Trcore's vulnerability footprint centers on its DVC (Data Version Control) product, a version-control and data-management tool with a niche but notable presence in the machine-learning and data-science ecosystem. Vulnerabilities affecting the vendor skew strongly toward critical-severity outcomes and recur through path-traversal, file-upload, and cryptographic-key weaknesses characteristic of tools that handle file operations and credential storage. Defenders should prioritize advisories from this vendor and verify that downstream data pipelines are not at risk; current severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Trcore over time
Signals from CVEs in this vendor scope (8 CVEs).
8 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2024-11311CRITICAL The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows unauthenticated remote attackers to upload arbitrary files to | Nov 18, 2024 | 9.8 | 30 | NO | NO |
CVE-2024-11315CRITICAL The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows unauthenticated remote attackers to upload arbitrary files to | Nov 18, 2024 | 9.8 | 28 | NO | NO |
CVE-2024-11314CRITICAL The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows unauthenticated remote attackers to upload arbitrary files to | Nov 18, 2024 | 9.8 | 28 | NO | NO |
CVE-2024-11313CRITICAL The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows unauthenticated remote attackers to upload arbitrary files to | Nov 18, 2024 | 9.8 | 28 | NO | NO |
CVE-2024-11312CRITICAL The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows unauthenticated remote attackers to upload arbitrary files to | Nov 18, 2024 | 9.8 | 28 | NO | NO |
CVE-2024-11310HIGH The DVC from TRCore has a Path Traversal vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files. | Nov 18, 2024 | 7.5 | 21 | NO | NO |
CVE-2024-11309HIGH The DVC from TRCore has a Path Traversal vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files. | Nov 18, 2024 | 7.5 | 21 | NO | NO |
CVE-2024-11308MEDIUM The DVC from TRCore encrypts files using a hardcoded key. Attackers can use this key to decrypt the files and restore the original content. | Nov 18, 2024 | 5.5 | 17 | NO | NO |
Signals from CVEs in this vendor scope (8 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Trcore.
Media articles that mention a CVE ID that affects a product developed by Trcore — matched by CVE ID, not by vendor name.