CVE 検索
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ(NVD、OSV、GitHub)を、CVSS、EPSS、実際に悪用されているか(CISA KEV)とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ(NVD、OSV、GitHub)を、CVSS、EPSS、実際に悪用されているか(CISA KEV)とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
| 12/08/2020 |
| CVE-2020-15871 | 高8.8 | Sonatype Nexus Repository Manager OSS/Pro version before 3.25.1 allows Remote Code Execution. | 31/07/2020 |
| CVE-2020-15870 | 中6.1 | Sonatype Nexus Repository Manager OSS/Pro versions before 3.25.1 allow XSS (Issue 2 of 2). | 31/07/2020 |
| CVE-2020-15869 | 中5.4 | Sonatype Nexus Repository Manager OSS/Pro versions before 3.25.1 allow XSS (issue 1 of 2). | 31/07/2020 |
| CVE-2020-11415 | 中4.9 | An issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14.17 and 3.x before 3.22.1. Admin users can retrieve the LDAP server system username/password (as configured in nxrm) in cleartext. | 27/04/2020 |
| CVE-2020-11753 | 高8.8 | An issue was discovered in Sonatype Nexus Repository Manager in versions 3.21.1 and 3.22.0. It is possible for a user with appropriate privileges to create, modify, and execute scripting tasks without use of the UI or API. NOTE: in 3.22.0, scripting is disabled by default (making this not exploitable). | 20/04/2020 |
| CVE-2020-11444 | 高8.8 | Sonatype Nexus Repository Manager 3.x up to and including 3.21.2 has Incorrect Access Control. | 02/04/2020 |
| CVE-2020-10204 | 高7.2 | Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution. | 01/04/2020 |
| CVE-2020-10203 | 中4.8 | Sonatype Nexus Repository before 3.21.2 allows XSS. | 01/04/2020 |
| CVE-2020-10199KEV | 高8.8 | Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection (issue 1 of 2). | 01/04/2020 |
| CVE-2019-15588 | 高7.2 | There is an OS Command Injection in Nexus Repository Manager <= 2.14.14 (bypass CVE-2019-5475) that could allow an attacker a Remote Code Execution (RCE). All instances using CommandLineExecutor.java with user-supplied data is vulnerable, such as the Yum Configuration Capability. | 01/11/2019 |
| CVE-2019-16530 | 高7.2 | Sonatype Nexus Repository Manager 2.x before 2.14.15 and 3.x before 3.19, and IQ Server before 72, has remote code execution. | 21/10/2019 |
| CVE-2019-15893 | 高7.2 | Sonatype Nexus Repository Manager 2.x before 2.14.15 allows Remote Code Execution. | 16/10/2019 |
| CVE-2019-5475 | 高8.8 | The Nexus Yum Repository Plugin in v2 is vulnerable to Remote Code Execution when instances using CommandLineExecutor.java are supplied vulnerable data, such as the Yum Configuration Capability. | 03/09/2019 |
| CVE-2019-14469 | 中5.4 | In Nexus Repository Manager before 3.18.0, users with elevated privileges can create stored XSS. | 22/08/2019 |
| CVE-2019-9630 | 高7.5 | Sonatype Nexus Repository Manager before 3.17.0 has a weak default of giving any unauthenticated user read permissions on the repository files and images. | 08/07/2019 |
| CVE-2019-9629 | 緊急9.8 | Sonatype Nexus Repository Manager before 3.17.0 establishes a default administrator user with weak defaults (fixed credentials). | 08/07/2019 |