nocodb kayıtları
nocodb üreticisine ait 30 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %83,3
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')11
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3
- CWE-613 Insufficient Session Expiration2
- CWE-918 Server-Side Request Forgery (SSRF)2
- CWE-204 Observable Response Discrepancy1
- CWE-209 Generation of Error Message Containing Sensitive Information1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
30 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2022-2063İstismar yok | Improper Privilege Management in nocodb/nocodbnocodb · nocodb · CWE-269 | Yüksek8,8 | — | %1,4 | 13 Haz 2022 |
35İzleyin | CVE-2022-2064İstismar yok | Insufficient Session Expiration in nocodb/nocodbnocodb · nocodb · CWE-613 | Yüksek8,8 | — | %1,2 | 13 Haz 2022 |
34İzleyin | CVE-2026-24769İstismar yok | NocoDB Vulnerable to Stored Cross-Site Scripting via SVG uploadnocodb · nocodb · CWE-79 | Yüksek8,5 | — | %0,4 | 28 Oca 2026 |
33İzleyin | CVE-2023-35843Kavram kanıtı | NocoDB through 0.106.0 (or 0.109.1) has a path traversal vulnerability that allows an unauthenticated attacker to access arbitrary files on nocodb · nocodb · CWE-22 | Yüksek7,5 | — | %8,9 | 19 Haz 2023 |
32İzleyin | CVE-2022-22121İstismar yok | NocoDB - CSV Injection in User Managementnocodb · nocodb · CWE-1236 | Yüksek8,0 | — | %1,2 | 10 Oca 2022 |
31İzleyin | CVE-2022-2339İstismar yok | Server-Side Request Forgery (SSRF) in nocodb/nocodbnocodb · nocodb · CWE-918 | Yüksek7,5 | — | %1,9 | 7 Tem 2022 |
30İzleyin | CVE-2022-2062İstismar yok | Generation of Error Message Containing Sensitive Information in nocodb/nocodbnocodb · nocodb · CWE-209 | Yüksek7,5 | — | %1,5 | 13 Haz 2022 |
30İzleyin | CVE-2023-49781İstismar yok | NocoDB Vulnerable to Stored Cross-Site Scripting in Formula.vuenocodb · nocodb · CWE-79 | Yüksek7,6 | — | %0,6 | 14 May 2024 |
27İzleyin | CVE-2022-3423İstismar yok | Allocation of Resources Without Limits or Throttling in nocodb/nocodbnocodb · nocodb · CWE-770 | Orta6,5 | — | %2,3 | 7 Eki 2022 |
26İzleyin | CVE-2023-5104İstismar yok | Improper Input Validation in nocodb/nocodbnocodb · nocodb · CWE-20 | Orta6,5 | — | %0,8 | 21 Eyl 2023 |
26İzleyin | CVE-2023-50718İstismar yok | NocoDB SQL Injection vulnerabilitynocodb · nocodb · CWE-89 | Orta6,5 | — | %0,7 | 14 May 2024 |
25İzleyin | CVE-2026-24767İstismar yok | NocoDB has Blind SSRF via Unvalidated HEAD Request in uploadViaURL Functionalitynocodb · nocodb · CWE-918 | Orta6,4 | — | %0,2 | 28 Oca 2026 |
24İzleyin | CVE-2025-27506Kavram kanıtı | NocoDB Vulnerable to Reflected Cross-Site Scripting on Reset Password Pagenocodb · nocodb · CWE-79 | Orta6,1 | — | %0,7 | 6 Mar 2025 |
