İçeriğe atla
Noroxi

zulip kayıtları

zulip üreticisine ait 62 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%14,5
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

62 kayıt
  • CVE-2021-43799
    41Planlayın

    RabbitMQ exposes ports with weak default secrets in Zulip Server

    KritikCVSS 9,8Kavram kanıtıEPSS %5

    zulip · zulip25 Oca 2022

  • CVE-2020-10857
    40Planlayın

    Zulip Desktop before 5.0.0 improperly uses shell.openExternal and shell.openItem with untrusted content, leading to remote code execution.

    KritikCVSS 9,8İstismar yokEPSS %3

    zulip · zulip desktop5 Şub 2021

  • CVE-2019-18933
    39İzleyin

    In Zulip Server versions from 1.7.0 to before 2.0.7, a bug in the new user signup process meant that users who registered their account usin

    KritikCVSS 9,8İstismar yokEPSS %1

    zulip · zulip server21 Kas 2019

  • CVE-2022-21706
    39İzleyin

    Multi-use invitations can grant access to other organizations in Zulip

    KritikCVSS 9,8İstismar yokEPSS %1

    zulip · zulip server25 Şub 2022

  • CVE-2020-15070
    35İzleyin

    Zulip Server 2.x before 2.1.7 allows eval injection if a privileged attacker were able to write directly to the postgres database, and chose

    YüksekCVSS 8,8İstismar yokEPSS %1

    zulip · zulip server21 Ağu 2020

  • CVE-2017-0910
    35İzleyin

    In Zulip Server before 1.7.1, on a server with multiple realms, a vulnerability in the invitation system lets an authorized user of one real

    YüksekCVSS 8,8İstismar yokEPSS %1

    zulip · zulip server27 Kas 2017

  • CVE-2021-3967
    35İzleyin

    Improper Access Control in zulip/zulip

    YüksekCVSS 8,8İstismar yokEPSS %0

    zulip · zulip26 Şub 2022

  • CVE-2022-31168
    35İzleyin

    Zulip Server insufficient authorization for changing bot roles

    YüksekCVSS 8,8İstismar yokEPSS %0

    zulip · zulip22 Tem 2022

  • CVE-2025-31478
    32İzleyin

    Zulip Authentication Backend Configuration Bypass

    YüksekCVSS 8,2İstismar yokEPSS %0

    zulip · zulip server16 Nis 2025

  • CVE-2020-14215
    30İzleyin

    Zulip Server before 2.1.5 has Incorrect Access Control because 0198_preregistrationuser_invited_as adds the administrator role to invitation

    YüksekCVSS 7,5İstismar yokEPSS %0

    zulip · zulip server21 Ağu 2020

  • CVE-2016-4427
    30İzleyin

    In zulip before 1.3.12, deactivated users could access messages if SSO was enabled.

    YüksekCVSS 7,5İstismar yokEPSS %0

    zulip · zulip28 Tem 2022

  • CVE-2024-36612
    30İzleyin

    Zulip from 8.0 to 8.3 contains a memory leak vulnerability in the handling of popovers.

    YüksekCVSS 7,5İstismar yokEPSS %0

    zulip · zulip server29 Kas 2024

  • CVE-2022-24751
    29İzleyin

    Race condition in Zulip

    YüksekCVSS 7,4İstismar yokEPSS %0

    zulip · zulip16 Mar 2022

  • CVE-2021-41115
    27İzleyin

    Regular expression denial-of-service in Zulip

    OrtaCVSS 6,5İstismar yokEPSS %1

    zulip · zulip7 Eki 2021

  • CVE-2024-56136
    27İzleyin

    /api/v1/jwt/fetch_api_key endpoint can leak if an email address has an account in Zulip server

    OrtaCVSS 6,9İstismar yokEPSS %0

    zulip · zulip server16 Oca 2025

  • CVE-2017-0896
    26İzleyin

    Zulip Server 1.5.1 and below suffer from an error in the implementation of the invite_by_admins_only setting in the Zulip group chat applica

    OrtaCVSS 6,5İstismar yokEPSS %1

    zulip · zulip server2 Haz 2017

  • CVE-2019-16215
    26İzleyin

    The Markdown parser in Zulip server before 2.0.5 used a regular expression vulnerable to exponential backtracking.

    OrtaCVSS 6,5İstismar yokEPSS %1

    zulip · zulip server18 Eyl 2019

  • CVE-2024-27286
    26İzleyin

    Moving single messages from public to private streams leaves them accessible

    OrtaCVSS 6,5İstismar yokEPSS %0

    zulip · zulip server20 Mar 2024

  • CVE-2023-32678
    26İzleyin

    Zulip vulnerable to insufficient authorization check for edition/deletion of messages and topics in private streams by former subscribers

    OrtaCVSS 6,5İstismar yokEPSS %0

    zulip · zulip server25 Ağu 2023

  • CVE-2019-19775
    24İzleyin

    The image thumbnailing handler in Zulip Server versions 1.9.0 to before 2.0.8 allowed an open redirect that was visible to logged-in users.

    OrtaCVSS 6,1İstismar yokEPSS %0

    zulip · zulip server18 Ara 2019

  • CVE-2018-9987
    24İzleyin

    In Zulip Server versions 1.5.x, 1.6.x, and 1.7.x before 1.7.2, there was an XSS issue with muting notifications.

    OrtaCVSS 6,1İstismar yokEPSS %0

    zulip · zulip server18 Nis 2018

  • CVE-2018-9986
    24İzleyin

    In Zulip Server versions before 1.7.2, there were XSS issues with the frontend markdown processor.

    OrtaCVSS 6,1İstismar yokEPSS %0

    zulip · zulip server18 Nis 2018

  • CVE-2018-9990
    24İzleyin

    In Zulip Server versions before 1.7.2, there was an XSS issue with stream names in topic typeahead.

    OrtaCVSS 6,1İstismar yokEPSS %0

    zulip · zulip server18 Nis 2018

  • CVE-2020-9445
    24İzleyin

    Zulip Server before 2.1.3 allows XSS via the modal_link feature in the Markdown functionality.

    OrtaCVSS 6,1İstismar yokEPSS %0

    zulip · zulip server20 Nis 2020

  • CVE-2020-9444
    24İzleyin

    Zulip Server before 2.1.3 allows reverse tabnabbing via the Markdown functionality.

    OrtaCVSS 6,1İstismar yokEPSS %0

    zulip · zulip server20 Nis 2020