ollama kayıtları
ollama üreticisine ait 25 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 3 · %12
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %60
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')5
- CWE-125 Out-of-bounds Read4
- CWE-20 Improper Input Validation3
- CWE-129 Improper Validation of Array Index2
- CWE-369 Divide By Zero2
- CWE-395 Use of NullPointerException Catch to Detect NULL Pointer Dereference1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
25 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
62Bu hafta | CVE-2024-37032Silahlaştırılmış | Ollama before 0.1.34 does not validate the format of the digest (sha256 with 64 hex digits) when getting the model path, and thus mishandlesollama · ollama · CWE-22 | Yüksek8,8 | — | %89,6 | 31 May 2024 |
40Planlayın | CVE-2026-42249Silahlaştırılmış | Remote Code Execution in Ollama via Update Mechanismollama · ollama · CWE-22 | Yüksek7,7 | — | %1,0 | 29 Nis 2026 |
40Planlayın | CVE-2026-42248Silahlaştırılmış | Missing Signature Verification for Updates in Ollamaollama · ollama · CWE-494 | Yüksek7,7 | — | %0,7 | 29 Nis 2026 |
39İzleyin | CVE-2025-63389İstismar yok | A critical authentication bypass vulnerability exists in Ollama platform's API endpoints in versions prior to and including v0.12.3.ollama · ollama · CWE-306 | Kritik9,8 | — | %0,7 | 18 Ara 2025 |
36İzleyin | CVE-2026-7482Kavram kanıtı | Ollama heap out-of-bounds read in GGUF tensor parsing leaks server process memory to unauthenticated remote attackersollama · ollama · CWE-125 | Yüksek8,8 | — | %2,2 | 4 May 2026 |
34İzleyin | CVE-2025-0317İstismar yok | Divide By Zero in ollama/ollamaollama · ollama · CWE-369 | Yüksek7,5 | — | %14,5 | 20 Mar 2025 |
34İzleyin | CVE-2025-15514İstismar yok | Ollama Multi-Modal Model Image Processing NULL Pointer Dereferenceollama · ollama · CWE-395 | Yüksek8,7 | — | %0,7 | 12 Oca 2026 |
33İzleyin | CVE-2025-51471Kavram kanıtı | Cross-Domain Token Exposure in server.auth.getAuthorizationToken in Ollama 0.6.7 allows remote attackers to steal authentication tokens and ollama · ollama · CWE-345 | Orta6,9 | — | %18,5 | 22 Tem 2025 |
33İzleyin | CVE-2024-39720İstismar yok | An issue was discovered in Ollama before 0.1.46.ollama · ollama · CWE-125 | Yüksek8,2 | — | %2,4 | 31 Eki 2024 |
32İzleyin | CVE-2025-66959İstismar yok | An issue in ollama v.0.12.10 allows a remote attacker to cause a denial of service via the GGUF decoderollama · ollama · CWE-20 | Yüksek7,5 | — | %5,3 | 21 Oca 2026 |
31İzleyin | CVE-2024-39719Kavram kanıtı | An issue was discovered in Ollama through 0.3.14.ollama · ollama · CWE-209 | Yüksek7,5 | — | %4,2 | 31 Eki 2024 |
31İzleyin | CVE-2024-39722Kavram kanıtı | An issue was discovered in Ollama before 0.1.46.ollama · ollama · CWE-22 | Yüksek7,5 | — | %3,9 | 31 Eki 2024 |
31İzleyin | CVE-2024-39721İstismar yok | An issue was discovered in Ollama before 0.1.34.ollama · ollama · CWE-404 | Yüksek7,5 | — | %2,6 | 31 Eki 2024 |
31İzleyin | CVE-2024-45436Kavram kanıtı | extractFromZipFile in model.go in Ollama before 0.1.47 can extract members of a ZIP archive outside of the parent directory.ollama · ollama · CWE-22 | Yüksek7,5 | — | %2,5 | 28 Ağu 2024 |
30İzleyin | CVE-2024-12055İstismar yok | DoS using malicious gguf model file in ollama/ollamaollama · ollama · CWE-125 | Yüksek7,5 | — | %0,8 | 20 Mar 2025 |