24İzleyin | CVE-2026-28399İstismar yok | NocoDB: SQL Injection via DATEADD Formulanocodb · nocodb · CWE-89 | Orta6,2 | — | %0,6 | 2 Mar 2026 |
22İzleyin | CVE-2026-24768İstismar yok | NocoDB has Unvalidated Redirect in Login Flow via continueAfterSignIn Parameternocodb · nocodb · CWE-601 | Orta5,7 | — | %0,3 | 28 Oca 2026 |
21İzleyin | CVE-2022-22120İstismar yok | NocoDB - Observable Discrepancy in the password-reset featurenocodb · nocodb · CWE-203 | Orta5,3 | — | %1,4 | 10 Oca 2022 |
21İzleyin | CVE-2022-2022İstismar yok | Cross-site Scripting (XSS) - Stored in nocodb/nocodbnocodb · nocodb · CWE-79 | Orta5,4 | — | %0,8 | 7 Haz 2022 |
21İzleyin | CVE-2022-2079İstismar yok | Cross-site Scripting (XSS) - Stored in nocodb/nocodbnocodb · nocodb · CWE-79 | Orta5,4 | — | %0,7 | 14 Haz 2022 |
21İzleyin | CVE-2023-50717İstismar yok | NocoDB Allows Preview of File with Dangerous Contentnocodb · nocodb · CWE-79 | Orta5,4 | — | %0,6 | 14 May 2024 |
21İzleyin | CVE-2026-28359İstismar yok | NocoDB: Stored Cross-Site Scripting via Rich Text Fieldnocodb · nocodb · CWE-79 | Orta5,3 | — | %0,3 | 2 Mar 2026 |
21İzleyin | CVE-2026-28398İstismar yok | NocoDB: Stored Cross-Site Scripting via Comments and Rich Text Cellsnocodb · nocodb · CWE-79 | Orta5,3 | — | %0,3 | 2 Mar 2026 |
21İzleyin | CVE-2026-28357İstismar yok | NocoDB: Stored Cross-Site Scripting via Formula Cellnocodb · nocodb · CWE-79 | Orta5,3 | — | %0,3 | 2 Mar 2026 |
21İzleyin | CVE-2026-28401İstismar yok | NocoDB: Stored Cross-Site Scripting via Rich Text Cellsnocodb · nocodb · CWE-79 | Orta5,3 | — | %0,3 | 2 Mar 2026 |
21İzleyin | CVE-2026-28397İstismar yok | NocoDB: Stored Cross-Site Scripting via Commentsnocodb · nocodb · CWE-79 | Orta5,3 | — | %0,3 | 2 Mar 2026 |
19İzleyin | CVE-2023-43794İstismar yok | SQL Injection in nocodbnocodb · nocodb · CWE-89 | Orta4,9 | — | %0,8 | 17 Eki 2023 |
- CVE-2022-206335İzleyin
Improper Privilege Management in nocodb/nocodb
YüksekCVSS 8,8İstismar yokEPSS %1nocodb · nocodb13 Haz 2022
- CVE-2022-206435İzleyin
Insufficient Session Expiration in nocodb/nocodb
YüksekCVSS 8,8İstismar yokEPSS %1nocodb · nocodb13 Haz 2022
- CVE-2026-2476934İzleyin
NocoDB Vulnerable to Stored Cross-Site Scripting via SVG upload
YüksekCVSS 8,5İstismar yokEPSS %0nocodb · nocodb28 Oca 2026
- CVE-2023-3584333İzleyin
NocoDB through 0.106.0 (or 0.109.1) has a path traversal vulnerability that allows an unauthenticated attacker to access arbitrary files on
YüksekCVSS 7,5Kavram kanıtıEPSS %9nocodb · nocodb19 Haz 2023
- CVE-2022-2212132İzleyin
NocoDB - CSV Injection in User Management
YüksekCVSS 8,0İstismar yokEPSS %1nocodb · nocodb10 Oca 2022
- CVE-2022-233931İzleyin
Server-Side Request Forgery (SSRF) in nocodb/nocodb
