rack kayıtları
rack üreticisine ait 39 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-400 Uncontrolled Resource Consumption15
- CWE-1333 Inefficient Regular Expression Complexity3
- CWE-93 Improper Neutralization of CRLF Sequences ('CRLF Injection')3
- CWE-625 Permissive Regular Expression2
- CWE-436 Interpretation Conflict2
- CWE-770 Allocation of Resources Without Limits or Throttling2
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
39 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
41Planlayın | CVE-2024-25126İstismar yok | Rack ReDos in content type parsing (2nd degree polynomial)rack · rack · CWE-1333 | Yüksek7,5 | — | %35,4 | 28 Şub 2024 |
37İzleyin | CVE-2026-39324Kavram kanıtı | Rack::Session::Cookie secrets: decrypt failure fallback enables secretless session forgery and Marshal deserializationrack · rack-session · CWE-287 | Kritik9,3 | — | %0,3 | 7 Nis 2026 |
34İzleyin | CVE-2024-35231İstismar yok | rack-contrib vulnerable to Denial of Service due to the unconstrained value of the incoming "profiler_runs" parameterrack · rack-contrib · CWE-770 | Yüksek8,6 | — | %0,7 | 27 May 2024 |
31İzleyin | CVE-2024-26146İstismar yok | Possible Denial of Service Vulnerability in Rack Header Parsingrack · rack · CWE-1333 | Yüksek7,5 | — | %2,0 | 28 Şub 2024 |
31İzleyin | CVE-2023-27530İstismar yok | A DoS vulnerability exists in Rack <v3.0.4.2, <v2.2.6.3, <v2.1.4.3 and <v2.0.9.3 within in the Multipart MIME parsing code in which could alrack · rack · CWE-400 | Yüksek7,5 | — | %1,8 | 10 Mar 2023 |
30İzleyin | CVE-2022-44570İstismar yok | A denial of service vulnerability in the Range header parsing component of Rack >= 1.5.0.rack · rack · CWE-400 | Yüksek7,5 | — | %1,6 | 9 Şub 2023 |
30İzleyin | CVE-2022-44572İstismar yok | A denial of service vulnerability in the multipart parsing component of Rack fixed in 2.0.9.2, 2.1.4.2, 2.2.4.1 and 3.0.0.1 could allow an arack · rack · CWE-400 | Yüksek7,5 | — | %1,6 | 9 Şub 2023 |
30İzleyin | CVE-2024-26141İstismar yok | Possible DoS Vulnerability with Range Header in Rackrack · rack · CWE-400 | Yüksek7,5 | — | %1,6 | 28 Şub 2024 |
30İzleyin | CVE-2022-44571İstismar yok | There is a denial of service vulnerability in the Content-Disposition parsingcomponent of Rack fixed in 2.0.9.2, 2.1.4.2, 2.2.4.1, 3.0.0.1.rack · rack · CWE-400 | Yüksek7,5 | — | %1,5 | 9 Şub 2023 |
30İzleyin | CVE-2025-46727İstismar yok | Unbounded-Parameter DoS in Rack::QueryParserrack · rack · CWE-400 | Yüksek7,5 | — | %1,2 | 7 May 2025 |
30İzleyin | CVE-2025-27610İstismar yok | Local File Inclusion in Rack::Staticrack · rack · CWE-23 | Yüksek7,5 | — | %1,2 | 10 Mar 2025 |
30İzleyin | CVE-2025-61770İstismar yok | Rack's unbounded multipart preamble buffering enables DoS (memory exhaustion)rack · rack · CWE-400 | Yüksek7,5 | — | %0,9 | 7 Eki 2025 |
30İzleyin | CVE-2025-61772İstismar yok | Rack's multipart parser buffers unbounded per-part headers, enabling DoS (memory exhaustion)rack · rack · CWE-400 | Yüksek7,5 | — | %0,9 | 7 Eki 2025 |
30İzleyin | CVE-2026-22860İstismar yok | Rack has a Directory Traversal via Rack:Directoryrack · rack · CWE-22 | Yüksek7,5 | — | %0,7 | 18 Şub 2026 |
