Read the docs

Pocoproject

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Pocoproject records in CISA KEV

No Pocoproject vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Poco 4 records MEDIUM Poco C++ Libraries 1 record LOW

Records

5 records

TI-2023-28771 CVE-2023-52389 · GHSA-3g75-6vfp-4hm3

UTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer overflow and resultant stack…

Priority MEDIUM 50

UTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer overflow and resultant stack buffer overflow because Poco::UTF32Encoding::convert() and Poco::UTF32::queryConvert() may return a negative integer if a UTF-32 by…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00851 Published 2024-01-27 No fix listed CWE-190
TI-2017-14681 CVE-2017-1000472 · GHSA-46gc-5p3g-hwvg

The ZipCommon::isValidPath() function in Zip/src/ZipCommon.cpp in POCO C++ Libraries…

Priority LOW 32

The ZipCommon::isValidPath() function in Zip/src/ZipCommon.cpp in POCO C++ Libraries before 1.8 does not properly restrict the filename value in the ZIP header, which allows attackers to conduct absolute path traversal a…

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.01681 Published 2018-01-03 No fix listed CWE-22
TI-2014-00333 CVE-2014-0350 · GHSA-whgv-p774-rw69

The Poco::Net::X509Certificate::verify method in the NetSSL library in POCO C++ Libraries…

Priority LOW 31

The Poco::Net::X509Certificate::verify method in the NetSSL library in POCO C++ Libraries before 1.4.6p4 allows man-in-the-middle attackers to spoof SSL servers via crafted DNS PTR records that are requested during compa…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.01218 Published 2014-04-26 No fix listed CWE-310
Open these records in search →