Snyk kayıtları
snyk üreticisine ait 10 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 3
- Düzeltme kaydı olan
- %80
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')5
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-287 Improper Authentication1
- CWE-522 Insufficiently Protected Credentials1
- CWE-532 Insertion of Sensitive Information into Log File1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
10 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2022-24441İstismar yok | The package snyk before 1.1064.0 are vulnerable to Code Injection when analyzing a project.snyk · snyk cli · CWE-78 | Yüksek8,8 | — | %0,7 | 30 Kas 2022 |
32İzleyin | CVE-2019-3800İstismar yok | CF CLI writes the client id and secret to config filepivotal · cloud foundry command line interface · CWE-522 | Yüksek7,8 | — | %2,0 | 5 Ağu 2019 |
31İzleyin | CVE-2022-40764İstismar yok | Snyk CLI before 1.996.0 allows arbitrary command execution, affecting Snyk IDE plugins and the snyk npm package.snyk · cli · CWE-78 | Yüksek7,8 | — | %0,6 | 3 Eki 2022 |
30İzleyin | CVE-2024-48963İstismar yok | The package Snyk CLI before 1.1294.0 is vulnerable to Code Injection when scanning an untrusted PHP project.snyk · snyk cli · CWE-78 | Yüksek7,5 | — | %0,4 | 23 Eki 2024 |
30İzleyin | CVE-2024-48964İstismar yok | The package Snyk CLI before 1.1294.0 is vulnerable to Code Injection when scanning an untrusted Gradle project.snyk · snyk cli · CWE-78 | Yüksek7,5 | — | %0,4 | 23 Eki 2024 |
26İzleyin | CVE-2022-22984İstismar yok | The package snyk before 1.1064.0; the package snyk-mvn-plugin before 2.31.3; the package snyk-gradle-plugin before 3.24.5; the package @snyksnyk · snyk cli · CWE-78 | Orta6,3 | — | %3,1 | 30 Kas 2022 |
21İzleyin | CVE-2023-1065İstismar yok | This vulnerability in the Snyk Kubernetes Monitor can result in irrelevant data being posted to a Snyk Organization, which could in turn obfsnyk · kubernetes monitor · CWE-287 | Orta5,3 | — | %0,6 | 28 Şub 2023 |
21İzleyin | CVE-2023-1767Kavram kanıtı | The Snyk Advisor website (https://snyk.io/advisor/) was vulnerable to a stored XSS prior to 28th March 2023.snyk · advisor · CWE-79 | Orta5,4 | — | %0,5 | 20 Nis 2023 |
19İzleyin | CVE-2020-7649İstismar yok | This affects the package snyk-broker before 4.73.0.snyk · broker · CWE-22 | Orta4,9 | — | %1,6 | 25 Tem 2022 |
4İzleyin | CVE-2025-6624İstismar yok | Versions of the package snyk before 1.1297.3 are vulnerable to Insertion of Sensitive Information into Log File through local Snyk CLI debugsnyk · snyk cli · CWE-532 | Düşük1,2 | — | %0,1 | 26 Haz 2025 |
- CVE-2022-2444135İzleyin
The package snyk before 1.1064.0 are vulnerable to Code Injection when analyzing a project.
YüksekCVSS 8,8İstismar yokEPSS %0snyk · snyk cli30 Kas 2022
- CVE-2019-380032İzleyin
CF CLI writes the client id and secret to config file
YüksekCVSS 7,8İstismar yokEPSS %2pivotal · cloud foundry command line interface5 Ağu 2019
- CVE-2022-4076431İzleyin
Snyk CLI before 1.996.0 allows arbitrary command execution, affecting Snyk IDE plugins and the snyk npm package.
YüksekCVSS 7,8İstismar yokEPSS %0snyk · cli3 Eki 2022
- CVE-2024-4896330İzleyin
The package Snyk CLI before 1.1294.0 is vulnerable to Code Injection when scanning an untrusted PHP project.
YüksekCVSS 7,5İstismar yokEPSS %0snyk · snyk cli23 Eki 2024
- CVE-2024-4896430İzleyin
The package Snyk CLI before 1.1294.0 is vulnerable to Code Injection when scanning an untrusted Gradle project.
YüksekCVSS 7,5İstismar yokEPSS %0snyk · snyk cli23 Eki 2024
- CVE-2022-2298426İzleyin
The package snyk before 1.1064.0; the package snyk-mvn-plugin before 2.31.3; the package snyk-gradle-plugin before 3.24.5; the package @snyk
OrtaCVSS 6,3İstismar yokEPSS %3snyk · snyk cli30 Kas 2022
- CVE-2023-106521İzleyin
This vulnerability in the Snyk Kubernetes Monitor can result in irrelevant data being posted to a Snyk Organization, which could in turn obf
OrtaCVSS 5,3İstismar yokEPSS %0snyk · kubernetes monitor28 Şub 2023
- CVE-2023-176721İzleyin
The Snyk Advisor website (https://snyk.io/advisor/) was vulnerable to a stored XSS prior to 28th March 2023.
OrtaCVSS 5,4Kavram kanıtıEPSS %0snyk · advisor20 Nis 2023
- CVE-2020-764919İzleyin
This affects the package snyk-broker before 4.73.0.
OrtaCVSS 4,9İstismar yokEPSS %1snyk · broker25 Tem 2022
- CVE-2025-66244İzleyin
Versions of the package snyk before 1.1297.3 are vulnerable to Insertion of Sensitive Information into Log File through local Snyk CLI debug
DüşükCVSS 1,2İstismar yokEPSS %0snyk · snyk cli26 Haz 2025