30İzleyin | CVE-2026-5757İstismar yok | There exists an unauthenticated remote information disclosure vulnerability in Ollama's model quantization engineollama · ollama · CWE-125 | Yüksek7,5 | — | %0,7 | 26 Haz 2026 |
30İzleyin | CVE-2026-15685İstismar yok | Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerabilityollama · ollama · CWE-129 | Yüksek7,5 | — | %0,7 | 13 Tem 2026 |
30İzleyin | CVE-2025-0315İstismar yok | Allocation of Resources Without Limits or Throttling in ollama/ollamaollama · ollama · CWE-770 | Yüksek7,5 | — | %0,6 | 20 Mar 2025 |
30İzleyin | CVE-2025-0312İstismar yok | NULL Pointer Dereference in ollama/ollamaollama · ollama · CWE-476 | Yüksek7,5 | — | %0,6 | 20 Mar 2025 |
30İzleyin | CVE-2024-8063İstismar yok | Divide by Zero in ollama/ollamaollama · ollama · CWE-369 | Yüksek7,5 | — | %0,6 | 20 Mar 2025 |
30İzleyin | CVE-2025-1975İstismar yok | Improper Validation of Array Index in ollama/ollamaollama · ollama · CWE-129 | Yüksek7,5 | — | %0,5 | 16 May 2025 |
30İzleyin | CVE-2025-66960İstismar yok | An issue in ollama v.0.12.10 allows a remote attacker to cause a denial of service via the fs/ggml/gguf.go, function readGGUFV1String reads ollama · ollama · CWE-20 | Yüksek7,5 | — | %0,4 | 21 Oca 2026 |
26İzleyin | CVE-2024-28224İstismar yok | Ollama before 0.1.29 has a DNS rebinding vulnerability that can inadvertently allow remote access to the full API, thereby letting an unauthollama · ollama · CWE-346 | Orta6,6 | — | %0,3 | 8 Nis 2024 |
26İzleyin | CVE-2025-44779İstismar yok | An issue in Ollama v0.1.33 allows attackers to delete arbitrary files via sending a crafted packet to the endpoint /api/pull.ollama · ollama · CWE-20 | Orta6,6 | — | %0,1 | 7 Ağu 2025 |
11İzleyin | CVE-2026-7020Kavram kanıtı | Ollama Tensor Model Transfer transfer.go digestToPath path traversalollama · ollama · CWE-22 | Düşük2,9 | — | %0,9 | 26 Nis 2026 |
- CVE-2024-3703262Bu hafta
Ollama before 0.1.34 does not validate the format of the digest (sha256 with 64 hex digits) when getting the model path, and thus mishandles
YüksekCVSS 8,8SilahlaştırılmışEPSS %89ollama · ollama31 May 2024
- CVE-2026-4224940Planlayın
Remote Code Execution in Ollama via Update Mechanism
YüksekCVSS 7,7SilahlaştırılmışEPSS %1ollama · ollama29 Nis 2026
- CVE-2026-4224840Planlayın
Missing Signature Verification for Updates in Ollama
YüksekCVSS 7,7SilahlaştırılmışEPSS %0ollama · ollama29 Nis 2026
- CVE-2025-6338939İzleyin
A critical authentication bypass vulnerability exists in Ollama platform's API endpoints in versions prior to and including v0.12.3.
KritikCVSS 9,8İstismar yokEPSS %0ollama · ollama18 Ara 2025
- CVE-2026-748236İzleyin
Ollama heap out-of-bounds read in GGUF tensor parsing leaks server process memory to unauthenticated remote attackers
YüksekCVSS 8,8Kavram kanıtıEPSS %2ollama · ollama4 May 2026
- CVE-2025-031734İzleyin
Divide By Zero in ollama/ollama
YüksekCVSS 7,5İstismar yokEPSS %14ollama · ollama20 Mar 2025
- CVE-2025-1551434İzleyin
Ollama Multi-Modal Model Image Processing NULL Pointer Dereference
YüksekCVSS 8,7İstismar yokEPSS %0ollama · ollama12 Oca 2026
- CVE-2025-5147133İzleyin
Cross-Domain Token Exposure in server.auth.getAuthorizationToken in Ollama 0.6.7 allows remote attackers to steal authentication tokens and
OrtaCVSS 6,9Kavram kanıtıEPSS %18ollama · ollama22 Tem 2025
- CVE-2024-3972033İzleyin
An issue was discovered in Ollama before 0.1.46.
