Canna

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Canna records in CISA KEV

No Canna vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2002-01127 CVE-2002-1159 · GHSA-v63f-8cmr-47h8

LOW 32

Canna 3.6 and earlier does not properly validate requests, which allows remote attackers to cause a denial of service or information leak.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.01898 Published 2004-09-01 Fixed

TI-2002-01126 CVE-2002-1158 · GHSA-85vx-vq88-55q2

LOW 32

Buffer overflow in the irw_through function for Canna 3.5b2 and earlier allows local users to execute arbitrary code as the bin user.

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.00494 Published 2004-09-01 Fixed