Read the docs

Pocoproject

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Pocoproject records in CISA KEV

No Pocoproject vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Poco 4 records MEDIUM Poco C++ Libraries 1 record LOW

Records

4 records in Poco · all components

TI-2023-28771 CVE-2023-52389 · GHSA-3g75-6vfp-4hm3

UTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer overflow and resultant stack…

Priority MEDIUM 50

UTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer overflow and resultant stack buffer overflow because Poco::UTF32Encoding::convert() and Poco::UTF32::queryConvert() may return a negative integer if a UTF-32 by…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00851 Published 2024-01-27 No fix listed CWE-190
TI-2017-14681 CVE-2017-1000472 · GHSA-46gc-5p3g-hwvg

The ZipCommon::isValidPath() function in Zip/src/ZipCommon.cpp in POCO C++ Libraries…

Priority LOW 32

The ZipCommon::isValidPath() function in Zip/src/ZipCommon.cpp in POCO C++ Libraries before 1.8 does not properly restrict the filename value in the ZIP header, which allows attackers to conduct absolute path traversal a…

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.01681 Published 2018-01-03 No fix listed CWE-22
Open these records in search →