Project-MONAI kayıtları
project-monai üreticisine ait 8 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %87,5
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-502 Deserialization of Untrusted Data4
- CWE-95 Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')2
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
8 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2026-100846İstismar yok | MONAI before 1.5.2 Remote Code Execution via Pickle Deserializationproject-monai · monai · CWE-502 | Yüksek8,8 | — | %0,2 | 27 Eyl 2026 |
34İzleyin | CVE-2026-100844İstismar yok | MONAI before 1.6.0 OS Command Injection via dataset_name_or_idproject-monai · monai · CWE-78 | Yüksek8,6 | — | %0,7 | 27 Eyl 2026 |
34İzleyin | CVE-2026-100840İstismar yok | MONAI through 1.6.0 Remote Code Execution via bundle configurationproject-monai · monai · CWE-95 | Yüksek8,5 | — | %0,2 | 27 Eyl 2026 |
34İzleyin | CVE-2026-100843İstismar yok | MONAI before 1.6.0 Remote Code Execution via algo_from_pickleproject-monai · monai · CWE-502 | Yüksek8,5 | — | %0,1 | 27 Eyl 2026 |
34İzleyin | CVE-2026-100845İstismar yok | MONAI before 1.6.0 Remote Code Execution via NumpyReaderproject-monai · monai · CWE-502 | Yüksek8,5 | — | %0,1 | 27 Eyl 2026 |
34İzleyin | CVE-2026-100841İstismar yok | MONAI through 1.6.0 PersistentDataset Remote Code Execution via Pickle Cacheproject-monai · monai · CWE-502 | Yüksek8,5 | — | %0,1 | 27 Eyl 2026 |
29İzleyin | CVE-2026-100842İstismar yok | MONAI through 1.6.0 _get_fake_spatial_shape eval() Sandbox Bypass via Attribute Chainsproject-monai · monai · CWE-95 | Yüksek7,3 | — | %0,1 | 27 Eyl 2026 |
21İzleyin | CVE-2026-21851İstismar yok | MONAI has Path Traversal (Zip Slip) in NGC Private Bundle Downloadproject-monai · monai · CWE-22 | Orta5,3 | — | %0,3 | 7 Oca 2026 |
- CVE-2026-10084635İzleyin
MONAI before 1.5.2 Remote Code Execution via Pickle Deserialization
YüksekCVSS 8,8İstismar yokEPSS %0project-monai · monai27 Eyl 2026
- CVE-2026-10084434İzleyin
MONAI before 1.6.0 OS Command Injection via dataset_name_or_id
YüksekCVSS 8,6İstismar yokEPSS %0project-monai · monai27 Eyl 2026
- CVE-2026-10084034İzleyin
MONAI through 1.6.0 Remote Code Execution via bundle configuration
YüksekCVSS 8,5İstismar yokEPSS %0project-monai · monai27 Eyl 2026
- CVE-2026-10084334İzleyin
MONAI before 1.6.0 Remote Code Execution via algo_from_pickle
YüksekCVSS 8,5İstismar yokEPSS %0project-monai · monai27 Eyl 2026
- CVE-2026-10084534İzleyin
MONAI before 1.6.0 Remote Code Execution via NumpyReader
YüksekCVSS 8,5İstismar yokEPSS %0project-monai · monai27 Eyl 2026
- CVE-2026-10084134İzleyin
MONAI through 1.6.0 PersistentDataset Remote Code Execution via Pickle Cache
YüksekCVSS 8,5İstismar yokEPSS %0project-monai · monai27 Eyl 2026
- CVE-2026-10084229İzleyin
MONAI through 1.6.0 _get_fake_spatial_shape eval() Sandbox Bypass via Attribute Chains
YüksekCVSS 7,3İstismar yokEPSS %0project-monai · monai27 Eyl 2026
- CVE-2026-2185121İzleyin
MONAI has Path Traversal (Zip Slip) in NGC Private Bundle Download
OrtaCVSS 5,3İstismar yokEPSS %0project-monai · monai7 Oca 2026