Vendors / Nzbget Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now Nzbget records in CISA KEV No Nzbget vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 41
NZBGet 21.1 allows authenticated remote code execution because the unarchive programs (7za and unrar) preserve executable file permissions.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01501 · Published 2023-11-22 · No fix listed
Priority LOW 20
uulib/uunconc.c in UUDeview 0.5.20, as used in nzbget before 0.3.0 and possibly other products, allows local users to overwrite arbitrary files via a symlink attack on a temporary filename generated by the tempnam functi…
CVSS 2.0 MEDIUM 4.4· Local · No auth · Interaction — · EPSS 0.00322 · Published 2008-05-16 · No fix listed CWE-59
Open these records in search → All records by CVSS severity
0 1 1 0 0
