opengroup kayıtları

opengroup üreticisine ait 52 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 5 · %9,6
Silahlaştırılmış: 5 · %9,6
Pre-auth RCE: 4
Düzeltme kaydı olan: %21,2
Yayından KEV’e ortanca: 3345 gün

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

52 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
97Hemen	CVE-2013-0625Silahlaştırılmış	Adobe ColdFusion 9.0, 9.0.1, and 9.0.2, when a password is not configured, allows remote attackers to bypass authentication and possibly exeadobe · coldfusion · CWE-287 Girişsiz RCE Kimlik doğrulama atlatma	Kritik9,8	KEV	%93,7	8 Oca 2013
96Hemen	CVE-2011-2462Silahlaştırılmış	Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x adobe · acrobat · CWE-787 Girişsiz RCE Bellek hatası	Kritik9,8	KEV	%88,5	7 Ara 2011
90Hemen	CVE-2022-30333Silahlaştırılmış	RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonstrarlab · unrar · CWE-22 Kimlik doğrulamasız Yol geçişi	Yüksek7,5	KEV	%99,2	9 May 2022
80Hemen	CVE-2013-0631Silahlaştırılmış	Adobe ColdFusion 9.0, 9.0.1, and 9.0.2 allows attackers to obtain sensitive information via unspecified vectors, as exploited in the wild inadobe · coldfusion Kimlik doğrulamasız	Yüksek7,5	KEV	%66,4	8 Oca 2013
80Hemen	CVE-2013-0629Silahlaştırılmış	Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10, when a password is not configured, allows attackers to access restricted directories via unspeciadobe · coldfusion Kimlik doğrulamasız	Yüksek7,5	KEV	%65,7	8 Oca 2013
43Planlayın	CVE-2014-2648İstismar yok	Unspecified vulnerability in HP Operations Manager 9.10 and 9.11 on UNIX allows remote attackers to execute arbitrary code via unknown vectohp · operations manager Girişsiz RCE	Kritik10,0	—	%8,8	9 Eki 2014
40Planlayın	CVE-2019-9895İstismar yok	In PuTTY versions before 0.71 on Unix, a remotely triggerable buffer overflow exists in any kind of server-to-client forwarding.putty · putty · CWE-119 Kimlik doğrulamasız Bellek hatası	Kritik9,8	—	%2,4	21 Mar 2019
38İzleyin	CVE-2011-4374İstismar yok	Integer overflow in Adobe Reader 9.x before 9.4.6 on Linux allows attackers to execute arbitrary code via unspecified vectors.adobe · reader · CWE-190 Girişsiz RCE Bellek hatası	Kritik9,3	—	%4,0	19 Oca 2012
36İzleyin	CVE-2020-6294İstismar yok	Xvfb of SAP Business Objects Business Intelligence Platform, versions - 4.2, 4.3, platform on Unix does not perform any authentication checksap · businessobjects business intelligence platform · CWE-306 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik9,1	—	%1,5	12 Ağu 2020
35İzleyin	CVE-2022-45461İstismar yok	The Java Admin Console in Veritas NetBackup through 10.1 and related Veritas products on Linux and UNIX allows authenticated non-root users veritas · netbackup · CWE-78 RCE Komut enjeksiyonu	Yüksek8,8	—	%1,5	17 Kas 2022
35İzleyin	CVE-2021-40830İstismar yok	Inconsistent CA override function behavior within AWS IoT Device SDKs on Unix systemsamazon · amazon web services aws-c-io · CWE-295 Kimlik doğrulamasız Zayıf kripto	Yüksek8,8	—	%0,3	22 Kas 2021
31İzleyin	CVE-2022-22772İstismar yok	TIBCO Managed File Transfer Platform Server Remote Code Execution Vulnerabilitytibco · managed file transfer platform server RCE	Yüksek7,5	—	%2,3	30 Mar 2022
31İzleyin	CVE-2021-21384İstismar yok	Null characters not escaped in shescapeshescape project · shescape · CWE-88	Yüksek7,8	—	%0,5	18 Mar 2021
31İzleyin	CVE-2024-36358İstismar yok	A link following vulnerability in Trend Micro Deep Security 20.x agents below build 20.0.1-3180 could allow a local attacker to escalate pritrendmicro · deep security agent · CWE-1106 Yerel yetki yükseltme	Yüksek7,8	—	%0,5	10 Haz 2024
31İzleyin	CVE-2023-24039İstismar yok	A stack-based buffer overflow in ParseColors in libXm in Common Desktop Environment 1.6 can be exploited by local low-privileged users via topengroup · common desktop environment · CWE-787 Yerel yetki yükseltme Bellek hatası	Yüksek7,8	—	%0,4	20 Oca 2023