YüksekCVSS 8,2İstismar yokEPSS %2ollama · ollama31 Eki 2024
- CVE-2025-6695932İzleyin
An issue in ollama v.0.12.10 allows a remote attacker to cause a denial of service via the GGUF decoder
YüksekCVSS 7,5İstismar yokEPSS %5ollama · ollama21 Oca 2026
- CVE-2024-3971931İzleyin
An issue was discovered in Ollama through 0.3.14.
YüksekCVSS 7,5Kavram kanıtıEPSS %4ollama · ollama31 Eki 2024
- CVE-2024-3972231İzleyin
An issue was discovered in Ollama before 0.1.46.
YüksekCVSS 7,5Kavram kanıtıEPSS %3ollama · ollama31 Eki 2024
- CVE-2024-3972131İzleyin
An issue was discovered in Ollama before 0.1.34.
YüksekCVSS 7,5İstismar yokEPSS %2ollama · ollama31 Eki 2024
- CVE-2024-4543631İzleyin
extractFromZipFile in model.go in Ollama before 0.1.47 can extract members of a ZIP archive outside of the parent directory.
YüksekCVSS 7,5Kavram kanıtıEPSS %2ollama · ollama28 Ağu 2024
- CVE-2024-1205530İzleyin
DoS using malicious gguf model file in ollama/ollama
YüksekCVSS 7,5İstismar yokEPSS %0ollama · ollama20 Mar 2025
- CVE-2026-575730İzleyin
There exists an unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine
YüksekCVSS 7,5İstismar yokEPSS %0ollama · ollama26 Haz 2026
- CVE-2026-1568530İzleyin
Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0ollama · ollama13 Tem 2026
- CVE-2025-031530İzleyin
Allocation of Resources Without Limits or Throttling in ollama/ollama
YüksekCVSS 7,5İstismar yokEPSS %0ollama · ollama20 Mar 2025
- CVE-2025-031230İzleyin
NULL Pointer Dereference in ollama/ollama
YüksekCVSS 7,5İstismar yokEPSS %0ollama · ollama20 Mar 2025
- CVE-2024-806330İzleyin
Divide by Zero in ollama/ollama
YüksekCVSS 7,5İstismar yokEPSS %0ollama · ollama20 Mar 2025
- CVE-2025-197530İzleyin
Improper Validation of Array Index in ollama/ollama
YüksekCVSS 7,5İstismar yokEPSS %0ollama · ollama16 May 2025
- CVE-2025-6696030İzleyin
An issue in ollama v.0.12.10 allows a remote attacker to cause a denial of service via the fs/ggml/gguf.go, function readGGUFV1String reads
YüksekCVSS 7,5İstismar yokEPSS %0ollama · ollama21 Oca 2026
- CVE-2024-2822426İzleyin
Ollama before 0.1.29 has a DNS rebinding vulnerability that can inadvertently allow remote access to the full API, thereby letting an unauth
OrtaCVSS 6,6İstismar yokEPSS %0ollama · ollama8 Nis 2024
- CVE-2025-4477926İzleyin
An issue in Ollama v0.1.33 allows attackers to delete arbitrary files via sending a crafted packet to the endpoint /api/pull.
OrtaCVSS 6,6İstismar yokEPSS %0ollama · ollama7 Ağu 2025
- CVE-2026-702011İzleyin
Ollama Tensor Model Transfer transfer.go digestToPath path traversal
DüşükCVSS 2,9Kavram kanıtıEPSS %0ollama · ollama26 Nis 2026