30İzleyin | CVE-2026-34827İstismar yok | Rack: Algorithmic-Complexity DoS in Rack::Multipart::Parserrack · rack · CWE-400 | Yüksek7,5 | — | %0,7 | 2 Nis 2026 |
30İzleyin | CVE-2026-34829İstismar yok | Rack: Denial of Service via Unbounded Multipart File Upload Without Content-Lengthrack · rack · CWE-400 | Yüksek7,5 | — | %0,7 | 2 Nis 2026 |
30İzleyin | CVE-2025-61919İstismar yok | Rack is vulnerable to a memory-exhaustion DoS through unbounded URL-encoded body parsingrack · rack · CWE-400 | Yüksek7,5 | — | %0,6 | 10 Eki 2025 |
30İzleyin | CVE-2025-59830İstismar yok | Rack QueryParser has an unsafe default allowing params_limit bypass via semicolon-separated parametersrack · rack · CWE-400 | Yüksek7,5 | — | %0,6 | 25 Eyl 2025 |
30İzleyin | CVE-2025-61771İstismar yok | Rack's multipart parser buffers large non‑file fields entirely in memory, enabling DoS (memory exhaustion)rack · rack · CWE-400 | Yüksek7,5 | — | %0,6 | 7 Eki 2025 |
30İzleyin | CVE-2026-34785İstismar yok | Rack: Local file inclusion in `Rack::Static` via URL Prefix Matchingrack · rack · CWE-187 | Yüksek7,5 | — | %0,5 | 2 Nis 2026 |
30İzleyin | CVE-2026-34230İstismar yok | Rack: Quadratic complexity in Rack::Utils.select_best_encoding via wildcard Accept-Encoding headerrack · rack · CWE-400 | Yüksek7,5 | — | %0,5 | 2 Nis 2026 |
30İzleyin | CVE-2026-34826İstismar yok | Rack: Unbounded Range Count in get_byte_ranges Enables DoSrack · rack · CWE-400 | Yüksek7,5 | — | %0,5 | 2 Nis 2026 |
30İzleyin | CVE-2026-34830İstismar yok | Rack: Rack::Sendfile regex injection via HTTP_X_ACCEL_MAPPING header allows arbitrary file reads through nginxrack · rack · CWE-625 | Yüksek7,5 | — | %0,4 | 2 Nis 2026 |
27İzleyin | CVE-2025-27111İstismar yok | Escape Sequence Injection vulnerability in Rack lead to Possible Log Injectionrack · rack · CWE-93 | Orta6,9 | — | %0,8 | 4 Mar 2025 |
26İzleyin | CVE-2024-39316İstismar yok | Rack ReDoS Vulnerability in HTTP Accept Headers Parsingrack · rack · CWE-1333 | Orta6,5 | — | %0,9 | 2 Tem 2024 |
- CVE-2024-2512641Planlayın
Rack ReDos in content type parsing (2nd degree polynomial)
YüksekCVSS 7,5İstismar yokEPSS %35rack · rack28 Şub 2024
- CVE-2026-3932437İzleyin
Rack::Session::Cookie secrets: decrypt failure fallback enables secretless session forgery and Marshal deserialization
KritikCVSS 9,3Kavram kanıtıEPSS %0rack · rack-session7 Nis 2026
- CVE-2024-3523134İzleyin
rack-contrib vulnerable to Denial of Service due to the unconstrained value of the incoming "profiler_runs" parameter
YüksekCVSS 8,6İstismar yokEPSS %1rack · rack-contrib27 May 2024
- CVE-2024-2614631İzleyin
Possible Denial of Service Vulnerability in Rack Header Parsing
YüksekCVSS 7,5İstismar yokEPSS %2rack · rack28 Şub 2024
- CVE-2023-2753031İzleyin
A DoS vulnerability exists in Rack <v3.0.4.2, <v2.2.6.3, <v2.1.4.3 and <v2.0.9.3 within in the Multipart MIME parsing code in which could al
YüksekCVSS 7,5İstismar yokEPSS %2rack · rack10 Mar 2023
- CVE-2022-4457030İzleyin
A denial of service vulnerability in the Range header parsing component of Rack >= 1.5.0.
