lacks Host Validation and Remains Exposed to DNS Rebinding
OrtaCVSS 5,9İstismar yokEPSS %0nicolargo · glances18 Mar 2026