turms-im kayıtları
turms-im üreticisine ait 5 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-256 Plaintext Storage of a Password1
- CWE-284 Improper Access Control1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-409 Improper Handling of Highly Compressed Data (Data Amplification)1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
5 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
30İzleyin | CVE-2025-66909İstismar yok | Turms AI-Serving module v0.10.0-SNAPSHOT and earlier contains an image decompression bomb denial of service vulnerability.turms-im · turms · CWE-409 | Yüksek7,5 | — | %0,5 | 19 Ara 2025 |
26İzleyin | CVE-2025-66911İstismar yok | Turms IM Server v0.10.0-SNAPSHOT and earlier contains a broken access control vulnerability in the user online status query functionality.turms-im · turms · CWE-284 | Orta6,5 | — | %0,3 | 19 Ara 2025 |
24İzleyin | CVE-2025-66910İstismar yok | Turms Server v0.10.0-SNAPSHOT and earlier contains a plaintext password storage vulnerability in the administrator authentication system.turms-im · turms · CWE-256 | Orta6,0 | — | %0,2 | 19 Ara 2025 |
24İzleyin | CVE-2025-66906İstismar yok | Cross Site Request Forgery (CSRF) vulnerability in Turms Admin API thru v0.10.0-SNAPSHOT allows attackers to gain escalated privileges.turms-im · turms · CWE-352 | Orta6,1 | — | %0,1 | 19 Ara 2025 |
21İzleyin | CVE-2025-66908İstismar yok | Turms AI-Serving module v0.10.0-SNAPSHOT and earlier contains an improper file type validation vulnerability in the OCR image upload functioturms-im · turms · CWE-434 | Orta5,3 | — | %0,4 | 19 Ara 2025 |
- CVE-2025-6690930İzleyin
Turms AI-Serving module v0.10.0-SNAPSHOT and earlier contains an image decompression bomb denial of service vulnerability.
YüksekCVSS 7,5İstismar yokEPSS %0turms-im · turms19 Ara 2025
- CVE-2025-6691126İzleyin
Turms IM Server v0.10.0-SNAPSHOT and earlier contains a broken access control vulnerability in the user online status query functionality.
OrtaCVSS 6,5İstismar yokEPSS %0turms-im · turms19 Ara 2025
- CVE-2025-6691024İzleyin
Turms Server v0.10.0-SNAPSHOT and earlier contains a plaintext password storage vulnerability in the administrator authentication system.
OrtaCVSS 6,0İstismar yokEPSS %0turms-im · turms19 Ara 2025
- CVE-2025-6690624İzleyin
Cross Site Request Forgery (CSRF) vulnerability in Turms Admin API thru v0.10.0-SNAPSHOT allows attackers to gain escalated privileges.
OrtaCVSS 6,1İstismar yokEPSS %0turms-im · turms19 Ara 2025
- CVE-2025-6690821İzleyin
Turms AI-Serving module v0.10.0-SNAPSHOT and earlier contains an improper file type validation vulnerability in the OCR image upload functio
OrtaCVSS 5,3İstismar yokEPSS %0turms-im · turms19 Ara 2025