shadowsocks kayıtları
shadowsocks üreticisine ait 5 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %60
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-306 Missing Authentication for Critical Function3
- CWE-494 Download of Code Without Integrity Check1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
5 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2023-27574İstismar yok | ShadowsocksX-NG 1.10.0 signs with com.apple.security.get-task-allow entitlements because of CODE_SIGNING_INJECT_BASE_ENTITLEMENTS.shadowsocks · shadowsocksx-ng · CWE-494 | Kritik9,8 | — | %0,4 | 3 Mar 2023 |
31İzleyin | CVE-2019-5163İstismar yok | An exploitable denial-of-service vulnerability exists in the UDPRelay functionality of Shadowsocks-libev 3.3.2.shadowsocks · shadowsocks-libev · CWE-306 | Yüksek7,5 | — | %2,6 | 3 Ara 2019 |
31İzleyin | CVE-2017-15924İstismar yok | In manager.c in ss-manager in shadowsocks-libev 3.1.0, improper parsing allows command injection via shell metacharacters in a JSON configurshadowsocks · shadowsocks-libev · CWE-78 | Yüksek7,8 | — | %1,3 | 27 Eki 2017 |
31İzleyin | CVE-2019-5164İstismar yok | An exploitable code execution vulnerability exists in the ss-manager binary of Shadowsocks-libev 3.3.2.shadowsocks · shadowsocks-libev · CWE-306 | Yüksek7,8 | — | %0,8 | 3 Ara 2019 |
29İzleyin | CVE-2019-5152İstismar yok | An exploitable information disclosure vulnerability exists in the network packet handling functionality of Shadowsocks-libev 3.3.2.shadowsocks · shadowsocks-libev · CWE-306 | Yüksek7,4 | — | %1,4 | 18 Ara 2019 |
- CVE-2023-2757439İzleyin
ShadowsocksX-NG 1.10.0 signs with com.apple.security.get-task-allow entitlements because of CODE_SIGNING_INJECT_BASE_ENTITLEMENTS.
KritikCVSS 9,8İstismar yokEPSS %0shadowsocks · shadowsocksx-ng3 Mar 2023
- CVE-2019-516331İzleyin
An exploitable denial-of-service vulnerability exists in the UDPRelay functionality of Shadowsocks-libev 3.3.2.
YüksekCVSS 7,5İstismar yokEPSS %3shadowsocks · shadowsocks-libev3 Ara 2019
- CVE-2017-1592431İzleyin
In manager.c in ss-manager in shadowsocks-libev 3.1.0, improper parsing allows command injection via shell metacharacters in a JSON configur
YüksekCVSS 7,8İstismar yokEPSS %1shadowsocks · shadowsocks-libev27 Eki 2017
- CVE-2019-516431İzleyin
An exploitable code execution vulnerability exists in the ss-manager binary of Shadowsocks-libev 3.3.2.
YüksekCVSS 7,8İstismar yokEPSS %1shadowsocks · shadowsocks-libev3 Ara 2019
- CVE-2019-515229İzleyin
An exploitable information disclosure vulnerability exists in the network packet handling functionality of Shadowsocks-libev 3.3.2.
YüksekCVSS 7,4İstismar yokEPSS %1shadowsocks · shadowsocks-libev18 Ara 2019