CVE 検索
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ（NVD、OSV、GitHub）を、CVSS、EPSS、実際に悪用されているか（CISA KEV）とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ（NVD、OSV、GitHub）を、CVSS、EPSS、実際に悪用されているか（CISA KEV）とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
| 24/11/2025 |
| GO-2025-3800 | eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper | 28/07/2025 |
| GO-2025-3799 | LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement in github.com/lf-edge/ekuiper | 28/07/2025 |
| CVE-2025-54379 | 緊急9.8 | LF Edge eKuiper is a lightweight IoT data analytics and stream processing engine running on resource-constraint edge devices. In versions before 2.2.1, there is a critical SQL Injection vulnerability in the getLast API functionality of the eKuiper project. This flaw allows unauthenticated remote attackers to execute ar | 24/07/2025 |
| GHSA-gj54-gwj9-x2c6 | 高 | eKuiper /config/uploads API arbitrary file writing may lead to RCE | 03/07/2025 |
| GHSA-fv2p-qj5p-wqq4 | 高8.5 | LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement | 03/07/2025 |
| CVE-2024-52290 | 中5.4 | LF Edge eKuiper is a lightweight internet of things (IoT) data analytics and stream processing engine. Prior to version 2.1.0 user with rights to modificate the service (e.g. kuiperUser role) can inject a cross-site scripting payload into Connection Configuration key `Name` (`confKey`) parameter. After this setup, when | 14/05/2025 |
| CVE-2024-52812 | 中5.4 | LF Edge eKuiper is an internet-of-things data analytics and stream processing engine. Prior to version 2.0.8, auser with rights to modify the service (e.g. kuiperUser role) can inject a cross-site scripting payload into the rule `id` parameter. Then, after any user with access to this service (e.g. admin) tries make an | 10/03/2025 |