İçeriğe atla
Noroxi

sylabs kayıtları

sylabs üreticisine ait 18 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
0
Düzeltme kaydı olan
%88,9
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 19
  3. 20
  4. 21
  5. 22
  6. 23

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

18 kayıt
  • CVE-2021-33027
    39İzleyin

    Sylabs Singularity Enterprise through 1.6.2 has Insufficient Entropy in a nonce.

    KritikCVSS 9,8İstismar yokEPSS %1

    sylabs · singularity19 Tem 2021

  • CVE-2021-33622
    39İzleyin

    Sylabs Singularity 3.5.x and 3.6.x, and SingularityPRO before 3.5-8, has an Incorrect Check of a Function's Return Value.

    KritikCVSS 9,8İstismar yokEPSS %1

    sylabs · singularity15 Haz 2021

  • CVE-2022-39237
    39İzleyin

    Digital Signature Hash Algorithms Not Validated in sylabs/sif

    KritikCVSS 9,8İstismar yokEPSS %0

    sylabs · singularity image format6 Eki 2022

  • CVE-2020-15229
    38İzleyin

    Path traversal and files overwrite with unsquashfs

    KritikCVSS 9,3İstismar yokEPSS %2

    sylabs · singularity14 Eki 2020

  • CVE-2019-11328
    36İzleyin

    An issue was discovered in Singularity 3.1.0 to 3.2.0-rc2, a malicious user with local/network access to the host system (e.g.

    YüksekCVSS 8,8İstismar yokEPSS %2

    sylabs · singularity14 May 2019

  • CVE-2020-25040
    36İzleyin

    Sylabs Singularity through 3.6.2 has Insecure Permissions on temporary directories used in explicit and implicit container build operations,

    YüksekCVSS 8,8İstismar yokEPSS %2

    sylabs · singularity16 Eyl 2020

  • CVE-2020-25039
    33İzleyin

    Sylabs Singularity 3.2.0 through 3.6.2 has Insecure Permissions on temporary directories used in fakeroot or user namespace container execut

    YüksekCVSS 8,1İstismar yokEPSS %2

    sylabs · singularity16 Eyl 2020

  • CVE-2018-19295
    31İzleyin

    Sylabs Singularity 2.4 to 2.6 allows local users to conduct Improper Input Validation attacks.

    YüksekCVSS 7,8İstismar yokEPSS %0

    sylabs · singularity17 Ara 2018

  • CVE-2023-30549
    31İzleyin

    Unpatched extfs vulnerabilities are exploitable through suid-mode Apptainer

    YüksekCVSS 7,8İstismar yokEPSS %0

    lfprojects · apptainer25 Nis 2023

  • CVE-2020-13846
    30İzleyin

    Sylabs Singularity 3.5.0 through 3.5.3 fails to report an error in a Status Code.

    YüksekCVSS 7,5İstismar yokEPSS %1

    sylabs · singularity14 Tem 2020

  • CVE-2019-19724
    30İzleyin

    Insecure permissions (777) are set on $HOME/.singularity when it is newly created by Singularity (version from 3.3.0 to 3.5.1), which could

    YüksekCVSS 7,5İstismar yokEPSS %1

    sylabs · singularity18 Ara 2019

  • CVE-2021-29499
    30İzleyin

    Predictable SIF UUID Identifiers

    YüksekCVSS 7,5İstismar yokEPSS %0

    sylabs · singularity image format7 May 2021

  • CVE-2022-23538
    30İzleyin

    User credentials leaked to third-party service via HTTP redirect in scs-library-client

    YüksekCVSS 7,6İstismar yokEPSS %0

    sylabs · singularity container services library17 Oca 2023

  • CVE-2020-13847
    30İzleyin

    Sylabs Singularity 3.0 through 3.5 lacks support for an Integrity Check.

    YüksekCVSS 7,5İstismar yokEPSS %0

    sylabs · singularity14 Tem 2020

  • CVE-2020-13845
    30İzleyin

    Sylabs Singularity 3.0 through 3.5 has Improper Validation of an Integrity Check Value.

    YüksekCVSS 7,5İstismar yokEPSS %0

    sylabs · singularity14 Tem 2020

  • CVE-2018-12021
    26İzleyin

    Singularity 2.3.0 through 2.5.1 is affected by an incorrect access control on systems supporting overlay file system.

    OrtaCVSS 6,5İstismar yokEPSS %1

    sylabs · singularity5 Tem 2018

  • CVE-2021-32635
    25İzleyin

    Action Commands (run/shell/exec) Against Library URIs Ignore Configured Remote Endpoint

    OrtaCVSS 6,3İstismar yokEPSS %1

    sylabs · singularity28 May 2021

  • CVE-2021-29136
    22İzleyin

    Open Container Initiative umoci before 0.4.7 allows attackers to overwrite arbitrary host paths via a crafted image that causes symlink trav

    OrtaCVSS 5,5İstismar yokEPSS %0

    linuxfoundation · umoci6 Nis 2021