31İzleyin	CVE-2019-4523İstismar yok	IBM DB2 High Performance Unload load for LUW 6.1 and 6.5 is vulnerable to a buffer overflow, caused by improper bounds checking which could ibm · db2 high performance unload load · CWE-120 RCE Yerel yetki yükseltme Bellek hatası	Yüksek7,8	—	%0,4	22 Eki 2019
31İzleyin	CVE-2019-4606İstismar yok	IBM DB2 High Performance Unload load for LUW 6.1 and 6.5 could allow a local attacker to execute arbitrary code on the system, caused by an ibm · db2 high performance unload load · CWE-426 RCE	Yüksek7,8	—	%0,4	12 Ara 2019
31İzleyin	CVE-2022-25255İstismar yok	In Qt 5.9.x through 5.15.x before 5.15.9 and 6.x before 6.2.4 on Linux and UNIX, QProcess could execute a binary from the current working diqt · qt	Yüksek7,8	—	%0,3	16 Şub 2022
31İzleyin	CVE-2022-30984İstismar yok	A buffer overflow vulnerability in the Rubrik Backup Service (RBS) Agent for Linux or Unix-based systems in Rubrik CDM 7.0.1, 7.0.1-p1, 7.0.rubrik · cdm · CWE-120 Yerel yetki yükseltme Bellek hatası	Yüksek7,8	—	%0,2	25 Ağu 2022
31İzleyin	CVE-2025-71263İstismar yok	In UNIX Fourth Research Edition (v4), the su command is vulnerable to a buffer overflow due to the 'password' variable having a fixed size oopengroup · unix · CWE-120 Yerel yetki yükseltme Bellek hatası	Yüksek7,8	—	%0,1	13 Mar 2026
30İzleyin	CVE-2021-29825İstismar yok	IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) could disclose sensitive information when using ADMIN_CMD with LOAD or BACibm · db2 Kimlik doğrulamasız	Yüksek7,5	—	%1,5	16 Eyl 2021
30İzleyin	CVE-2023-47701İstismar yok	IBM Db2 denial of serviceibm · db2 · CWE-20 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek7,5	—	%1,1	3 Ara 2023
30İzleyin	CVE-2023-46167İstismar yok	IBM Db2 denial of serviceibm · db2 · CWE-20 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek7,5	—	%1,0	3 Ara 2023
30İzleyin	CVE-2023-40687İstismar yok	IBM Db2 denial of serviceibm · db2 · CWE-20 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek7,5	—	%1,0	3 Ara 2023
30İzleyin	CVE-2023-29258İstismar yok	IBM Db2 denial of serviceibm · db2 · CWE-20 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek7,5	—	%1,0	3 Ara 2023

CVE-2013-0625
97Hemen
Adobe ColdFusion 9.0, 9.0.1, and 9.0.2, when a password is not configured, allows remote attackers to bypass authentication and possibly exe
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %93
- Girişsiz RCE
- Kimlik doğrulama atlatma
adobe · coldfusion8 Oca 2013
CVE-2011-2462
96Hemen
Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %88
- Girişsiz RCE
- Bellek hatası
adobe · acrobat7 Ara 2011
CVE-2022-30333
90Hemen
RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonst
YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %99
- Kimlik doğrulamasız
- Yol geçişi
rarlab · unrar9 May 2022
CVE-2013-0631
80Hemen
Adobe ColdFusion 9.0, 9.0.1, and 9.0.2 allows attackers to obtain sensitive information via unspecified vectors, as exploited in the wild in
YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %66
- Kimlik doğrulamasız
adobe · coldfusion8 Oca 2013
CVE-2013-0629
80Hemen
Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10, when a password is not configured, allows attackers to access restricted directories via unspeci
YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %65
- Kimlik doğrulamasız
adobe · coldfusion8 Oca 2013
CVE-2014-2648
43Planlayın
Unspecified vulnerability in HP Operations Manager 9.10 and 9.11 on UNIX allows remote attackers to execute arbitrary code via unknown vecto
KritikCVSS 10,0İstismar yokEPSS %8
- Girişsiz RCE
hp · operations manager9 Eki 2014
CVE-2019-9895
40Planlayın
In PuTTY versions before 0.71 on Unix, a remotely triggerable buffer overflow exists in any kind of server-to-client forwarding.
KritikCVSS 9,8İstismar yokEPSS %2
- Kimlik doğrulamasız
- Bellek hatası
putty · putty21 Mar 2019
CVE-2011-4374
38İzleyin
Integer overflow in Adobe Reader 9.x before 9.4.6 on Linux allows attackers to execute arbitrary code via unspecified vectors.
