scrapy kayıtları
scrapy üreticisine ait 7 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %85,7
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor4
- CWE-1333 Inefficient Regular Expression Complexity1
- CWE-400 Uncontrolled Resource Consumption1
- CWE-409 Improper Handling of Highly Compressed Data (Data Amplification)1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
7 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
31İzleyin | CVE-2017-14158İstismar yok | Scrapy 1.4 allows remote attackers to cause a denial of service (memory consumption) via large files because arbitrarily many files are readscrapy · scrapy · CWE-400 | Yüksek7,5 | — | %2,6 | 5 Eyl 2017 |
30İzleyin | CVE-2024-3572İstismar yok | XML External Entity (XXE) Vulnerability in scrapy/scrapyscrapy · scrapy · CWE-409 | Yüksek7,5 | — | %0,8 | 15 Nis 2024 |
30İzleyin | CVE-2024-1968İstismar yok | Authorization Header Leakage in scrapy/scrapy on Scheme Change Redirectsscrapy · scrapy · CWE-200 | Yüksek7,5 | — | %0,7 | 20 May 2024 |
30İzleyin | CVE-2024-3574İstismar yok | Authorization Header Leak During Cross-Domain Redirect in scrapy/scrapyscrapy · scrapy · CWE-200 | Yüksek7,5 | — | %0,6 | 15 Nis 2024 |
26İzleyin | CVE-2022-0577İstismar yok | Exposure of Sensitive Information to an Unauthorized Actor in scrapy/scrapyscrapy · scrapy · CWE-200 | Orta6,5 | — | %1,3 | 2 Mar 2022 |
26İzleyin | CVE-2021-41125İstismar yok | HTTP authentication credential leak to target websites in scrapyscrapy · scrapy · CWE-200 | Orta6,5 | — | %1,3 | 6 Eki 2021 |
26İzleyin | CVE-2024-1892İstismar yok | ReDoS Vulnerability in scrapy/scrapy's XMLFeedSpiderscrapy · scrapy · CWE-1333 | Orta6,5 | — | %0,6 | 27 Şub 2024 |
- CVE-2017-1415831İzleyin
Scrapy 1.4 allows remote attackers to cause a denial of service (memory consumption) via large files because arbitrarily many files are read
YüksekCVSS 7,5İstismar yokEPSS %3scrapy · scrapy5 Eyl 2017
- CVE-2024-357230İzleyin
XML External Entity (XXE) Vulnerability in scrapy/scrapy
YüksekCVSS 7,5İstismar yokEPSS %1scrapy · scrapy15 Nis 2024
- CVE-2024-196830İzleyin
Authorization Header Leakage in scrapy/scrapy on Scheme Change Redirects
YüksekCVSS 7,5İstismar yokEPSS %1scrapy · scrapy20 May 2024
- CVE-2024-357430İzleyin
Authorization Header Leak During Cross-Domain Redirect in scrapy/scrapy
YüksekCVSS 7,5İstismar yokEPSS %1scrapy · scrapy15 Nis 2024
- CVE-2022-057726İzleyin
Exposure of Sensitive Information to an Unauthorized Actor in scrapy/scrapy
OrtaCVSS 6,5İstismar yokEPSS %1scrapy · scrapy2 Mar 2022
- CVE-2021-4112526İzleyin
HTTP authentication credential leak to target websites in scrapy
OrtaCVSS 6,5İstismar yokEPSS %1scrapy · scrapy6 Eki 2021
- CVE-2024-189226İzleyin
ReDoS Vulnerability in scrapy/scrapy's XMLFeedSpider
OrtaCVSS 6,5İstismar yokEPSS %1scrapy · scrapy27 Şub 2024