YüksekCVSS 7,5İstismar yokEPSS %2nocodb · nocodb7 Tem 2022
- CVE-2022-206230İzleyin
Generation of Error Message Containing Sensitive Information in nocodb/nocodb
YüksekCVSS 7,5İstismar yokEPSS %1nocodb · nocodb13 Haz 2022
- CVE-2023-4978130İzleyin
NocoDB Vulnerable to Stored Cross-Site Scripting in Formula.vue
YüksekCVSS 7,6İstismar yokEPSS %1nocodb · nocodb14 May 2024
- CVE-2022-342327İzleyin
Allocation of Resources Without Limits or Throttling in nocodb/nocodb
OrtaCVSS 6,5İstismar yokEPSS %2nocodb · nocodb7 Eki 2022
- CVE-2023-510426İzleyin
Improper Input Validation in nocodb/nocodb
OrtaCVSS 6,5İstismar yokEPSS %1nocodb · nocodb21 Eyl 2023
- CVE-2023-5071826İzleyin
NocoDB SQL Injection vulnerability
OrtaCVSS 6,5İstismar yokEPSS %1nocodb · nocodb14 May 2024
- CVE-2026-2476725İzleyin
NocoDB has Blind SSRF via Unvalidated HEAD Request in uploadViaURL Functionality
OrtaCVSS 6,4İstismar yokEPSS %0nocodb · nocodb28 Oca 2026
- CVE-2025-2750624İzleyin
NocoDB Vulnerable to Reflected Cross-Site Scripting on Reset Password Page
OrtaCVSS 6,1Kavram kanıtıEPSS %1nocodb · nocodb6 Mar 2025
- CVE-2026-2839924İzleyin
NocoDB: SQL Injection via DATEADD Formula
OrtaCVSS 6,2İstismar yokEPSS %1nocodb · nocodb2 Mar 2026
- CVE-2026-2476822İzleyin
NocoDB has Unvalidated Redirect in Login Flow via continueAfterSignIn Parameter
OrtaCVSS 5,7İstismar yokEPSS %0nocodb · nocodb28 Oca 2026
- CVE-2022-2212021İzleyin
NocoDB - Observable Discrepancy in the password-reset feature
OrtaCVSS 5,3İstismar yokEPSS %1nocodb · nocodb10 Oca 2022
- CVE-2022-202221İzleyin
Cross-site Scripting (XSS) - Stored in nocodb/nocodb
OrtaCVSS 5,4İstismar yokEPSS %1nocodb · nocodb7 Haz 2022
- CVE-2022-207921İzleyin
Cross-site Scripting (XSS) - Stored in nocodb/nocodb
OrtaCVSS 5,4İstismar yokEPSS %1nocodb · nocodb14 Haz 2022
- CVE-2023-5071721İzleyin
NocoDB Allows Preview of File with Dangerous Content
OrtaCVSS 5,4İstismar yokEPSS %1nocodb · nocodb14 May 2024
- CVE-2026-2835921İzleyin
NocoDB: Stored Cross-Site Scripting via Rich Text Field
OrtaCVSS 5,3İstismar yokEPSS %0nocodb · nocodb2 Mar 2026
- CVE-2026-2839821İzleyin
NocoDB: Stored Cross-Site Scripting via Comments and Rich Text Cells
OrtaCVSS 5,3İstismar yokEPSS %0nocodb · nocodb2 Mar 2026
- CVE-2026-2835721İzleyin
NocoDB: Stored Cross-Site Scripting via Formula Cell
OrtaCVSS 5,3İstismar yokEPSS %0nocodb · nocodb2 Mar 2026
- CVE-2026-2840121İzleyin
NocoDB: Stored Cross-Site Scripting via Rich Text Cells
OrtaCVSS 5,3İstismar yokEPSS %0nocodb · nocodb2 Mar 2026
- CVE-2026-2839721İzleyin
NocoDB: Stored Cross-Site Scripting via Comments
OrtaCVSS 5,3İstismar yokEPSS %0nocodb · nocodb2 Mar 2026
- CVE-2023-4379419İzleyin
SQL Injection in nocodb
OrtaCVSS 4,9İstismar yokEPSS %1nocodb · nocodb17 Eki 2023