Pax Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Pax Project records in CISA KEV

No Pax Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Pax · all components

TI-2015-01074 CVE-2015-1193 · GHSA-qgfj-3m2f-3phv

LOW 26

Multiple directory traversal vulnerabilities in pax 1:20140703 allow remote attackers to write to arbitrary files via a (1) full pathname or (2) ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01552 Published 2015-01-21 No fix listed CWE-22

TI-2015-01075 CVE-2015-1194 · GHSA-x48q-xr66-wp2x

LOW 23

pax 1:20140703 allows remote attackers to write to arbitrary files via a symlink attack in an archive.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01695 Published 2015-01-21 No fix listed CWE-59