İçeriğe atla
Noroxi

openshift ai kayıtları

openshift ai üreticisine ait 51 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
14
Düzeltme kaydı olan
%86,3
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

51 kayıt
  • CVE-2026-31228
    39İzleyin

    The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains a remote code execution vulnerability in its Kubeflow component.

    KritikCVSS 9,8İstismar yokEPSS %0

    12 May 2026

  • CVE-2025-69872
    39İzleyin

    DiskCache (python-diskcache) through 5.6.3 uses Python pickle for serialization by default.

    KritikCVSS 9,8İstismar yokEPSS %0

    11 Şub 2026

  • CVE-2026-31230
    39İzleyin

    The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains a command-line argument injection vulnerability in its Kubeflow component (rob

    KritikCVSS 9,8İstismar yokEPSS %0

    12 May 2026

  • CVE-2026-31236
    39İzleyin

    The llm CLI tool thru 0.27.1 contains a critical code injection vulnerability via its --functions command-line argument.

    KritikCVSS 9,8İstismar yokEPSS %0

    12 May 2026

  • CVE-2026-56121
    37İzleyin

    Feast < 0.63.0 Unauthenticated RCE via ApplyFeatureView gRPC Deserialization

    KritikCVSS 9,3Kavram kanıtıEPSS %1

    feast-dev · feast24 Haz 2026

  • CVE-2026-44990
    37İzleyin

    Apostrophe has default XSS via `xmp` raw-text passthrough in `sanitize-html`

    KritikCVSS 9,3İstismar yokEPSS %0

    apostrophecms · sanitize-html12 Haz 2026

  • CVE-2025-14813
    37İzleyin

    GOSTCTR implementation unable to process more than 255 blocks correctly

    KritikCVSS 9,3İstismar yokEPSS %0

    legion of the bouncy castle inc. · bc-java15 Nis 2026

  • CVE-2026-23537
    36İzleyin

    Feast: unauthenticated arbitrary file write

    KritikCVSS 9,1İstismar yokEPSS %1

    feast · feast feature server1 Tem 2026

  • CVE-2026-9277
    36İzleyin

    shell-quote `quote()` does not validate object-token shapes, allowing command injection via line terminators in `.op`

    KritikCVSS 9,2Kavram kanıtıEPSS %0

    22 May 2026

  • CVE-2026-8461
    35İzleyin

    Heap out-of-bounds write via odd slice_height in FFmpeg MagicYUV decoder

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    ffmpeg · ffmpeg18 Haz 2026

  • CVE-2026-5598
    35İzleyin

    Non-constant time comparisons risk private key leakage in FrodoKEM.

    YüksekCVSS 8,9İstismar yokEPSS %0

    legion of the bouncy castle inc. · bc-java15 Nis 2026

  • CVE-2026-58049
    35İzleyin

    FFmpeg - Out-of-Bounds Write in RASC Decoder decode_dlta()

    YüksekCVSS 8,8İstismar yokEPSS %0

    ffmpeg · ffmpeg27 Haz 2026

  • CVE-2026-12143
    34İzleyin

    form-data does not escape CR/LF/quote in multipart field names and filenames (CRLF injection)

    YüksekCVSS 8,7İstismar yokEPSS %0

    form-data · form-data12 Haz 2026

  • CVE-2026-41673
    34İzleyin

    xmldom: Denial of service via uncontrolled recursion in XML serialization

    YüksekCVSS 8,7İstismar yokEPSS %0

    xmldom · xmldom7 May 2026

  • CVE-2026-2472
    34İzleyin

    Stored Cross-Site Scripting (XSS) in Vertex AI Python SDK Visualization

    YüksekCVSS 8,6Kavram kanıtıEPSS %0

    google cloud · vertex ai sdk for python20 Şub 2026

  • CVE-2026-33079
    34İzleyin

    Mistune ReDoS in LINK_TITLE_RE allows denial of service with crafted Markdown titles

    YüksekCVSS 8,7İstismar yokEPSS %0

    lepture · mistune6 May 2026

  • CVE-2026-41674
    34İzleyin

    xmldom: XML injection through unvalidated DocumentType serialization

    YüksekCVSS 8,7İstismar yokEPSS %0

    xmldom · xmldom7 May 2026

  • CVE-2026-49851
    34İzleyin

    Mistune: Potential DoS via quadratic-time parsing in parse_link_text

    YüksekCVSS 8,7İstismar yokEPSS %0

    lepture · mistune24 Haz 2026

  • CVE-2026-31812
    34İzleyin

    Quinn affected by unauthenticated remote DoS via panic in QUIC transport parameter parsing

    YüksekCVSS 8,7İstismar yokEPSS %0

    quinn-rs · quinn10 Mar 2026

  • CVE-2026-41675
    34İzleyin

    xmldom: XML node injection through unvalidated processing instruction serialization

    YüksekCVSS 8,7İstismar yokEPSS %0

    xmldom · xmldom7 May 2026

  • CVE-2026-41672
    34İzleyin

    xmldom: XML node injection through unvalidated comment serialization

    YüksekCVSS 8,7İstismar yokEPSS %0

    xmldom · xmldom7 May 2026

  • CVE-2026-0603
    33İzleyin

    Org.hibernate/hibernate-core: hibernate: information disclosure and data deletion via second-order sql injection

    YüksekCVSS 8,3Kavram kanıtıEPSS %1

    red hat · red hat jboss enterprise application platform 7.1 eus for rhel 723 Oca 2026

  • CVE-2026-1615
    32İzleyin

    Versions of the package jsonpath before 1.3.0 are vulnerable to Arbitrary Code Injection via unsafe evaluation of user-supplied JSON Path ex

    YüksekCVSS 8,2İstismar yokEPSS %1

    9 Şub 2026

  • CVE-2026-23536
    31İzleyin

    Feast: unauthenticated arbitrary file read

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    red hat · red hat openshift ai (rhoai)20 Mar 2026

  • CVE-2026-44724
    31İzleyin

    systeminformation: Linux command injection in networkInterfaces() via unsanitized NetworkManager connection profile name

    YüksekCVSS 7,8İstismar yokEPSS %0

    sebhildebrandt · systeminformation27 May 2026