YüksekCVSS 7,5İstismar yokEPSS %2rack · rack9 Şub 2023
- CVE-2022-4457230İzleyin
A denial of service vulnerability in the multipart parsing component of Rack fixed in 2.0.9.2, 2.1.4.2, 2.2.4.1 and 3.0.0.1 could allow an a
YüksekCVSS 7,5İstismar yokEPSS %2rack · rack9 Şub 2023
- CVE-2024-2614130İzleyin
Possible DoS Vulnerability with Range Header in Rack
YüksekCVSS 7,5İstismar yokEPSS %2rack · rack28 Şub 2024
- CVE-2022-4457130İzleyin
There is a denial of service vulnerability in the Content-Disposition parsingcomponent of Rack fixed in 2.0.9.2, 2.1.4.2, 2.2.4.1, 3.0.0.1.
YüksekCVSS 7,5İstismar yokEPSS %2rack · rack9 Şub 2023
- CVE-2025-4672730İzleyin
Unbounded-Parameter DoS in Rack::QueryParser
YüksekCVSS 7,5İstismar yokEPSS %1rack · rack7 May 2025
- CVE-2025-2761030İzleyin
Local File Inclusion in Rack::Static
YüksekCVSS 7,5İstismar yokEPSS %1rack · rack10 Mar 2025
- CVE-2025-6177030İzleyin
Rack's unbounded multipart preamble buffering enables DoS (memory exhaustion)
YüksekCVSS 7,5İstismar yokEPSS %1rack · rack7 Eki 2025
- CVE-2025-6177230İzleyin
Rack's multipart parser buffers unbounded per-part headers, enabling DoS (memory exhaustion)
YüksekCVSS 7,5İstismar yokEPSS %1rack · rack7 Eki 2025
- CVE-2026-2286030İzleyin
Rack has a Directory Traversal via Rack:Directory
YüksekCVSS 7,5İstismar yokEPSS %1rack · rack18 Şub 2026
- CVE-2026-3482730İzleyin
Rack: Algorithmic-Complexity DoS in Rack::Multipart::Parser
YüksekCVSS 7,5İstismar yokEPSS %1rack · rack2 Nis 2026
- CVE-2026-3482930İzleyin
Rack: Denial of Service via Unbounded Multipart File Upload Without Content-Length
YüksekCVSS 7,5İstismar yokEPSS %1rack · rack2 Nis 2026
- CVE-2025-6191930İzleyin
Rack is vulnerable to a memory-exhaustion DoS through unbounded URL-encoded body parsing
YüksekCVSS 7,5İstismar yokEPSS %1rack · rack10 Eki 2025
- CVE-2025-5983030İzleyin
Rack QueryParser has an unsafe default allowing params_limit bypass via semicolon-separated parameters
YüksekCVSS 7,5İstismar yokEPSS %1rack · rack25 Eyl 2025
- CVE-2025-6177130İzleyin
Rack's multipart parser buffers large non‑file fields entirely in memory, enabling DoS (memory exhaustion)
YüksekCVSS 7,5İstismar yokEPSS %1rack · rack7 Eki 2025
- CVE-2026-3478530İzleyin
Rack: Local file inclusion in `Rack::Static` via URL Prefix Matching
YüksekCVSS 7,5İstismar yokEPSS %1rack · rack2 Nis 2026
- CVE-2026-3423030İzleyin
Rack: Quadratic complexity in Rack::Utils.select_best_encoding via wildcard Accept-Encoding header
YüksekCVSS 7,5İstismar yokEPSS %0rack · rack2 Nis 2026
- CVE-2026-3482630İzleyin
Rack: Unbounded Range Count in get_byte_ranges Enables DoS
YüksekCVSS 7,5İstismar yokEPSS %0rack · rack2 Nis 2026
- CVE-2026-3483030İzleyin
Rack: Rack::Sendfile regex injection via HTTP_X_ACCEL_MAPPING header allows arbitrary file reads through nginx
YüksekCVSS 7,5İstismar yokEPSS %0rack · rack2 Nis 2026
- CVE-2025-2711127İzleyin
Escape Sequence Injection vulnerability in Rack lead to Possible Log Injection
OrtaCVSS 6,9İstismar yokEPSS %1rack · rack4 Mar 2025
- CVE-2024-3931626İzleyin
Rack ReDoS Vulnerability in HTTP Accept Headers Parsing
OrtaCVSS 6,5İstismar yokEPSS %1rack · rack2 Tem 2024