Unadf Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Unadf Project records in CISA KEV

No Unadf Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2016-01141 CVE-2016-1243 · GHSA-mh6c-rpq6-7gj2

MEDIUM 51

Stack-based buffer overflow in the extractTree function in unADF allows remote attackers to execute arbitrary code via a long pathname.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.06288 Published 2016-10-03 No fix listed CWE-119

TI-2016-01142 CVE-2016-1244 · GHSA-wq4c-pjjw-v66r

MEDIUM 47

The extractTree function in unADF allows remote attackers to execute arbitrary code via shell metacharacters in a directory name in an adf file.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.06335 Published 2016-10-03 No fix listed CWE-20