TI-2025-28837 CVE-2025-45766 · GHSA-3fpm-h3c3-72hq
poco v1.14.1-release was discovered to contain weak encryption.
Priority LOW 30
poco v1.14.1-release was discovered to contain weak encryption.
Vulnerabilities
4 records
TI-2025-05776 CVE-2025-6375 · GHSA-xwcq-qmxg-r8f4
poco MultipartReader.cpp MultipartInputStream null pointer dereference
Priority MEDIUM 55
A vulnerability was found in poco up to 1.14.1.
TI-2023-28771 CVE-2023-52389 · GHSA-3g75-6vfp-4hm3
UTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer overflow and resultant stack…
Priority MEDIUM 50
UTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer overflow and resultant stack buffer overflow because Poco::UTF32Encoding::convert() and Poco::UTF32::queryConvert() may return a negative integer if a UTF-32 by…
TI-2017-14681 CVE-2017-1000472 · GHSA-46gc-5p3g-hwvg
The ZipCommon::isValidPath() function in Zip/src/ZipCommon.cpp in POCO C++ Libraries…
Priority LOW 32
The ZipCommon::isValidPath() function in Zip/src/ZipCommon.cpp in POCO C++ Libraries before 1.8 does not properly restrict the filename value in the ZIP header, which allows attackers to conduct absolute path traversal a…