openshift data foundation kayıtları
openshift data foundation üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %83,3
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-1333 Inefficient Regular Expression Complexity1
- CWE-212 Improper Removal of Sensitive Information Before Storage or Transfer1
- CWE-427 Uncontrolled Search Path Element1
- CWE-732 Incorrect Permission Assignment for Critical Resource1
- CWE-770 Allocation of Resources Without Limits or Throttling1
- CWE-93 Improper Neutralization of CRLF Sequences ('CRLF Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
34İzleyin | CVE-2026-12143İstismar yok | form-data does not escape CR/LF/quote in multipart field names and filenames (CRLF injection)form-data · form-data · CWE-93 | Yüksek8,7 | — | %0,6 | 12 Haz 2026 |
34İzleyin | CVE-2026-35469İstismar yok | SpdyStream: DOS on CRImoby · spdystream · CWE-770 | Yüksek8,7 | — | %0,6 | 16 Nis 2026 |
30İzleyin | CVE-2026-43824İstismar yok | In Argo CD 3.2.0 before 3.2.11 and 3.3.0 before 3.3.9, ServerSideDiff allows reading cleartext Kubernetes Secret data.argoproj · argo cd · CWE-212 | Yüksek7,7 | — | %0,2 | 2 May 2026 |
28İzleyin | CVE-2026-0775İstismar yok | npm cli Incorrect Permission Assignment Local Privilege Escalation Vulnerabilitynpm · cli · CWE-732 | Yüksek7,0 | — | %0,2 | 23 Oca 2026 |
28İzleyin | CVE-2026-41567Kavram kanıtı | Docker: `PUT /containers/{id}/archive` executes container binary on the hostmoby · moby/v2/daemon · CWE-427 | Yüksek7,2 | — | %0,1 | 4 Haz 2026 |
11İzleyin | CVE-2025-69873İstismar yok | ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the $data option is enaajv.js · ajv · CWE-1333 | Düşük2,9 | — | %0,5 | 11 Şub 2026 |
- CVE-2026-1214334İzleyin
form-data does not escape CR/LF/quote in multipart field names and filenames (CRLF injection)
YüksekCVSS 8,7İstismar yokEPSS %0form-data · form-data12 Haz 2026
- CVE-2026-3546934İzleyin
SpdyStream: DOS on CRI
YüksekCVSS 8,7İstismar yokEPSS %0moby · spdystream16 Nis 2026
- CVE-2026-4382430İzleyin
In Argo CD 3.2.0 before 3.2.11 and 3.3.0 before 3.3.9, ServerSideDiff allows reading cleartext Kubernetes Secret data.
YüksekCVSS 7,7İstismar yokEPSS %0argoproj · argo cd2 May 2026
- CVE-2026-077528İzleyin
npm cli Incorrect Permission Assignment Local Privilege Escalation Vulnerability
YüksekCVSS 7,0İstismar yokEPSS %0npm · cli23 Oca 2026
- CVE-2026-4156728İzleyin
Docker: `PUT /containers/{id}/archive` executes container binary on the host
YüksekCVSS 7,2Kavram kanıtıEPSS %0moby · moby/v2/daemon4 Haz 2026
- CVE-2025-6987311İzleyin
ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the $data option is ena
DüşükCVSS 2,9İstismar yokEPSS %0ajv.js · ajv11 Şub 2026