KritikCVSS 9,3İstismar yokEPSS %4
- Girişsiz RCE
- Bellek hatası
adobe · reader19 Oca 2012
CVE-2020-6294
36İzleyin
Xvfb of SAP Business Objects Business Intelligence Platform, versions - 4.2, 4.3, platform on Unix does not perform any authentication check
KritikCVSS 9,1İstismar yokEPSS %1
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
sap · businessobjects business intelligence platform12 Ağu 2020
CVE-2022-45461
35İzleyin
The Java Admin Console in Veritas NetBackup through 10.1 and related Veritas products on Linux and UNIX allows authenticated non-root users
YüksekCVSS 8,8İstismar yokEPSS %1
- RCE
- Komut enjeksiyonu
veritas · netbackup17 Kas 2022
CVE-2021-40830
35İzleyin
Inconsistent CA override function behavior within AWS IoT Device SDKs on Unix systems
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- Zayıf kripto
amazon · amazon web services aws-c-io22 Kas 2021
CVE-2022-22772
31İzleyin
TIBCO Managed File Transfer Platform Server Remote Code Execution Vulnerability
YüksekCVSS 7,5İstismar yokEPSS %2
- RCE
tibco · managed file transfer platform server30 Mar 2022
CVE-2021-21384
31İzleyin
Null characters not escaped in shescape
YüksekCVSS 7,8İstismar yokEPSS %0
shescape project · shescape18 Mar 2021
CVE-2024-36358
31İzleyin
A link following vulnerability in Trend Micro Deep Security 20.x agents below build 20.0.1-3180 could allow a local attacker to escalate pri
YüksekCVSS 7,8İstismar yokEPSS %0
- Yerel yetki yükseltme
trendmicro · deep security agent10 Haz 2024
CVE-2023-24039
31İzleyin
A stack-based buffer overflow in ParseColors in libXm in Common Desktop Environment 1.6 can be exploited by local low-privileged users via t
YüksekCVSS 7,8İstismar yokEPSS %0
- Yerel yetki yükseltme
- Bellek hatası
opengroup · common desktop environment20 Oca 2023
CVE-2019-4523
31İzleyin
IBM DB2 High Performance Unload load for LUW 6.1 and 6.5 is vulnerable to a buffer overflow, caused by improper bounds checking which could
YüksekCVSS 7,8İstismar yokEPSS %0
- RCE
- Yerel yetki yükseltme
- Bellek hatası
ibm · db2 high performance unload load22 Eki 2019
CVE-2019-4606
31İzleyin
IBM DB2 High Performance Unload load for LUW 6.1 and 6.5 could allow a local attacker to execute arbitrary code on the system, caused by an
YüksekCVSS 7,8İstismar yokEPSS %0
- RCE
ibm · db2 high performance unload load12 Ara 2019
CVE-2022-25255
31İzleyin
In Qt 5.9.x through 5.15.x before 5.15.9 and 6.x before 6.2.4 on Linux and UNIX, QProcess could execute a binary from the current working di
YüksekCVSS 7,8İstismar yokEPSS %0
qt · qt16 Şub 2022
CVE-2022-30984
31İzleyin
A buffer overflow vulnerability in the Rubrik Backup Service (RBS) Agent for Linux or Unix-based systems in Rubrik CDM 7.0.1, 7.0.1-p1, 7.0.
YüksekCVSS 7,8İstismar yokEPSS %0
- Yerel yetki yükseltme
- Bellek hatası
rubrik · cdm25 Ağu 2022
CVE-2025-71263
31İzleyin
In UNIX Fourth Research Edition (v4), the su command is vulnerable to a buffer overflow due to the 'password' variable having a fixed size o
YüksekCVSS 7,8İstismar yokEPSS %0
- Yerel yetki yükseltme
- Bellek hatası
opengroup · unix13 Mar 2026
CVE-2021-29825
30İzleyin
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) could disclose sensitive information when using ADMIN_CMD with LOAD or BAC
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
ibm · db216 Eyl 2021
CVE-2023-47701
30İzleyin
IBM Db2 denial of service
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
- Hizmet dışı bırakma
ibm · db23 Ara 2023
CVE-2023-46167
30İzleyin
IBM Db2 denial of service
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
- Hizmet dışı bırakma
ibm · db23 Ara 2023
CVE-2023-40687
30İzleyin
IBM Db2 denial of service
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
- Hizmet dışı bırakma
ibm · db23 Ara 2023
CVE-2023-29258
30İzleyin
IBM Db2 denial of service
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
- Hizmet dışı bırakma
ibm · db23 Ara 2023