Vendors / Creolabs Records 13 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 7 CVSS 9.0–10.0
CVSS high 3 CVSS 7.0–8.9
Exploited now Creolabs records in CISA KEV No Creolabs vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 49
Creolabs Gravity 1.0 contains a stack based buffer overflow in the operator_string_add function, resulting in remote code execution.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.038 · Published 2018-01-02 · No fix listed CWE-119
Priority MEDIUM 47
Creolabs Gravity Version: 1.0 Heap Overflow Potential Code Execution.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02462 · Published 2017-11-17 · No fix listed CWE-125
Priority MEDIUM 47
Creolabs Gravity Version: 1.0 Use-After-Free Possible code execution.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02437 · Published 2017-11-17 · No fix listed CWE-416
Priority MEDIUM 47
Creolabs Gravity version 1.0 is vulnerable to a heap overflow in an undisclosed component that can result in arbitrary code execution.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02931 · Published 2017-07-13 · No fix listed CWE-119
Priority MEDIUM 46
Creolabs Gravity version 1.0 is vulnerable to a stack overflow in the memcmp function
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02049 · Published 2017-07-13 · No fix listed CWE-119
Priority MEDIUM 46
Creolabs Gravity version 1.0 is vulnerable to a stack overflow in the string_repeat() function.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01976 · Published 2017-07-13 · No fix listed CWE-119
Priority MEDIUM 46
Creolabs Gravity version 1.0 is vulnerable to a Double Free in gravity_value resulting potentially leading to modification of unexpected memory locations
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02123 · Published 2017-07-13 · No fix listed CWE-415
Priority LOW 36
An issue was discovered in gravity through 0.8.1.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.01052 · Published 2021-09-20 · No fix listed CWE-787
Priority LOW 36
Gravity before 0.5.1 does not support a maximum recursion depth.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01456 · Published 2018-07-09 · No fix listed CWE-20
Priority LOW 35
An issue was discovered in gravity through 0.8.1.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00764 · Published 2021-09-20 · No fix listed CWE-476
Priority LOW 26
An issue was discovered in gravity through 0.8.1.
CVSS 3.1 MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00635 · Published 2021-09-20 · No fix listed CWE-476
Priority LOW 26
An issue was discovered in gravity through 0.8.1.
CVSS 3.1 MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00635 · Published 2021-09-20 · No fix listed CWE-476
Priority LOW 26
An issue was discovered in gravity through 0.8.1.
CVSS 3.1 MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00635 · Published 2021-09-20 · No fix listed CWE-476
Open these records in search → All records by CVSS severity
Critical7 High3 Medium3 Low0 No CVSS0