openhab kayıtları
openhab üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %66,7
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-284 Improper Access Control1
- CWE-611 Improper Restriction of XML External Entity Reference1
- CWE-862 Missing Authorization1
- CWE-918 Server-Side Request Forgery (SSRF)1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2024-42467İstismar yok | CometVisu Backend for openHAB affected by SSRF/XSSopenhab · openhab web interface · CWE-918 | Kritik10,0 | — | %1,0 | 12 Ağu 2024 |
39İzleyin | CVE-2024-42469İstismar yok | CometVisu Backend for openHAB affected by RCE through path traversalopenhab · openhab · CWE-22 | Kritik9,8 | — | %1,2 | 12 Ağu 2024 |
36İzleyin | CVE-2020-5242İstismar yok | openHAB exec add-ons allow remote arbitrary command executionopenhab · openhab · CWE-284 | Yüksek8,8 | — | %1,9 | 20 Şub 2020 |
36İzleyin | CVE-2024-42470İstismar yok | CometVisu Backend for openHAB has a sensitive information disclosure vulnerabilityopenhab · openhab · CWE-862 | Kritik9,1 | — | %0,5 | 12 Ağu 2024 |
30İzleyin | CVE-2024-42468İstismar yok | Path traversal (CometVisu)openhab · openhab · CWE-22 | Yüksek7,5 | — | %0,8 | 12 Ağu 2024 |
20İzleyin | CVE-2021-21266İstismar yok | XXE vulnerability in OpenHABopenhab · openhab · CWE-611 | Orta5,0 | — | %1,1 | 1 Şub 2021 |
- CVE-2024-4246740Planlayın
CometVisu Backend for openHAB affected by SSRF/XSS
KritikCVSS 10,0İstismar yokEPSS %1openhab · openhab web interface12 Ağu 2024
- CVE-2024-4246939İzleyin
CometVisu Backend for openHAB affected by RCE through path traversal
KritikCVSS 9,8İstismar yokEPSS %1openhab · openhab12 Ağu 2024
- CVE-2020-524236İzleyin
openHAB exec add-ons allow remote arbitrary command execution
YüksekCVSS 8,8İstismar yokEPSS %1openhab · openhab20 Şub 2020
- CVE-2024-4247036İzleyin
CometVisu Backend for openHAB has a sensitive information disclosure vulnerability
KritikCVSS 9,1İstismar yokEPSS %0openhab · openhab12 Ağu 2024
- CVE-2024-4246830İzleyin
Path traversal (CometVisu)
YüksekCVSS 7,5İstismar yokEPSS %0openhab · openhab12 Ağu 2024
- CVE-2021-2126620İzleyin
XXE vulnerability in OpenHAB
OrtaCVSS 5,0İstismar yokEPSS %1openhab · openhab1 Şub 2021