nim-lang kayıtları
nim-lang üreticisine ait 11 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %81,8
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')2
- CWE-348 Use of Less Trusted Source2
- CWE-20 Improper Input Validation2
- CWE-610 Externally Controlled Reference to a Resource in Another Sphere1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-88 Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
11 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2020-15692İstismar yok | In Nim 1.2.4, the standard library browsers mishandles the URL argument to browsers.openDefaultBrowser.nim-lang · nim · CWE-88 | Kritik9,8 | — | %4,2 | 14 Ağu 2020 |
40Planlayın | CVE-2020-15690İstismar yok | In Nim before 1.2.6, the standard library asyncftpclient lacks a check for whether a message contains a newline character.nim-lang · nim · CWE-74 | Kritik9,8 | — | %3,2 | 30 Oca 2021 |
36İzleyin | CVE-2021-21372İstismar yok | Nimble arbitrary code execution for specially crafted package metadatanim-lang · nim · CWE-20 | Yüksek8,8 | — | %3,6 | 26 Mar 2021 |
32İzleyin | CVE-2022-23602İstismar yok | Nim's rst parser sandboxed mode allows include which can embed any local filenim-lang · docutils · CWE-22 | Yüksek8,1 | — | %1,3 | 1 Şub 2022 |
32İzleyin | CVE-2021-21374İstismar yok | Nimble fails to validate certificates due to insecure httpClient defaultsnim-lang · nim · CWE-348 | Yüksek8,1 | — | %1,0 | 26 Mar 2021 |
31İzleyin | CVE-2020-15694İstismar yok | In Nim 1.2.4, the standard library httpClient fails to properly validate the server response.nim-lang · nim · CWE-20 | Yüksek7,5 | — | %2,3 | 14 Ağu 2020 |
30İzleyin | CVE-2021-29495İstismar yok | Nim stdlib httpClient does not validate peer certificates by defaultnim-lang · nim · CWE-295 | Yüksek7,5 | — | %0,4 | 7 May 2021 |
27İzleyin | CVE-2020-15693İstismar yok | In Nim 1.2.4, the standard library httpClient is vulnerable to a CR-LF injection in the target URL.nim-lang · nim · CWE-74 | Orta6,5 | — | %2,1 | 14 Ağu 2020 |
24İzleyin | CVE-2021-46872İstismar yok | An issue was discovered in Nim before 1.6.2.nim-lang · nim · CWE-79 | Orta6,1 | — | %0,5 | 13 Oca 2023 |
23İzleyin | CVE-2021-21373İstismar yok | Nimble falls back to insecure http url when fetching packagesnim-lang · nim · CWE-348 | Orta5,9 | — | %1,1 | 26 Mar 2021 |
22İzleyin | CVE-2020-23171İstismar yok | A vulnerability in all versions of Nim-lang allows unauthenticated attackers to write files to arbitrary directories via a crafted zip file nim-lang · nim-lang · CWE-610 | Orta5,5 | — | %0,6 | 10 Ağu 2021 |
- CVE-2020-1569240Planlayın
In Nim 1.2.4, the standard library browsers mishandles the URL argument to browsers.openDefaultBrowser.
KritikCVSS 9,8İstismar yokEPSS %4nim-lang · nim14 Ağu 2020
- CVE-2020-1569040Planlayın
In Nim before 1.2.6, the standard library asyncftpclient lacks a check for whether a message contains a newline character.
KritikCVSS 9,8İstismar yokEPSS %3nim-lang · nim30 Oca 2021
- CVE-2021-2137236İzleyin
Nimble arbitrary code execution for specially crafted package metadata
YüksekCVSS 8,8İstismar yokEPSS %3nim-lang · nim26 Mar 2021
- CVE-2022-2360232İzleyin
Nim's rst parser sandboxed mode allows include which can embed any local file
YüksekCVSS 8,1İstismar yokEPSS %1nim-lang · docutils1 Şub 2022
- CVE-2021-2137432İzleyin
Nimble fails to validate certificates due to insecure httpClient defaults
YüksekCVSS 8,1İstismar yokEPSS %1nim-lang · nim26 Mar 2021
- CVE-2020-1569431İzleyin
In Nim 1.2.4, the standard library httpClient fails to properly validate the server response.
YüksekCVSS 7,5İstismar yokEPSS %2nim-lang · nim14 Ağu 2020
- CVE-2021-2949530İzleyin
Nim stdlib httpClient does not validate peer certificates by default
YüksekCVSS 7,5İstismar yokEPSS %0nim-lang · nim7 May 2021
- CVE-2020-1569327İzleyin
In Nim 1.2.4, the standard library httpClient is vulnerable to a CR-LF injection in the target URL.
OrtaCVSS 6,5İstismar yokEPSS %2nim-lang · nim14 Ağu 2020
- CVE-2021-4687224İzleyin
An issue was discovered in Nim before 1.6.2.
OrtaCVSS 6,1İstismar yokEPSS %0nim-lang · nim13 Oca 2023
- CVE-2021-2137323İzleyin
Nimble falls back to insecure http url when fetching packages
OrtaCVSS 5,9İstismar yokEPSS %1nim-lang · nim26 Mar 2021
- CVE-2020-2317122İzleyin
A vulnerability in all versions of Nim-lang allows unauthenticated attackers to write files to arbitrary directories via a crafted zip file
OrtaCVSS 5,5İstismar yokEPSS %0nim-lang · nim-lang10 Ağu 2021