rrrene kayıtları
rrrene üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')2
- CWE-1333 Inefficient Regular Expression Complexity1
- CWE-407 Inefficient Algorithmic Complexity1
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')1
- CWE-829 Inclusion of Functionality from Untrusted Control Sphere1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
32İzleyin | CVE-2026-68749Kavram kanıtı | Quadratic regex backtracking in the html_sanitize_ex CSS scrubber allows CPU-exhaustion denial of servicerrrene · htmlsanitizeex · CWE-1333 | Yüksek8,2 | — | %0,8 | 6 Ağu 2026 |
32İzleyin | CVE-2026-68750İstismar yok | Quadratic sibling re-flattening in the html_sanitize_ex traversal engine allows CPU-exhaustion denial of servicerrrene · htmlsanitizeex · CWE-407 | Yüksek8,2 | — | %0,8 | 6 Ağu 2026 |
19İzleyin | CVE-2026-66370İstismar yok | html_sanitize_ex HTML5 scrubber keeps attacker-supplied form-association attributes, allowing form hijackingrrrene · htmlsanitizeex · CWE-601 | Orta4,8 | — | %0,4 | 6 Ağu 2026 |
9İzleyin | CVE-2026-66829İstismar yok | html_sanitize_ex HTML5 scrubber keeps attacker-supplied meta refresh, allowing forced cross-origin redirectionrrrene · htmlsanitizeex · CWE-601 | Düşük2,3 | — | %0,6 | 6 Ağu 2026 |
9İzleyin | CVE-2026-66843İstismar yok | html_sanitize_ex HTML5 scrubber keeps attacker-supplied `<object>` elements, allowing untrusted content embeddingrrrene · htmlsanitizeex · CWE-829 | Düşük2,3 | — | %0,5 | 6 Ağu 2026 |
9İzleyin | CVE-2026-68747İstismar yok | CSS sanitizer allowlist bypass in html_sanitize_ex via non-declaration inputrrrene · htmlsanitizeex · CWE-74 | Düşük2,3 | — | %0,4 | 6 Ağu 2026 |
- CVE-2026-6874932İzleyin
Quadratic regex backtracking in the html_sanitize_ex CSS scrubber allows CPU-exhaustion denial of service
YüksekCVSS 8,2Kavram kanıtıEPSS %1rrrene · htmlsanitizeex6 Ağu 2026
- CVE-2026-6875032İzleyin
Quadratic sibling re-flattening in the html_sanitize_ex traversal engine allows CPU-exhaustion denial of service
YüksekCVSS 8,2İstismar yokEPSS %1rrrene · htmlsanitizeex6 Ağu 2026
- CVE-2026-6637019İzleyin
html_sanitize_ex HTML5 scrubber keeps attacker-supplied form-association attributes, allowing form hijacking
OrtaCVSS 4,8İstismar yokEPSS %0rrrene · htmlsanitizeex6 Ağu 2026
- CVE-2026-668299İzleyin
html_sanitize_ex HTML5 scrubber keeps attacker-supplied meta refresh, allowing forced cross-origin redirection
DüşükCVSS 2,3İstismar yokEPSS %1rrrene · htmlsanitizeex6 Ağu 2026
- CVE-2026-668439İzleyin
html_sanitize_ex HTML5 scrubber keeps attacker-supplied `<object>` elements, allowing untrusted content embedding
DüşükCVSS 2,3İstismar yokEPSS %1rrrene · htmlsanitizeex6 Ağu 2026
- CVE-2026-687479İzleyin
CSS sanitizer allowlist bypass in html_sanitize_ex via non-declaration input
DüşükCVSS 2,3İstismar yokEPSS %0rrrene · htmlsanitizeex6 Ağu 2026